Privacy Policy for GRIT App

Effective Date: 29/9/2026

GRIT ("we," "our," or "the app") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, how long we retain it and your choices regarding your data.

1. Information We Collect

Account Information: 

When you sign up using email/password or Google authentication, we store your associated user ID, your AI chat message count, and your app data (described below) in our Firebase (Firestore) database.

Synced App Data (Cloud Backup): So that you can restore your information after reinstalling the app or switching devices, your personal fitness and app data is stored both locally on your device and backed up to our Firebase (Firestore) database, linked to your account. This includes:

• Your name, sex, age, and height

• Weight history and goal/target weight

• Fitness goal and physical activity level

• Workout location, training days, special instructions, and general notes

• Workout plans and completed workout sessions

• Food and nutrition logs, water intake, and your calorie & macro targets

• Achievements and progress

• App preferences (e.g., unit settings, reminder time)

Camera & Photos Access: 

The app requests access to your device's camera and photo library to scan barcodes/QR codes for food nutritional information and to capture or upload food images for AI nutrition analysis.

API Usage: 

The app accesses the internet to use:

• YouTube API for exercise demonstration videos

• FatSecret API for food and nutrition information

• Cloudflare Workers to interact with the APIs stated above, and to receive the anonymous usage events described in Section 3 

• Firebase AI Logic to connect with Google's Gemini models (via the Gemini Developer API) to power the app's AI features (described below)

Crash Reports & Diagnostics: 

We use Sentry to automatically collect crash reports and diagnostic information when the app encounters errors or crashes. This information may include technical details such as your device model, operating system version, app version, crash logs, stack traces, IP address, and other diagnostic data necessary to identify, investigate, and fix software issues. We do not use this information for advertising or marketing purposes. 

2. AI Features and Data Sent to Gemini (via Firebase AI Logic)

GRIT uses Google's Gemini models to power several AI features throughout the app. Depending on which feature you use, some or all of the information listed below may be sent to Gemini for processing.

AI features that use Gemini:

• AI Coach chat - conversational coaching, plus actions you ask for such as logging food, updating your weight, building or editing your workout, and setting your nutrient goals

• Starter plan generation - creating your initial workout split and calorie/macro targets during onboarding

• Workout generation and adjustments - creating workouts, swapping exercises, and modifying a session (e.g., "make it easier," "make it harder," "I'm sore today") on the Workout screen

• Food image analysis - estimating nutrition information from a food photo you capture or upload

• Weekly check-in - generating a personalized summary of your progress and any adjustments to your targets

Information that may be sent to Gemini (depending on the feature and request):

• Name, sex, age, height, and weight (including your weight history and trend)

• Goal and target weight

• Physical activity level (e.g., active, sedentary)

• Workout location, training days, special instructions, and general notes

• Your current workout plan and exercises (when generating or adjusting workouts)

• Your logged food, nutrition totals, and calorie & macro targets (when relevant to the request)

• Notes you leave on your workouts

• Your messages to the AI Coach

• Food images you capture or upload for analysis

This information is used solely to generate personalized AI responses and perform the requested AI-powered features described above. We do not use this information to train AI models. Data sent to Google's Gemini models through Firebase AI Logic is processed in accordance with Google's applicable terms for the Gemini API. The app itself does not separately store the prompts or responses sent to Gemini beyond storing any resulting information that you choose to keep as part of your Synced App Data described in Section 1 (for example, foods you log, workout plans that are created or modified, or updates to your fitness profile).

3. Anonymous Usage Analytics

So that we can see which parts of the app are actually used and where people get stuck, GRIT records a small number of anonymous usage events. These are sent to our own backend (Cloudflare Workers and a Cloudflare D1 database). No third-party analytics or advertising service is involved.

What is recorded:

• A random installation identifier generated on your device. It is a random value with no connection to your account, your email address, your name, or any advertising identifier.
• The name of an action, chosen from a fixed list of seventeen:
    - Opening the app: first app open; app opened on a given day.
    - Getting set up: onboarding started; onboarding step reached; onboarding completed; account prompt shown; account created; continued as a guest.
    - Using the app: workout started; workout completed; food logged; weigh-in logged; coach message sent.
    - Subscribing: subscription screen shown; checkout opened; purchase completed.
    - Sharing: a stats card shared.
• For a few of those actions, one extra word from a fixed list. For example: which onboarding question was reached, whether a subscription was yearly or monthly, or which kind of stats card was shared. A value we do not recognise is recorded as "other" instead of being stored as sent, so nothing you type can ever be recorded.
• The app version and the platform (Android or iOS).
• The country your request reaches our server from, and the date.
• Navigating: a screen was opened. We record which screen, from a fixed list of the app's own screen names, so that we can tell which parts of the app are worth keeping. We do not record what you did on it, what you were looking at, or anything you typed or selected there. 

