Privacy Policy

1. Face Data and Glow AI Processing

Glow AI is an optional appearance and self-care feature. This section describes, in full, what happens when you use it. If you never use Glow AI, no face photo is collected or processed by this feature.

1.1 What we collect

• When you voluntarily use Glow AI, Fitly AI processes the facial photograph you take with your device camera inside Glow AI.
• From that photograph, the feature generates appearance-related estimates such as visible skin clarity, possible blemishes, redness, dark-circle appearance, pore visibility, facial symmetry, jawline appearance, and similar visible characteristics.
• These results are estimates derived from the image you submitted. They are not biometric identity templates, and they are not used to uniquely identify, authenticate, or recognise you or anyone else.

1.2 How face photos are collected

• A face photo is only collected when you actively open Glow AI and take a photo yourself with the camera. The camera is never used in the background. Glow AI does not access or read your photo library and does not request photo-library permission.
• Glow AI requests camera permission only at the point you choose to use it. You can revoke camera permission at any time in your device settings.
• Granting camera permission is not treated as consent to AI processing. A separate, explicit AI-processing consent is required before any Glow AI photograph is transmitted (see Section 1.9).
• Before transmission, the photograph is resized and compressed into a JPEG on your device and sent as base64 image data through our secure backend.

1.3 Purpose of processing

The photograph and the information generated from it are used for one purpose only: to produce the Glow AI appearance and self-care report that you requested. We do not use your face photo or the information generated from it for any other purpose.

1.4 Information generated from the photograph

The Glow AI report may contain appearance observations, scores or ratings for visible characteristics, and general self-care and routine suggestions (for example hydration, sleep, or skincare-routine guidance). This information is an AI-generated estimate based on a single image and may be inaccurate or incomplete.

1.5 OpenAI and Supabase processing

• After you actively agree, the photograph is transmitted over a secure connection to Fitly AI’s backend, which is hosted on Supabase. The request is handled by a dedicated Fitly AI Supabase Edge Function named glow-analyze.
• Our Supabase backend then sends the image to the OpenAI API, provided by OpenAI, L.L.C., where it is analysed by the gpt-4o model to generate your report.
• Our backend calls the OpenAI API with request storage disabled (store: false), and Fitly AI does not upload Glow AI photographs to the OpenAI Files API.
• OpenAI acts as our processor for this feature and processes the image under its own applicable API terms and data usage policies.

1.6 Original photograph storage

• Fitly AI does not upload the Glow AI face photograph to any file storage, write it to our database, or include it in logs, and keeps no copy of it on your device.
• Resizing and re-encoding the photo on your device removes the camera metadata the original file carried. Both the original capture and the resized copy are deleted from your device’s temporary cache before the analysis request is sent.
• The photograph is transmitted for analysis and is not retained by Fitly AI as a stored image once your report has been generated.

1.7 Generated report storage

• Generated Glow AI reports are saved on your device only, in local app storage. They are not uploaded to our servers.
• Report history holds the generated text and appearance estimates only. It does not hold the original photograph — the original face photograph is not permanently stored by Fitly AI (see Section 1.6).
• You can delete your Glow AI report history at any time from Settings → Privacy & Data → Delete Glow AI Report History, or from the Glow tab. Because reports are stored only on your device, deleting them there removes them everywhere we keep them.

1.8 Retention and deletion

• Original photograph: not stored by Fitly AI. Temporary device copies are deleted before the analysis request is sent.
• Generated reports: stored on your device only, in the app’s report history, until you delete the report history or delete your account.
• Account deletion: when you delete your account, the user data associated with it is removed in line with our account deletion process, described in Delete Account and Section 7 below.
• Withdrawing consent: you can withdraw Glow AI consent at any time, which stops any future Glow AI photo processing.
• Provider-side processing: we cannot and do not claim that OpenAI applies zero retention. OpenAI may process and temporarily retain API request data in accordance with its applicable API data usage, security, and abuse-monitoring policies, and deletes it in accordance with those policies. Please review OpenAI’s own policies for details.

