Privacy Policy

1. Introduction

AI Body Builder ("AI Body Builder," "we," "us," or "our") provides an AI-powered fitness and nutrition coaching mobile application and this website (together, the "Service"). We built the app to be privacy-first by design: your personal fitness data lives on your own phone, not on our servers. This Privacy Policy explains the small amount of information that does leave your device, why, and the choices you have.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Privacy at a glance

• Your data stays on your phone. Your profile, health answers, workout plans, logs, progress photos, and coach conversations are stored locally on your device — we don't keep a copy on a server.
• No ads. No analytics. No trackers. We do not include advertising SDKs, analytics SDKs, or third-party behavioral trackers in the app.
• We never sell your data. There is nothing to sell — and we wouldn't.
• You can use the coach by just describing your situation. No long forms required — tell it your goal or how you're feeling in plain language and it responds.
• The only things that leave your phone are what's needed to sign you in, run the AI that generates your answers, and process your subscription. Details below.

3. What stays on your phone

The following is stored only on your device. It is not uploaded to, mirrored on, or synced to our servers, and we cannot see it:

• Profile & biometrics: age, gender, height, and weight.
• Health-screening (PAR-Q) answers and anything you tell the coach about how you feel or conditions you have.
• Fitness inputs: goals, available equipment, and your workout window.
• Your plans: generated Seasons, routines, sets, reps, and rest.
• Activity & nutrition logs: completed exercises, session status, streaks, adherence, and the calories/macros you log.
• Progress photos: if you use this feature, your front/side photos are compressed and saved on your phone. They are never uploaded.
• Coach conversations: your chat history with the AI coach.

Because this data lives on your device, deleting the app or wiping the device removes it. We recommend your device's own backup if you want to preserve it.

4. What leaves your phone (and why)

To make the AI, sign-in, and billing work, a limited set of information is sent off your device:

• Sign-in identifier: your email and the basic profile your provider returns when you sign in with Google, Apple, or email. This is handled by Firebase Authentication so we can confirm you're allowed to use the AI (see §7). We never receive or store your Google/Apple/Firebase password.
• AI requests: when you generate a plan or ask the coach, the inputs needed to answer — your goal, equipment, the relevant biometric values, your health-screening flags, and the message you type — are sent through our secure server function to our AI provider, which generates your response and returns it to your phone (see §5).
• Subscription status: your purchase is handled by the Apple App Store or Google Play and our subscription provider (RevenueCat). We receive whether your subscription is active or expired — not your card or payment details (see §8).
• Optional sharing: if you choose to create and share a stats/progress card, a rendered card image may be generated to produce your shareable link. This is entirely opt-in. Your body/transformation photos are never uploaded — cards built from your photos are rendered on your device and shared only through your own share sheet.
• Support communications: anything you send us when you email support.

5. How the AI uses your inputs

To build a plan or answer a coach question, our server sends a structured prompt to a third-party generative AI provider (Google's Gemini API). This prompt contains the program inputs and message needed to generate your response — such as goal, equipment, workout window, relevant biometric values, your health-screening flags, and the free-text situation you describe. We do not include your name, and your progress photos are never sent.

These inputs are processed to generate your answer and are not retained by us on our servers — the resulting plan is stored on your phone. Google processes API data under its developer terms and, under the applicable API terms, does not use AI Body Builder's API content to train its models. Every AI response also passes through our deterministic safety guardrails before it's shown to you.

6. What we never do

• No advertising. The app contains no ads and no advertising SDKs.
• No analytics or tracking. We do not bundle analytics SDKs or third-party behavioral trackers, and we do not build a profile of your behavior.
• No selling or renting your data, and no sharing for cross-context behavioral advertising.
• No server-side copy of your fitness data. Your plans, logs, photos, and coach chats stay on your device.
• No password handling by us. Sign-in is delegated to Google, Apple, and Firebase.

7. Sign-in & authentication

Sign-in exists so we can verify you're an authorized user before running the AI on your behalf and applying your subscription — not to sync your data to a server. We use Firebase Authentication and support Google, Apple, and email sign-in. The authentication service stores your account identifier (such as your email); we never receive or store your password. You can delete your authentication account at any time (see §10 and the Delete Account page).

8. Subscriptions

AI Body Builder offers auto-renewing monthly and yearly subscriptions. Purchases are processed by the Apple App Store or Google Play and managed through our subscription provider (RevenueCat). Those parties handle your payment; we do not receive or store your card or bank details. We receive your entitlement status (active/expired) so the app can unlock paid features. See our Terms of Use for billing details.

9. Legal bases (where applicable)

Where required by law, we process the limited information above on these bases: performance of a contract (to provide the Service you request, including running the AI and your subscription), consent (for sensitive health information you choose to share with the coach, which stays on your device and which you can withdraw), legitimate interests (to secure the Service and prevent abuse), and legal obligation (to comply with the law).

10. Retention & deletion

• On-device data stays until you delete it — remove individual items in the app, or delete the app to remove all local data from that device.
• Your sign-in account is kept while your account is active. When you delete your account (in-app or via the Delete Account page), we delete your authentication record.
• AI request inputs are processed transiently to generate your response and are not retained by us on our servers.
• Subscription records held by the app stores and our subscription provider are governed by their policies and any records we must keep to comply with law.

11. Security

• Your fitness data stays on your device rather than on a central server, which meaningfully reduces exposure.
• Everything that does leave your phone travels over encrypted connections (HTTPS/TLS).
• Sensitive keys (AI and provider credentials) are held server-side and are never embedded in the app.
• Sign-in is handled by Firebase Authentication; we never see your password.

No method of transmission or storage is 100% secure, but keeping your data on your own device is one of the strongest safeguards we can offer. Protecting your device with a passcode/biometric lock and keeping its OS updated further protects your data.

12. Your rights & choices

• Access & correction: your data is on your device — view and update your profile, logs, and photos anytime in the app.
• Deletion: delete individual items in the app, delete the app to wipe all local data, and delete your account (which removes your sign-in record) in-app or via the Delete Account page.
• Consent withdrawal: stop using the coach or the photo feature at any time; anything you shared with the coach remains only on your device.
• Notifications: reminders are scheduled locally on your device; manage or disable them in app settings or your device settings.

13. US state privacy rights

Depending on where you live (for example, California under the CCPA/CPRA, and residents of Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws), you may have rights to know, access, correct, delete, and obtain a portable copy of personal information we hold, and to appeal a denied request. Because your fitness data is stored on your own device, most of it is already in your control. We do not sell your personal information or share it for cross-context behavioral advertising, so no opt-out of sale is necessary, and we will not discriminate against you for exercising your rights. To make a request about the limited information we handle (such as your sign-in account), email congfandi@gmail.com; we may verify your identity before responding. You may use an authorized agent where permitted by law.

14. Children's privacy

The Service is intended for adults 18 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

15. International users

The Service is operated from and intended for users in the United States. If you access it from outside the US, the limited information that leaves your device (sign-in, AI requests, subscription status) may be processed in the US, where privacy laws may differ from those in your location.

16. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice in the app. Your continued use of the Service after an update means you accept the revised Policy.

17. Contact us

Questions or privacy requests? Contact us at:

AI Body Builder
Email: congfandi@gmail.com
Support: ai-body-builder.web.app/support