Privacy Policy

This Privacy Policy explains how Anime Fit ("we", "us") collects, uses, and protects your personal data across our app and website, and the rights you have. By using the Service you agree to this Policy. See also our Terms of Use.

1. Information we collect

• Account & profile: name, email, age, weight, height, gender, fitness level, and training preferences you provide at registration and onboarding.
• Activity: workout data such as exercises performed, sets, reps, duration, and progress.
• AI interactions: the messages and profile context you send to the AI trainer and diet coach.
• Purchases: subscription status and transaction identifiers (we never see or store your payment-card details).
• Diagnostics (crash & error reports): when the app hits an error we record the error itself, a stack trace, the app version, device and operating-system information, and a trail of the actions that preceded it, together with your account identifier. We do not record screen contents, and we do not attach your body measurements to these reports.
• Usage analytics (only if you opt in): which screens you open and which features you use — for example completing a workout or opening the AI coach — plus coarse profile attributes such as subscription tier, experience level, language, unit preference, and banded level and streak (e.g. "10-19", "7-13") rather than exact figures. This includes a Firebase app-instance identifier and, where you have consented to personalised ads, an advertising identifier. It does not include your weight, height, age, or gender.
• Approximate location: the Google AdMob advertising SDK derives an approximate location — city-level or broader, from your IP address — and uses it to select advertising. We do not ask for, receive, or store your device location ourselves, and the app never requests location permission. This is collected only in the free tier, and only where you have consented to personalised advertising.
• Tracking (iOS only, and only if you allow it): on iOS, after the advertising-consent form, the app asks through Apple’s App Tracking Transparency prompt whether you allow tracking. If you allow it, the advertising identifier described above may be used to personalise ads across apps and websites owned by other companies. If you decline — or never see the prompt because tracking is switched off in Settings → Privacy & Security → Tracking — no identifier is used and ads are selected from context alone. iOS asks once; you can change the answer at any time in that same Settings screen. Android has no separate prompt: there the same choice forms part of the consent form.
• Pre-launch waitlist: if you join our waitlist before Anime Fit is publicly available, the email address you submit and the date you submitted it. We use it only to tell you when the app opens and to honour your launch discount. It is stored by Netlify (see section 4), is never shared, and is deleted on request or once the waitlist is retired at launch.

2. How we use your data

To personalise your training, generate workout and diet plans, track progress, provide AI coaching, process subscriptions, secure the Service, and communicate with you. We do not sell your personal data.

3. Legal bases (EEA/UK)

We process data to perform our contract with you (providing the Service), on the basis of your consent (e.g. optional ads/analytics), for our legitimate interests (securing and improving the Service), and to comply with legal obligations.

4. Sharing & service providers

We share data only with providers that process it on our behalf under contract:

• Supabase — database, authentication, and storage.
• Stripe (web) and Apple / Google via RevenueCat (app) — subscription payments.
• Google (Gemini API) — to generate AI trainer/diet responses; these conversations are not used to train Google's models.
• Google AdMob — advertising in the free tier (subject to your consent where required).
• Sentry (Functional Software, Inc.) — crash and error diagnostics, so we can find and fix faults. Our Sentry data is stored in the European Union.
• Google (Firebase Analytics) — product-usage analytics, where you have opted in.
• Resend — transactional email (e.g. account confirmation).
• Netlify — website hosting and, before public launch, storage of pre-launch waitlist email addresses.

5. Data storage, security & retention

Data is stored on Supabase cloud infrastructure with row-level security; all transmission is encrypted via HTTPS. We retain your data while your account is active. When you delete your account, your personal data is deleted immediately, with two exceptions:

• Billing records — purchase and subscription records are kept for 24 months with your name, email and account identifier removed, retaining only the transaction references issued by Apple, Google or Stripe. We keep them on the basis of our legitimate interest in resolving payment disputes, refunds and chargebacks, which can be raised long after a purchase.
• Records involving other people — reports, moderation decisions and lift verifications are kept with any link to you removed, so that deleting your account cannot erase another person's data or the evidence behind a safety decision.

See Delete Your Account for the full list of what is deleted and what is kept.

6. Your rights

EEA/UK (GDPR): you may access, rectify, erase, restrict, or object to processing of your data, and request portability. California (CCPA/CPRA): you may request to know, delete, and correct your personal information, and you have the right to opt out of "sale"/"sharing" — we do not sell or share your personal information for cross-context behavioural advertising beyond the consented ads described above.

On iOS you can change your tracking answer at any time in Settings → Privacy & Security → Tracking; on Android the equivalent choice is in the app’s advertising-consent form. You can turn usage analytics off at any time in the app under Profile → Share usage data; it stays off until you enable it. Crash diagnostics carry no body measurements and are used only to keep the app stable.

You can export or permanently delete your data yourself from the app's profile settings, or contact us at privacy@animefit.app — see Delete Your Account. You also have the right to lodge a complaint with your local data-protection authority.

7. International transfers

Your data may be processed in countries other than yours. Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses. Our crash-diagnostics data (Sentry) is hosted in the European Union.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

9. Changes & contact

We may update this Policy; material changes will be notified through the Service or by email. For any privacy question or request, contact privacy@animefit.app.

This document is provided for general information and does not constitute legal advice.