Privacy Policy

Effective date: [TBD — counsel to confirm]

waliFit helps users plan training, log workouts and runs, track simple nutrition habits, grow a Vitality Tree, and use Wali AI coaching features. This Privacy Policy explains what information waliFit collects, how it is used, and the choices users have.

This policy applies to the waliFit mobile app, website, backend services, and related support channels.

Information We Collect

We collect information users provide directly, information generated while using the app, and limited information from device permissions users choose to enable.

Account information

• Email address, authentication identifiers, display name, username, profile photo, account status, legal acceptance timestamps, and app preferences.
• Sign-in information from supported providers such as Apple, Google, or email authentication.

Profile and training setup

• Goals, training experience, preferred units, training days, available equipment, injuries or limitations users choose to enter, body weight, daily protein target, daily hydration target, and rest timer defaults.

Workout, run, and nutrition information

• Planned workouts, completed workouts, sets, reps, weights, RPE, workout notes, exercise history, personal records, calendar entries, protein and hydration logs, and related progress data.
• WaliRun data, including active-run location data used to calculate route, distance, pace, duration, splits, and run personal records.
• Step count read from Apple Health, Google Fit, or Health Connect when the user grants permission. waliFit uses steps for the Vitality Tree activity score. Steps are not manually entered.

AI and coaching information

• Messages sent to Wali AI, generated coaching responses, plan-generation prompts, training context used to personalize responses, and safety-related metadata needed to operate AI features.
• Nutrition parsing inputs and photos if the user chooses to use photo-based or screenshot-based import features.

Social and Arena information

• Group membership, leaderboard activity, PR feed activity, run club participation, friends, messages, and display information needed for social features.

Device, diagnostic, and usage information

• Device type, operating system, app version, crash logs, error logs, performance diagnostics, and basic app events needed to operate, secure, debug, and improve waliFit.

Support and communications

• Messages users send to support, feedback, deletion requests, export requests, and other communications with waliFit.

Device Permissions

waliFit only uses device permissions for specific app features:

• Health and fitness data: to read step count for the Vitality Tree activity pillar.
• Location while using the app: to track active WaliRun sessions. waliFit does not track location in the background for V1.
• Camera or photo library: to upload a profile photo, import a workout screenshot, or use planned photo-based nutrition features when enabled.
• Notifications: to send workout reminders, coaching messages, streak reminders, and account or safety notices when the user allows notifications.

Users can change device permissions in their operating system settings. Some app features may not work without the related permission.

How We Use Information

waliFit uses information to:

• Create and manage user accounts.
• Provide workout logging, run tracking, simple nutrition logging, calendar, Vitality Tree, streak, rest timer, and Arena features.
• Generate AI coaching responses, training plans, workout adjustments, and context-aware recommendations.
• Sync data across devices and restore user progress.
• Provide data export and account deletion.
• Personalize the app experience, including units, targets, training context, and notifications.
• Detect abuse, protect accounts, enforce Terms, debug issues, and maintain service reliability.
• Comply with legal, safety, App Store, and platform requirements.

waliFit does not sell personal information. waliFit does not use personal information for third-party advertising or cross-app tracking.

AI Providers and Data Processing

Some Wali AI features send user inputs and relevant training context to third-party AI providers so they can generate a response.

Planned V1 provider routing:

• Anthropic: Wali AI coaching messages, complex training questions, program-generation prompts, and relevant training context.
• Google: nutrition parsing, photo or screenshot parsing when enabled, simple questions, onboarding import, and other high-volume parsing tasks.
• waliFit servers: account data, logs, runs, nutrition entries, group activity, messages, AI routing metadata, and sync records.
• On device: rest timer, exercise library access, offline log queue, local cache, active run capture before sync, and local Vitality Tree display state.

waliFit aims to send only the information reasonably needed for the requested AI feature. AI providers may process data under their own terms and privacy documentation. Users should not enter information into Wali AI that they do not want processed by waliFit or its AI providers.

AI Training Opt-Out

V1 includes an AI training opt-out setting. When enabled, waliFit will not use that user's personal content to improve waliFit-owned models, prompts, evaluations, or product training datasets, except as needed for security, safety, abuse prevention, legal compliance, and service operation.

The opt-out does not prevent data from being processed to provide the AI feature the user requests. It also does not control whether third-party AI providers retain or process data under their own service terms.

Data Sharing

waliFit may share information with:

• Service providers that host, store, process, secure, analyze, or support the app.
• AI providers, including Anthropic and Google, when users use AI-powered features.
• Authentication providers, such as Apple, Google, or email authentication services.
• App platforms, such as Apple App Store and Google Play, as needed for distribution, safety, compliance, and platform reporting.
• Legal, safety, or compliance recipients when required by law or necessary to protect users, waliFit, or others.
• Other users only when the user uses social features, such as groups, leaderboards, PR feed posts, run clubs, friends, or messages.

waliFit does not sell user data to advertisers.

Data Retention

waliFit keeps information while an account is active and as needed to provide the service, comply with legal obligations, resolve disputes, prevent abuse, and enforce Terms.

When a user deletes an account, waliFit deactivates the account and schedules hard deletion of user data after 30 days, unless retention is required for legal, security, fraud-prevention, or compliance reasons.

Data Export and Account Deletion

Users can request a JSON export of their waliFit data from Settings. The planned export includes account settings, profile data, workout logs, run logs, nutrition logs, Vitality Tree state, calendar records, AI-related records, and social data associated with the account.

Users can delete their account in Settings, or by visiting our account deletion page. Account deletion is intended to deactivate the account immediately and permanently delete eligible data after 30 days.

User Choices

Users can:

• Update profile and preference information in the app.
• Enable or disable notification permissions.
• Grant or revoke device permissions in operating system settings.
• Export their data as JSON.
• Delete their account.
• Opt out of waliFit using personal content to improve waliFit AI training or evaluation datasets.
• Stop using AI features if they do not want their messages or context processed by AI providers.

Children

waliFit is not intended for children under 13. Users under the age required by their country or region must have permission from a parent or legal guardian.

Security

waliFit uses reasonable technical and organizational measures designed to protect user information. No system is perfectly secure, and users should protect their account credentials and avoid sending sensitive medical, financial, or highly confidential information through Wali AI.

International Processing

waliFit and its providers may process information in the United States and other countries where service providers operate. Privacy laws may differ from the laws in the user's location.

Changes to This Policy

waliFit may update this Privacy Policy as features, providers, or legal requirements change. When changes are material, waliFit will provide notice through the app or another appropriate method.

Contact

Questions, privacy requests, data export requests, or deletion issues can be sent to privacy@walifit.app.

Legal entity: [TBD — counsel to confirm]
Mailing address: [TBD]