Privacy Policy

Welcome to UltraFit. Your privacy is important to us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our fitness platform, including our web application and mobile app. By using UltraFit, you agree to the practices described in this policy.

1. Information We Collect

We collect the following categories of information to provide and improve our fitness services:

Profile Data

Your name, email address, date of birth, and gender. This information is collected during account registration and is used to personalize your experience.

Health & Body Data

Height, weight, body fat percentage, body measurements (chest, waist, hips, biceps, thighs), BMI, BMR, and TDEE. This data is used to generate personalized workout and diet plans tailored to your fitness goals.

Medical Information

Injuries, allergies, medications, medical conditions, and emergency contact information. This data is collected voluntarily and is used to ensure that generated fitness and nutrition plans are safe and appropriate for your health profile.

Fitness Data

Workout history, exercise tracking (sets, reps, weight lifted), personal records, and workout streaks. This data powers your progress tracking and helps our AI generate better plans over time.

Nutrition Data

Meal logs, calorie and macronutrient tracking, and dietary restrictions or preferences. This information is used to generate and optimize personalized diet plans.

Gym Affiliation

Information about your gym membership and affiliation, if applicable. This is used to connect you with your gym's management features within the platform.

App Preferences

Language preference and theme settings. These are stored to maintain a consistent user experience across sessions.

2. How We Use Your Data

We use your data for the following purposes:

• Personalizing your fitness experience based on your profile, health data, and goals
• Generating AI-powered workout and diet plans tailored to your body metrics, medical information, and preferences
• Tracking your fitness progress, personal records, and workout history
• Facilitating gym membership management and communication between gym managers and members
• Sending important account-related notifications via email
• Improving our platform and AI algorithms to provide better recommendations

3. Data Storage & Security

We take the security of your data seriously and implement the following measures to protect it:

• All data in transit is encrypted using HTTPS/TLS protocols
• Authentication is secured with JWT tokens with automatic expiration and refresh mechanisms
• Passwords are securely hashed using industry-standard algorithms and are never stored in plain text
• On mobile devices, authentication tokens are stored in the platform's secure keychain (iOS Keychain / Android Keystore)
• All communication between the app and our servers is conducted exclusively over HTTPS

4. Third-Party Services

We use the following third-party services to operate our platform:

OpenAI

We use OpenAI's API on our backend servers to generate personalized workout and diet plans. Your health data, body metrics, and fitness goals are sent to OpenAI's API to produce tailored recommendations. OpenAI processes this data according to their privacy policy and data usage agreements. No personally identifiable information (such as your name or email) is sent to OpenAI.

Railway (Backend Hosting)

Our backend API and PostgreSQL database are hosted on Railway. Your data is stored in a secure, managed database environment with encrypted connections.

Vercel (Web Hosting)

Our web application is hosted on Vercel. Vercel serves the frontend application and does not have direct access to your personal data stored in our database.

We do not use any third-party tracking, analytics, or advertising services. We do not sell, rent, or share your personal data with advertisers or data brokers.

5. Data We Do NOT Collect

UltraFit respects your privacy and does not access or collect the following:

• Location data (GPS or network-based)
• Camera or photo library access
• Microphone or audio data
• Contacts or address book information
• Advertising identifiers or third-party tracking data

6. Your Rights

You have the following rights regarding your personal data:

• Right to Access: You can view all personal data we hold about you through your account settings
• Right to Correction: You can update or correct your personal information at any time through your profile
• Right to Deletion: You can request the deletion of your account and all associated data by contacting us or using the account deletion feature in the app
• Right to Data Portability: You can request an export of your data in a standard format
• Right to Withdraw Consent: You can withdraw your consent for data processing at any time by deleting your account

To exercise any of these rights, please contact us at mohamed.mbarek.isi@icloud.com.

7. Children's Privacy

UltraFit is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make significant changes, we will notify users through the app or via email. We encourage you to review this policy periodically. The "Last updated" date at the top of this page indicates when this policy was last revised.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Developer: Mohamed Mbarek

Email: mohamed.mbarek.isi@icloud.com