## Privacy Policy

**Effective date:** 10 May 2026
**Last updated:** 10 May 2026

This Privacy Policy explains how **Anabolic AI** ("we", "our", "the app") collects, uses, and protects your information when you use our iOS application.

By using Anabolic AI you agree to the practices described here.

### 1. Information we collect

**Account information**
- Email address, display name (when you create an account or sign in with Apple)
- Authentication tokens (handled by Firebase Auth and Apple)

**Profile and fitness data**
- Age, gender, height, weight, training experience, fitness goal, equipment, schedule, injuries
- Workout sessions: exercises, sets, reps, weights, durations, rest times
- Personal records and progression curves
- Training programs you create or import

**Nutrition data**
- Meals you log, including food names, portions, calories, macros
- Photos of food you submit for AI analysis (processed and discarded — not retained)
- Barcode scans (used to fetch nutrition info from public databases)

**Body progress data**
- Body measurement logs you enter
- Progress photos you take or upload (stored on your device by default; synced only if you opt in)

**Purchase data**
- Subscription status (managed by RevenueCat and Apple)
- Receipts and entitlement information

**Device & usage data**
- Anonymous crash reports and performance metrics
- Device identifier (only if you grant App Tracking Transparency permission for advertising)

### 2. How we use your information

- **Generate AI training programs** tailored to your profile and goals (via Google Gemini API)
- **Analyze food photos** for nutrition estimates (via Google Gemini API; images are not retained after analysis)
- **Track your progress** and produce weekly AI insights
- **Provide premium features** verified through RevenueCat and Apple
- **Show non-personalized banner ads** to free users (Google AdMob, only with your tracking consent)
- **Improve the app** through anonymous crash reports

We **do not** sell your personal data. We **do not** use your data to train any AI model.

### 3. Third-party services

Anabolic AI relies on the following providers. Each has its own privacy policy.

| Service | Purpose | Data shared |
|---|---|---|
| Firebase Auth | Authentication | Email, hashed password, auth tokens |
| Cloud Firestore | Cloud backup of programs and shared content | Profile data, programs |
| Sign in with Apple | Authentication | Apple-managed token, optionally name + relay email |
| RevenueCat | Subscription management | App User ID, receipts |
| Google AdMob | Banner ads (free tier) | Device identifier (only with ATT consent) |
| Google Gemini API | AI program generation, food photo analysis | Anonymized prompt with profile data; food photos (not retained by us) |

### 4. Data sharing

We share data only with the third-party services listed above and only as required to deliver app functionality. We do not share your data with advertisers or data brokers.

### 5. Data retention

- **Workouts, programs, profile, body data:** retained for as long as your account exists
- **Food photos:** processed in memory by Gemini and discarded immediately after analysis
- **Crash logs:** retained for 90 days
- After account deletion, all linked data is removed within 30 days

### 6. Your rights

Depending on where you live (GDPR, CCPA, KVKK, etc.) you have the right to:

- **Access** the personal data we hold about you
- **Correct** inaccurate data
- **Delete** your account and all associated data
- **Export** a copy of your data
- **Withdraw consent** for tracking at any time (iOS Settings → Privacy → Tracking)
- **Lodge a complaint** with your local data protection authority

To exercise any of these rights, email **privacy@anabolicai.app** from the address tied to your account. We respond within 30 days.

### 7. Account deletion

You can delete your account at any time inside the app: **Settings → Account → Delete Account**. This permanently removes your profile, workouts, photos, programs, and any cloud-synced data. The action cannot be undone.

### 8. Children

Anabolic AI is not intended for users under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact privacy@anabolicai.app and we will delete it.

### 9. Security

We use industry-standard measures (HTTPS in transit, Firebase encryption at rest, Apple Keychain where applicable) to protect your data. No system is 100% secure; please use a strong password and enable 2FA on your Apple ID.

### 10. Changes to this policy

We may update this policy from time to time. The "Effective date" at the top reflects the current version. Material changes will be announced inside the app.

### 11. Contact

For privacy questions or requests:
- **Email:** privacy@anabolicai.app
- **Support:** support@anabolicai.app