HeartFit.ai Privacy Policy

Last Updated: June 4, 2025

HeartFit.ai ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

Information We Collect

Personal Information You Provide

  • Account Information: Name, email address, and password when you create an account
  • Health Data: Heart health action plans, food preferences, supplement information, and meal photos you choose to share
  • Communication Data: Messages sent to our AI coach feature

Automatically Collected Information

  • Usage Data: How you interact with our app, features used, and time spent
  • Device Information: Device type, operating system, and app version
  • Technical Data: IP address, device identifiers, and crash reports

Health and Fitness Data

With your explicit consent, we may access:

  • Photos for meal analysis
  • HealthKit data (if you choose to connect)
  • Task completion and progress tracking

How We Use Your Information

We use your information to:

  • Provide personalized heart health recommendations
  • Analyze meal photos using AI technology
  • Track your progress and maintain streaks
  • Send helpful notifications and reminders
  • Improve our services and develop new features
  • Provide customer support

Information Sharing and Disclosure

Third-Party Service Providers

We share limited data with trusted providers who help us operate our service:

  • OpenAI: Meal photos and messages for AI analysis (processed securely and not stored by OpenAI)
  • Supabase: Secure data storage and authentication
  • Apple/Google: Payment processing for subscriptions

We Do NOT:

  • Sell your personal information to third parties
  • Share your health data with advertisers
  • Use your data for marketing purposes outside our app

Data Security

We implement industry-standard security measures including:

  • Encryption of data in transit and at rest
  • Secure authentication protocols
  • Regular security audits
  • Limited employee access on a need-to-know basis

Your Rights and Choices

You have the right to:

  • Access and download your data
  • Correct inaccurate information
  • Delete your account and data
  • Opt-out of notifications
  • Revoke permissions for health data access

Data Retention

We retain your data only as long as necessary to provide our services or as required by law. When you delete your account, we will permanently delete your personal information within 30 days.

Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes through the app or via email.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Email: privacy@heartfit.ai
Mail: 131 Continental Dr Suite 305 Newark, DE, 19713 US

This Privacy Policy is designed to comply with applicable privacy laws including GDPR, CCPA, and COPPA. By using HeartFit.ai, you acknowledge that you have read and understood this Privacy Policy.