Privacy Policy

MaxFit AI is a fitness and nutrition tracker with an AI coach called Max. This policy explains what we keep about you, why, who else handles it, and how to get it out or delete it. Questions go to maxfitaiapp@gmail.com.

Only what you give us, or what the app needs to work. There are no advertising, analytics or tracking tools in MaxFit AI.

• Account — your email address and a scrambled (bcrypt) form of your password; we never store the password itself. If you sign in with Google, we receive your name and email address from Google and keep your Google account ID to recognise you; we get no other Google data.
• Profile — display name, timezone and units, and if you add them: height, sex, date of birth and activity level, which are used to work out your calorie and macro targets. We keep the history of your targets.
• Training — workouts, exercises, sets, reps, loads, effort, notes, templates and plans.
• Food — food entries with their calories and macros, and foods you add yourself.
• Body — check-ins such as bodyweight, body fat, lean mass, visceral fat, body water and BMR.
• Goals — the goals you set and your progress.
• Max — your messages to Max, its replies and the entries it logs for you, including messages refused because of a daily limit.
• Coaching — who you share with, what they can see or change, and a record of every change a coach makes.
• Plan and payments — your plan, trial dates and any promo code you used, and a daily count of your Max messages and AI food searches for the plan limits. If you pay, we keep Stripe's reference numbers for you and your subscription, the plan and billing period, its status and the next payment date; never your card details.
• Notifications — if you turn on notifications: the delivery address your browser gives us for that device, the device type, the browser's name, version and system, whether deliveries worked, and your notification settings.
• Usage — the days you open the app and the first and last time you were seen on each.

To run MaxFit AI for you: show your history, work out targets and progress, let Max answer you, send the reminders and notifications you have chosen, apply your plan and take payments, stop abuse (such as a second free trial, or automated use), and answer you when you contact us. We do not sell your data, use it for advertising, or share it to build profiles of you.

The AI coach is off until you turn it on, during sign-up, in Settings, or in the chat, and we record when you did. While it is on, each message you send Max, with the part of your training, food and body data needed to answer it, is sent to our AI provider to write Max's reply. While it is off, Max does not run and nothing is sent. You can turn it off at any time in Settings. We use our AI provider on paid business terms, under which it does not use what we send to train or improve its models.

Food lookups are separate. When you search for a food that isn't in our library, the name you typed may be sent to the USDA food database or to our AI provider to find or estimate its nutrition. Only the food name is sent, never your account or anything else about you, so this works whether or not the AI coach is on.

Payments are handled by Stripe. When you pay, Stripe receives your name, email address and payment details, and your card is kept by Stripe, not by us. Stripe also uses payment data to prevent fraud and to meet its legal duties, under its own privacy policy.

Only the services MaxFit AI needs, each for its own job:

• Supabase — our database, and turning food and exercise names into search data so they can be matched.
• Vercel — runs the app and keeps short-lived technical logs, which can include parts of what you type, such as a food name.
• Our AI provider — Max's replies while the AI coach is on, and nutrition estimates for food names.
• USDA FoodData Central — nutrition data for food names; receives the food name only.
• Stripe — payments.
• Resend — our emails: sign-up codes, password resets and free-trial reminders.
• Google Sign-In — confirms who you are, if you choose to sign in with Google.
• Your browser's push service — (run by the browser's maker, such as Google, Apple, Mozilla or Microsoft) carries notifications to your device, if you turn them on.

Our database and servers are in the United States, and some of these services work from other countries, so your data is handled outside the country you live in.

You, and any coach you choose to share with. Our admin tools show account details (name, email address, sign-up and last-seen dates, plan) and counts of activity such as the number of workouts; they don't show your entries or your conversations with Max. We look at your records themselves only to fix a problem you have reported or when the law requires it.

Your records are private by default. If you invite a coach from the Sharing page, or accept a coach's invite, that coach can see the areas you choose: training, food, body metrics (which include sex, height, date of birth and activity level) and goals, each as view only or view and edit. Your conversations with Max are never shared.

Every change a coach makes is listed on your Sharing page with a one-tap undo. You can pause or stop sharing at any time, and the coach loses access straight away.

As long as your account exists, so your history stays complete. When you delete your account, everything is removed at once and for good, except:

• a one-way fingerprint of your email address, with your trial dates, so the free trial can't be claimed twice. The fingerprint can't be turned back into your address.
• payment records Stripe keeps, as the law requires for tax and accounting. Deleting your account cancels any subscription and removes your saved card.
• copies in our providers' backups and short-lived logs, until they expire.

• Export — download everything as one file from Settings → Your data, at any time.
• Correct — change or remove any entry in the app.
• Delete — Settings → Delete account removes your account and its records as described above. If you can't reach the app, email us from your account's address and we will delete it for you.
• AI coach — turn it off at any time in Settings; nothing more is sent to our AI provider.
• Notifications — turn them off, or choose which kinds you get and quiet hours, in Settings.

You can also ask us what we hold about you, or object to how we use it, at maxfitaiapp@gmail.com. If you are unhappy with our answer, you can complain to the data protection authority where you live.

MaxFit AI uses only the cookies needed to sign you in and keep you signed in, and stores your light or dark theme choice on your device. The app also keeps its own files on your device so it opens quickly. There are no advertising or analytics cookies.

Connections to MaxFit AI are encrypted, passwords are stored only in scrambled form, and every request is limited to the signed-in account and the people it shares with.

MaxFit AI is not for anyone under 16.

When this policy changes, the date at the top changes too, and we tell you in the app or by email before a significant change takes effect.

The rules for using MaxFit AI and its paid plans are in the Terms of Service; refunds are in the Refund Policy.