ATHLYTE

Privacy Policy

Last updated: September 29, 2026

This policy explains how ATHLYTE ("the app", "we") collects, uses and protects your data. By using the app you agree to it.

1. Data we collect

Account: your name, email and account ID when you sign in with Google (via Firebase Authentication).
Profile: age, gender, height, weight, goal, training level, available equipment, dietary preferences and allergies.
What you log: meals, water, workouts, weigh-ins, reminders and your messages to the AI coach.
Photos and voice recordings: only the ones you choose to submit (food, water, body, InBody, equipment photos; voice notes).
Activity and health: step count from the phone's step sensor, and sleep data from Health Connect if you grant access.
Subscription and payment: plan, expiry date, order reference, status and amount. We never see or store card or wallet details — payment is handled entirely by Google Play or Paymob.
Usage counters: how many times you use metered features (e.g. photo analysis, chat messages) to enforce plan limits and the free trial.

2. How we use it

To run the app: plans, nutrition math, reminders, reports.
To generate AI coach replies and analyse photos and voice.
To sync your data across devices and keep it if you reinstall.
To manage subscriptions and the free trial, and to prevent abuse.

We do not use your data for advertising and we never sell it.

3. AI processing

When you use an AI feature, the app sends only what that request needs (your message plus a short summary of today's progress, or a single photo, or a single voice clip) to our server, which forwards it to an AI provider to produce the answer. Providers we may use: Google Gemini (primary), Groq and Cloudflare Workers AI (fallbacks), and Microsoft Azure Speech (speech-to-text and text-to-speech). Our server does not keep a copy of photos, recordings or messages after the request completes.

4. Where data is stored and who can access it

Your data is stored on your device and, when signed in, backed up to your private account in Google Firebase (Firestore). No other user can access it. Subscription and usage records are stored on Cloudflare. These processors handle data only on our behalf and under their own terms: Google (Firebase, Gemini, Google Play), Cloudflare, Groq, Microsoft Azure, Paymob.

5. Permissions

Camera and photos: to capture food, water, body, InBody and equipment photos.
Microphone: for voice notes and voice meal logging.
Notifications: for reminders and your step summary.
Physical activity: to count steps.
Health Connect (read sleep): only to show your sleep in the app.

Each permission is used only for its feature and can be revoked in your phone's settings at any time.

6. Health Connect data

Data read from Health Connect is used only to display it to you in the app and to tailor coach recommendations. It is never transferred to third parties for advertising or other commercial purposes, and its use follows the Health Connect Permissions policy, including the Limited Use requirements.

7. Retention and deletion

We keep your data while your account exists. You can delete your account and all its data at any time in the app (Profile → Delete account) or on the account deletion page. After deletion we erase your account data, cloud backup and usage counters within 30 days at most. Payment records may be kept for as long as the law requires for accounting purposes. We also keep a one-way hash of your email (not the email itself) together with your free-trial usage count, so the free trial cannot be reset by deleting and recreating the account.

8. Security

All traffic is encrypted (HTTPS), our server requires a signed-in account, and AI provider keys live only on the server, never in the app.

9. Children

The app is not directed at anyone under 16 and we do not knowingly collect children's data.

10. Changes

If we change how we handle data we will update this page and its date, and notify you in the app for significant changes.

11. Contact

Questions about your privacy or data: khaled181528@gmail.com