BULLETPROOFFIT — Privacy Policy

1. Information We Collect

BULLETPROOFFIT is local-first: the app works fully without an account, using an anonymous on-device session. If you choose to create an account, we collect:

• Email Address — the email you sign up with, used to create/secure your account and sign in across devices.
• Health data — nutrition and workout data written to Apple Health, only if you turn on the optional "Sync with Apple Health" toggle. Write-only; we do not read your existing Health data.
• Fitness data — workouts, exercises, sets, and training-plan progress you log in the app.
• Other user content — photos you take of food for AI recognition, voice recordings for logging food or asking your coach, and your AI Coach messages.
• User ID — an internal account identifier from our authentication provider.
• Purchase history — subscription and purchase status, used to unlock paid features and manage your subscription.

We do not collect precise location, browsing history, contacts, or advertising identifiers, and the app does not request location permission.

2. How We Use Your Information

To provide core app functionality (meal logging, workout tracking, AI food recognition, AI coaching), manage your account and sync across devices, process subscription purchases, maintain security, and communicate with you about your account. We do not use your data for third-party advertising and we do not sell your personal data.

3. AI Features

When you use Photo AI, Voice Log, or the AI Coach, the relevant photo, voice transcript, or message is sent from your device to our backend, which forwards it to our AI provider (OpenAI) solely to generate a response. This data is not used to train models and is not linked to advertising.

4. Third Parties We Work With

• Supabase (database, authentication, backend hosting)
• OpenAI (processes food photos, voice transcripts, and coach messages to generate AI responses)
• RevenueCat (manages subscription status/entitlements)
• Apple (processes In-App Purchases; Apple Health sync and Face ID run entirely on-device)

These providers may process data outside your country of residence; where required we rely on their standard contractual safeguards for international transfers.

5. Data Retention

We retain your account data for as long as your account is active. Deleting your account from within the app (Profile → Account → Delete Account) permanently removes your account and associated logged data from our systems.

6. Data Security

All data is transmitted using TLS encryption. Database access is protected with row-level security. Session tokens are stored in the iOS Keychain. You can optionally lock the app with Face ID.

7. Your Rights

Depending on where you live, you may have rights under GDPR (EU/UK) or U.S. state privacy laws (e.g. California's CCPA/CPRA), including the right to access, correct, delete, export, object to/restrict processing, and withdraw consent. Contact us to exercise these rights; we'll respond within the timeframe required by applicable law.

8. Children's Privacy

BULLETPROOFFIT is not directed to children and we do not knowingly collect personal information from anyone under 16. Contact us if you believe a child has provided personal information and we will delete it.

9. Changes to This Policy

We may update this policy from time to time; material changes will be reflected by updating the effective date above.

10. Contact Us

Mohamed Ibrahim (Bulletproofbuilt)
Email: info@mohamedibrahim.biz
Phone: +34 645 564 465