1.9 Consent and withdrawal

• Glow AI is entirely optional.
• You must actively give explicit, separate AI-processing consent before any Glow AI photograph is transmitted for analysis. Camera permission alone is not treated as consent to AI processing.
• If you decline, no Glow AI photo processing takes place. Declining does not prevent you from using unrelated app features such as calorie and meal tracking, workouts, streaks, or the AI Coach.
• You can withdraw your consent at any time in Settings → Privacy & Data inside the app. Withdrawing consent stops future Glow AI photo processing.
• You can also delete your Glow AI report history, delete your account, or email futuregenailabllc@gmail.com with a privacy deletion request.

1.10 AI training and advertising

• Fitly AI does not sell face photographs or the information generated from them.
• Fitly AI does not use your face photograph or Glow AI results for advertising, identity verification, facial recognition, or authentication.
• Fitly AI does not use your face photograph to train its own models.
• Data submitted through the OpenAI API is not used to train OpenAI’s models by default, unless the API customer has explicitly opted in to data sharing. Fitly AI has not opted in to such data sharing for the Glow AI feature.

1.11 Medical and wellness limitations

Glow AI produces visual appearance estimates and general self-care guidance only. It does not provide a medical diagnosis, and it does not diagnose acne, dehydration, skin disease, or any other medical condition. It is not a medical device and is not a substitute for professional care. If you have a concern about your skin or your health, consult a qualified healthcare professional or dermatologist.

1.12 Your rights

• Use Glow AI, or choose never to use it.
• Give or refuse AI-processing consent before any photo is sent.
• Withdraw consent at any time in Settings → Privacy & Data.
• View and delete your Glow AI report history inside the app.
• Delete your account through Settings → Delete account.
• Request access to, correction of, or deletion of your personal data by contacting us. Depending on your region you may have additional rights under laws such as the GDPR, the CCPA/CPRA, or state biometric and consumer privacy laws.

1.13 Contact about face data

For any question or request about Glow AI, face photos, or the information generated from them, email futuregenailabllc@gmail.com. We respond within 2 business days.

2. AI Coach, Coach Memory, and AI Food Scan

Fitly AI uses OpenAI, L.L.C. (“OpenAI”) as its third-party AI service for AI Coach, Coach Memory, AI Food Scan, and Glow AI (Glow AI is described in Section 1). OpenAI receives the data described below for the sole purpose of generating the result you asked for. Requests are always made from our backend (Supabase Edge Functions) using a key held on the server — the AI provider key is never included in the mobile app, so the app cannot call the provider directly.

2.1 Your permission comes first

• Each AI feature has its own consent screen that names OpenAI and lists what is sent. Nothing is sent to OpenAI for a feature until you tap “Agree and Continue” on that feature’s screen.
• If you choose “Not Now”, nothing is sent and the rest of the app keeps working.
• Your decision is stored on your device and in your account. For all four features — AI Coach, Coach Memory, AI Food Scan, and Glow AI — our backend checks your account’s recorded permission, for the current terms version, before sending anything to OpenAI, so a request without it is refused on our servers, not just in the app.
• The iOS camera or photo-library permission is not treated as AI-processing consent.

2.2 AI Coach

Each AI Coach message sends OpenAI a single request containing:

• Your message and up to the last 12 messages of the current conversation.
• Your profile: the name you entered, your age, sex, height, weight, activity level, and goal.
• Your daily calorie, protein, carbohydrate, and fat targets.
• Today’s logged meals: each meal’s name, calories, and the time it was logged.
• Today’s totals: calories, protein, carbohydrates, and fat so far, plus your logged steps and water.
• Your saved Coach Memory — only if you have separately turned on Coach Memory. Without that permission, saved memory is not read or sent.

An AI Coach request does not include your email address, password, account identifier, payment details, photos, Glow AI reports, or device identifiers.

The messages you send and the replies returned are stored in your account so your conversations persist across devices. You can rename, archive, or clear conversations from the Coach tab.

2.3 Coach Memory (optional)

• If you separately turn on Coach Memory, after each Coach reply our backend sends OpenAI your already-saved Coach Memory plus up to the last 20 messages of the conversation, exactly as written, so OpenAI can pick out durable facts to save.
• Saved facts fall into five categories: your goals; dietary restrictions, allergies, and food preferences; injuries, physical limitations, or health considerations you mention; training preferences; and dated milestones. This can include health information you choose to share.
• Saved facts are stored in your account and included in later AI Coach requests.
• Coach Memory is optional and off unless you turn it on. It requires AI Coach permission as well as its own. Turning Coach Memory off stops it from being used; the facts already saved in your account are not read, used, or sent while it is off, and are permanently deleted when you delete your account.