What is NOT recorded:

• Your name, email address, or account ID
• Your IP address
• Any content whatsoever: no food names, exercise names, weights, measurements, photos, workout notes, or messages to the AI Coach
• Any payment details. A completed purchase is recorded only as the fact that one happened, and whether the plan was yearly or monthly. We never record an amount, a card, or a store account
• Any advertising identifier, and no tracking of you across other apps or websites

How it is used: the events are only ever read as aggregated counts, for example "how many installations completed a workout this week". We cannot use them to identify you or to look up what any individual person did. This data is never sold, and it is not shared with anyone or used for advertising.

How long it is kept: these events are stored for as long as they are useful for understanding how the app is used, and we clear the history from time to time. Because nothing in it identifies you, deleting your account does not delete these anonymous counts, and we have no way to find which of them came from you.

Your choice: this is on by default, and you can turn it off at any time in Settings, under DATA, using the "Share anonymous usage data" switch. When it is off, no usage events leave your device, and anything still waiting to be sent is discarded.

4. How We Use Your Information

• To provide core app functionality, including AI coaching, workout generation and planning, and nutrition tracking.

• To store, back up, and restore your app data across your devices, and to manage your chat message count and account identification.

• Your data is not sold or shared for advertising purposes, except as described above with Google Gemini for AI processing.

5. Data Retention

We retain user data only for as long as necessary to provide our services:

• Account & Cloud Data (Firebase user ID, profile, fitness and nutrition data, workout plans and sessions, achievements, app preferences, and AI message count): Stored until the user deletes their account.

• AI Data sent to Gemini: Not stored by us after processing.

• Local Data on Device: A copy of your app data is also kept on your device and remains until you uninstall the app.

• Anonymous Usage Events (Section 3): Kept as aggregated counts for as long as they are useful for product decisions. Because they carry no identifier connected to you or your account, they cannot be traced back to an individual and are therefore not affected by an account deletion request. Turning off the setting described in Section 3 stops any further events being recorded. 

6. Data Deletion

You may request to delete your account data by sending an email to horizonstrive@gmail.com with the subject line "Delete My Account".
Please include your User ID, which can be found in the Settings screen.

What Happens When You Request Account Deletion:

Deleted:

• Firebase account ID

• AI chat message count

• All synced app data, including your profile, weight history, food & nutrition logs, water intake, workout plans and sessions, achievements, and app preferences

Retained:

• No additional data is stored on our servers (Firebase)

• The anonymous usage counts described in Section 3 remain, because they contain nothing that identifies you or links to your account

We process all deletion requests within 7 business days. We don't store any data after deletion.

7. In-App Purchases (IAP)

We offer subscription features via RevenueCat and Google Play In-App Purchases, such as unlimited AI messages. Users can choose between the free plan or upgrade to a paid subscription for additional features.

8. Children's Privacy

The app is not intended for children under 13. We do not knowingly collect information from children under 13.

9. No Medical Advice

The app and its AI provide general fitness guidance. It is not a medical service, and content is not verified by healthcare professionals. We are not responsible for any health outcomes resulting from use of the app.

10. Health Connect

GRIT can connect to Google Health Connect on Android. This connection is optional, is off until you turn it on, and can be turned off at any time from Settings → Health Connect or from the Health Connect app itself.

Data GRIT reads from Health Connect: steps, active calories burned, exercise sessions recorded by other apps, body weight, and body fat percentage. This data is used inside the app to show your daily activity, to avoid asking you to re-enter a weigh-in your connected scale already recorded, and to inform your coaching insights.

Data GRIT writes to Health Connect: the workouts you complete in GRIT (including their duration, estimated calories burned, and cardio distance), your logged body weight and body fat percentage, the food you log (calories, protein, carbohydrate, fat, and where available saturated fat, fibre, sugar and sodium), and your logged water intake. This is written so the data you record in GRIT is available to your watch and your other health apps.

Health Connect data is stored on your device by Google's Health Connect app. GRIT does not transmit Health Connect data to our servers, does not share it with third parties, does not use it for advertising, and does not use it to make decisions about credit, insurance, or employment. Turning the connection off in GRIT removes the records GRIT wrote to Health Connect. Data GRIT read from Health Connect and saved as part of your GRIT profile (for example a weigh-in imported from your scale) follows the normal deletion process described above.

11. Data Security

We take reasonable measures to protect your data stored in Firebase and on your device. Access to your cloud data is restricted so that only your authenticated account can read or write it. We also use Firebase App Check (with Google Play Integrity on Android and Apple App Attest on iOS) to help verify that requests come from the genuine app; this involves sending app and device integrity signals to Google or Apple. However, no method of transmission or storage is completely secure. Data sent to Gemini AI is transmitted over secure HTTPS connections.

Crash reports and diagnostic information collected through Sentry are transmitted securely over HTTPS and are used solely for monitoring, diagnosing, and improving the reliability and stability of the app. 

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes within the app or by updating the effective date.

13. Contact Us

If you have any questions or concerns about your privacy or this policy, please contact us at: horizonstrive@gmail.com