Privacy Policy

Last updated: July 13, 2026

This Privacy Policy explains how Fitnass ("we," "our," "the App") collects, uses, and protects your information when you use our mobile application. Fitnass is operated by Fahras, based in Ajman, United Arab Emirates.

1. Information We Collect

Account information. When you create an account, we collect your email address and, if you sign in with Google or Apple, your name and email as provided by that service. We never see or store your Apple or Google password.

Profile information. To personalize your experience, we collect information you choose to provide: gender, date of birth, height, weight, body fat percentage, and fitness/nutrition goals (calorie, macro, water, and step targets).

Health data. With your permission, the App reads your daily step count from Apple Health to display your activity progress. This is read-only — Fitnass never writes data back to Apple Health.

Camera and photos. The App uses your camera to scan food barcodes (processed entirely on your device — the image is never uploaded) and, for Pro subscribers, to capture meal photos for AI-powered nutrition logging. Meal photos you capture are uploaded securely for analysis and deleted from our servers once processing is complete.

Fitness and nutrition logs. Workouts, exercises, meals, and measurements you log within the App.

Subscription and payment status. We know whether you have an active subscription and which plan, via Apple's App Store and RevenueCat. We never see or store your payment card details — all payments are processed directly by Apple.

2. How We Use Your Information

To provide and personalize the App's core features; to process meal photos you submit and return nutrition information, using third-party AI services (see Section 3); to manage your subscription and restore purchases; and to maintain the security and integrity of your account.

3. Third-Party Services

We share the minimum data necessary with the following services to operate the App:

Supabase — our database, authentication, and file storage provider. Hosts your account, profile, and logged data.
RevenueCat — manages subscription status, linked to your account ID only.
Apple / Google Sign-In — used only to authenticate you; we receive your name and email, nothing more.
AI processing providers (Google Gemini, Perplexity, and/or xAI Grok) — meal photos and related text you submit for AI-powered scanning are sent to one or more of these providers for analysis. We do not send your account identity, profile, or health data to these providers — only the image/text needed to complete the scan.
Open Food Facts — an open, public food database used to look up scanned barcodes. Only the barcode number is sent; no personal data.

We do not sell your personal information to anyone.

4. Data Retention & Deletion

We retain your data for as long as your account is active. You can delete your account and all associated data at any time from Settings → Account → Delete Account within the App. This permanently removes your profile, logs, and health data from our systems. Some records may be retained briefly where required by law (e.g., tax/financial records related to subscriptions).

5. Data Security

Your data is encrypted in transit (HTTPS/TLS) and at rest. Access to production data is restricted to what is necessary to operate the service.

6. Children's Privacy

Fitnass is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has provided us with personal information, contact us and we will delete it.

7. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data, or to object to certain processing. You can exercise most of these rights directly within the App, or by contacting us below.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact Us

Questions about this policy? Contact us at suhaib@fahras.io.