2.4 AI Food Scan

• AI Food Scan requires your permission first. When you agree and scan a meal, your device first re-encodes a copy of the photo you capture or pick, which removes embedded metadata such as location tags. That copy is sent once over an authenticated HTTPS connection to our backend, which forwards it to OpenAI so OpenAI can estimate the food, portion, calories, and macronutrients.
• Only the meal photo is sent, as image data in a single request — no name, email, account identifier, or other logged data.
• The image is processed in transit only: we do not upload it to file storage, write it to our database, or include it in logs, and it is not attached to the meal you save — only the name and nutrition numbers you confirm are stored.

2.5 Provider-side handling

OpenAI states that data submitted through its API is not used to train its models by default, and it may retain API request data for a limited period for its own abuse-monitoring purposes under its API data-usage policy. That retention is governed by OpenAI’s own commitments, not ours, so we cannot promise the data is destroyed instantly on their side.

2.6 Withdrawing permission

• You can withdraw any AI consent at any time in Settings → Privacy & Data. The app on that device stops sending immediately, and the withdrawal is also saved to your account; once our servers have it, they refuse that feature’s requests from any device.
• If you are offline when you withdraw, the app retries the next time you open Settings → Privacy & Data with a connection.
• Withdrawing AI Coach stops Coach messages and Coach Memory from being sent. Withdrawing Coach Memory stops memory extraction and stops saved memory from being included in Coach requests. Withdrawing AI Food Scan stops meal photos from being sent. Withdrawing Glow AI stops Glow photos from being sent.
• Withdrawing does not delete what was already created — your conversations, saved meals, and Glow AI reports stay until you delete them or your account (see Section 7). Saved Coach Memory stays in your account but is not read, used, or sent while Coach Memory is off; it is permanently deleted when you delete your account.
• If a feature’s processing terms change materially, we ask for your permission again before sending anything.

3. Other information we collect

Outside of Glow AI, we collect information you provide directly, information generated as you use the Service, and limited information from authorised third-party services.

Account information

• Email address and authentication identifiers used to create and access your account.
• Profile information you choose to provide, such as name, age, sex, height, and weight.
• Onboarding answers, including your goals, current activity level, dietary preferences, and lifestyle inputs used to personalise the experience.

Nutrition, fitness, and wellness data

• Goals you set, such as target weight, calories, or activity level.
• Daily calorie intake, macros, water intake, and habits you log.
• Weight entries and progress history.
• Workouts, sets, reps, durations, and routines you save or follow.
• Streaks, daily check-ins, and reminders.

This information is wellness and fitness information you choose to record. It is not medical information, and Fitly AI does not use it to diagnose or treat any condition.

Food scan photos

• With your AI Food Scan permission, a re-encoded copy of the meal photo, with embedded metadata such as location tags removed, is sent through our Supabase backend to OpenAI to estimate the food, portion size, calories, and macros (see Section 2.4).
• Food scan photos are used solely to deliver the scanning feature. They are not used for advertising, and calorie and macro results are estimates rather than exact measurements.
• The photo is not stored. Meal entries you save hold only the name and nutrition numbers you confirm, and remain in your food log until you delete the entry or your account.

Barcode scanning

• When you scan a food barcode, the app sends only the barcode number to Open Food Facts (world.openfoodfacts.org), a public food database, to look up the product.
• No account information, photo, or other data is sent with it.

Live workout form tracking

• Where supported, the app uses your device camera to count reps and check exercise form. Pose detection runs entirely on your device. Live workout tracking uses Apple’s Vision framework on iOS and Google ML Kit pose detection on Android.
• Camera frames and the body-pose points detected in them are processed in memory on your device only; they are not recorded, stored, uploaded to our servers, or sent to OpenAI or any other third party. The resulting workout numbers, such as rep counts and battle wins, are stored in your account.

