Privacy Policy
Last updated: June 14, 2026
KocFit AI is a digital fitness service. This policy explains the data processed in our app and web services, why we process it, and your choices.
Data we collect
- Account and identity: email, optional name and profile photo, securely hashed password, Apple/Google sign-in identifier, and login times.
- Fitness and health: goals, experience, age, height, weight, limitations, workouts, measurements, nutrition, hydration, fasting, and progress records.
- Apple Health: with permission, steps, walking/running distance, exercise time, active energy, walking speed, average heart rate, and resting heart rate.
- Content: Pofi chats, support messages, meal photos you choose to analyze, and private progress photos.
- Purchases: product, subscription status, duration, and transaction identifier. Apple processes card details; we do not store them.
- Device and usage: push token, platform, IP address, approximate country/region, security logs, and basic usage events.
How we use data
- Provide fitness and nutrition features, personalize programs, and show progress.
- Verify purchases and subscription access, deliver notifications, and provide support.
- Prevent fraud, abuse, and security incidents and comply with legal obligations.
AI and explicit consent
We ask for explicit consent before the first use of the AI coach, AI program generation, or photo analysis. If you consent, profile, chat, or photo content needed for your request may be processed by OpenAI. If you decline or withdraw, no new data is sent to OpenAI and eligible features use a local algorithm.
Progress photos
Before/after photos you upload to the progress gallery are stored privately under your account only. These photos are not sent to AI or third parties and are not visible to other users. You can delete each photo individually, and deleting your account permanently removes all of them.
Service providers
- OpenAI: processes only AI requests covered by explicit consent.
- Apple and Google: sign-in, app distribution, and store payments.
- RevenueCat: purchase receipts and subscription status management.
- Expo and notification infrastructure: device push tokens and delivery.
- Hosting, database, and email providers: service operation and account messages.
HealthKit and tracking
We use HealthKit data only for user-requested fitness and energy summaries. Selected summaries may be sent to our server to sync with your account. HealthKit data is never used for advertising, marketing, data sales, or user tracking. We do not run third-party ads or cross-app tracking.
Retention and deletion
We retain data while your account is active and as needed to provide the service. You can export data or delete your account in Settings. Deletion removes associated profile, fitness, chat, photo, push, and subscription-mapping data, or isolates limited records where retention is legally required. Apple subscriptions must also be canceled in the App Store.
Your rights and choices
You may request access, correction, export, deletion, and restriction where applicable. Revoke Health access in iOS Settings, push access in device settings, and AI consent in KocFit settings.
Health notice
KocFit AI is a fitness product and does not provide medical diagnosis, treatment, or medical advice.
Contact
For privacy requests, contact: [email protected].
