Consumer Health Data Policy

1. Consumer Health Data We Collect

• Body data: height, weight, sex, date of birth, body measurements, weight history
• Goals and limitations: fitness goal, activity level, injuries or limitations you tell us about
• Fitness activity: workout plans, logged sets, reps, weights and effort (RPE), workout schedule
• Nutrition: food diary, calorie and macro targets, custom foods
• Physique check-ins: the AI analysis result. We do not store the photos. Google, which runs the AI, keeps requests for up to 55 days only to detect abuse and never uses them to train its models.
• Meal and nutrition label photos: not stored by us. Google, which runs the AI, keeps requests for up to 55 days only to detect abuse and never uses them to train its models.
• Health-related messages you send to the AI coach
• Inferences we make from the above, such as estimated energy needs and daily calorie, protein, carb and fat targets

We do not collect location data and we do not use geofencing.

2. Where It Comes From

Directly from you, when you enter it or use a feature. We don't buy health data or get it from other companies.

3. Why We Collect and Use It

• To build and adjust your training plan
• To calculate daily calorie and macro targets that change with training and rest days
• To run AI features you ask for: coach replies and edits, weekly reviews, AI routines, meal and label scans and physique check-ins
• For the AI coach and routine builder: a short summary of your last 7 days of workouts, food, weigh-ins and physique check-in scores is sent with each request, or the last 30 days when you ask about the month. Never photos, and nothing older.
• To keep your data synced and backed up in your account
• To keep the service secure and enforce fair-use limits

We don't use consumer health data for advertising and we don't sell it.

4. Consent

We collect and use consumer health data only with your consent, which you give on its own checkbox during setup, separate from our Terms. You can withdraw consent at any time by emailing support@phibidi.com or deleting your account in Settings > Account & Security > Delete Account. If you withdraw, we stop collecting it and delete what we hold, and the parts of Phibidi that need it stop working.

We will ask for separate consent before we share consumer health data with anyone other than the service providers listed below. We will never sell it without the signed authorization the law requires, and we have no plan to sell it.

5. Who It Is Shared With

Only service providers (processors) that run Phibidi for us under contract and may not use it for their own purposes:

• Google (Firebase: database, sign-in, server functions, crash and usage reports): storing and syncing your data, running the app.
• Google (Gemini API): AI coach (including weekly reviews and the recent-history summary above), AI routine builder, meal photos, label scans and physique check-ins.
• RevenueCat: subscription status (no health data beyond your user ID).

We may disclose data if a law, court order or legal process requires it.

6. Your Rights

You can:

• confirm whether we collect, share or sell your consumer health data, and get a list of everyone we have shared it with (including their contact details),
• access a copy of it,
• withdraw consent,
• have it deleted. We also tell our processors to delete it.

How to use these rights: email support@phibidi.com from the email on your account with the subject "Health data request", or use Settings > Account & Security > Delete Account for deletion. We reply within 45 days, which we may extend by another 45 days once when reasonably necessary, and tell you if we do.

If we decline your request, reply to our answer with "Appeal" in the subject within 60 days. We'll respond within 45 days with our decision and the reasons. If the appeal is denied you can contact the Washington State Attorney General (atg.wa.gov), the Nevada Attorney General (ag.nv.gov) or your own state's Attorney General.

We won't charge you or treat you differently for using these rights.

7. Changes

If we change how we collect, use or share consumer health data in a way not covered here, we'll update this policy and ask for your consent before the change applies to you.