Progress photos

• Progress check-in photos, and any weight or note you add to them, are stored only on your device. They are not uploaded to our servers or sent to any AI provider.
• You can delete a check-in from the progress timeline on the Home tab.

Camera and photo library

• The app requests camera or photo access only when you choose to use a feature that needs it: AI Food Scan, barcode scanning, progress photos, Glow AI, and, where available, live workout form tracking. If you choose a photo from your library, we read only the photo you pick; Glow AI never reads your photo library.
• The camera is not used in the background. You can revoke camera or photo permission at any time in your device settings.
• Granting camera access does not by itself share anything with an AI provider — AI Food Scan and Glow AI each require a separate AI-processing consent first.

Microphone and speech

• The microphone is used only when you tap to dictate a message to the AI Coach.
• Dictation uses Apple’s speech recognition service, which converts your speech to text under Apple’s own privacy terms. The resulting text appears in the message box and is sent only if you send the message.
• We never record or transmit audio outside of an active dictation. You can revoke microphone and speech recognition permission at any time in your device settings.

AI Coach messages and Coach Memory

• With your AI Coach permission, your messages — together with the profile, targets, and today’s logs listed in Section 2.2 — are sent through our Supabase backend to OpenAI to generate wellness, fitness, nutrition, and habit guidance.
• Conversation history is stored on your account so you can continue prior chats. You can clear chats from inside the app.
• If you turn on Coach Memory, the durable facts described in Section 2.3 are stored on your account.

Public profile and leaderboards

• Fitly AI has streak and battle leaderboards. To take part, your hero has a public profile that other signed-in users can see. It shows only your display name (generated for you, or one you choose), level, tier, colour, equipped title, current and best streak, weekly active days, battle wins, rep total, weekly XP, earned achievements, and when you joined.
• Your meals, nutrition, weight, body measurements, photos, Glow AI reports, and AI Coach conversations are never shown to other users. The public profile is not visible to people who are not signed in.
• Display names are checked automatically for offensive or impersonating names. You can report a profile or block a user from the menu on their profile; blocked users are hidden from your leaderboards, and you can unblock them in Settings → Privacy & Data.
• When you report a profile we store the report (your account, the reported account, the reason, and the name at the time) so our team can review it. When you block someone we store that choice in your account.

Subscriptions and purchases

• Paid subscriptions are purchased and billed through your Apple Account on the App Store, and entitlements are managed through RevenueCat. To link your purchases and subscription status to your Fitly AI account, the app identifies you to RevenueCat using your Fitly AI account identifier. RevenueCat receives that identifier together with your purchase and subscription records. We receive subscription status, plan tier, renewal state, and transaction identifiers needed to unlock paid features.
• We never receive or store your full payment card details. Billing is handled entirely by Apple.

No analytics, crash reporting, or advertising SDKs

• The app does not include analytics, crash-reporting, advertising, or attribution SDKs. We do not collect usage analytics, crash reports, or the advertising identifier (IDFA), and we do not use device identifiers for analytics, advertising, or tracking.
• Our backend runs on Supabase, which keeps standard technical request logs (for example, time, requested service, and response status). When a request fails, our backend functions may also record details of the error. We use these logs only to operate, secure, and troubleshoot the Service.

4. How we use your information

• To create and maintain your account and personalise your experience.
• To operate core features such as tracking, scanning, coaching, and streaks.
• To generate the AI outputs you request, with your permission: food recognition and calorie estimates, AI Coach guidance based on your profile, targets, and today’s logs so advice fits your goals and what you have already eaten, and Glow AI appearance and self-care reports.
• If you turn on Coach Memory, to remember durable facts you told the coach so you do not have to repeat them.
• To validate purchases, manage subscriptions, and prevent abuse.
• To look up packaged foods by barcode.
• To operate, secure, and troubleshoot the Service using the technical logs described above.
• To respond to your support requests and meet legal obligations.

We do not sell your personal data, and we do not use your photos or health-related inputs for advertising. We do not show third-party advertising in the app, and we do not track you across other companies’ apps or websites.

5. Service providers

• Supabase — authentication, database, and backend Edge Functions that host your account data and route AI requests.
• OpenAI, L.L.C. — the OpenAI API, used, with your permission, to generate food scan estimates, AI Coach responses, Coach Memory extraction, and Glow AI reports. What each feature sends is listed in Section 2. Glow AI uses the gpt-4o model with request storage disabled (store: false).
• RevenueCat — subscription entitlement management for purchases made through Apple. RevenueCat receives your Fitly AI account identifier and your purchase and subscription records so your subscription follows your account.
• Apple — App Store distribution, billing, and subscription management, and speech recognition when you dictate a Coach message, under Apple’s own terms and privacy policy.
• Open Food Facts — a public food database that receives only the barcode number when you scan a barcode.

Supabase, OpenAI, and RevenueCat process data on our behalf, for the purposes described in this policy. Apple and Open Food Facts handle the data described above under their own terms. We do not share your data with advertisers or data brokers.

6. Data retention

We retain account, nutrition, fitness, and wellness data, AI Coach conversations, saved Coach Memory, profile reports and blocks, and AI consent records (which feature, your choice, the terms version, and when you chose) for as long as your account is active. Withdrawing an AI consent stops future processing but does not delete data already stored. Generated Glow AI reports and progress photos are stored on your device only, until you delete them. Original Glow AI face photographs and AI Food Scan photos are not stored by Fitly AI. The technical request and error logs described in Section 3 are used only to operate, secure, and troubleshoot the Service. When you delete your account, your personal data is deleted or anonymised within a reasonable period (see below), except where retention is required by law.

7. Data deletion

You can delete your data at any time:

• Delete your Glow AI report history in Settings → Privacy & Data → Delete Glow AI Report History, or from the Glow tab.
• Withdraw AI Coach, Coach Memory, AI Food Scan, or Glow AI consent in Settings → Privacy & Data. This stops future processing for that feature; it does not delete data already stored.
• Delete your account from Settings → Delete account, or follow the steps on our Delete Account page. Deleting your account permanently removes your profile, meals, water and daily progress, weight logs, workouts, hero, streak, coach conversations, saved Coach Memory, profile reports and blocks, and AI consent records from our systems, and clears your Glow AI reports and every AI consent record from the device you delete from. Progress photos are stored only on your device and are not removed by account deletion — delete them from the progress timeline, or by uninstalling the app.
• Send a privacy deletion request to futuregenailabllc@gmail.com from the address registered on your account.

Personal data is removed from active systems within 30 days of confirmation. Residual copies in encrypted backups are overwritten in the normal backup rotation. Deleting your account does not automatically cancel an active subscription billed by Apple — cancel that in your Apple Account subscription settings.

8. Your choices and rights

• Access, correct, or update your information from inside the app.
• Give, refuse, or withdraw AI-processing consent for AI Coach, Coach Memory, AI Food Scan, and Glow AI in Settings → Privacy & Data.
• Delete your account and associated personal data.
• Manage camera, photos, microphone, notifications, and other permissions in your device settings.
• Depending on your region, you may have additional rights under applicable laws (for example, GDPR or CCPA/CPRA). Contact us to exercise them.

9. Security

Data is transmitted over encrypted connections, backend access is restricted, and API credentials are held on our server side and never embedded in the app. We use administrative, technical, and organisational safeguards to protect your information. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

10. Children’s privacy

Fitly AI is not directed to children under 13 (or the equivalent age in your jurisdiction). We do not knowingly collect personal data from children, and Glow AI should not be used to submit photos of children. If you believe a child has provided us data, contact us and we will delete it.

11. International processing

Fitly AI, Supabase, OpenAI, and RevenueCat may process your information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for international transfers.

12. No medical advice

Fitly AI provides general fitness, nutrition, habit, and wellness guidance only. It is not a medical device and does not provide medical advice, diagnosis, or treatment. AI-generated calorie estimates, Glow AI results, and coaching content can be inaccurate. Always consult a qualified healthcare professional before making decisions about your health.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or the website, and where the law requires it we will ask for your consent again. The “Last updated” date above shows when this policy was last revised.

14. Contact

Fitly AI is published by FutureGen AI Lab LLC. Questions about this Privacy Policy, or a privacy request? Email futuregenailabllc@gmail.com. You can also visit our Support page.