ZahyFit1. Who we are
ZahyFit is an app for tracking food, calories, weight and workouts, with an AI coach. This policy explains what stays on your phone, what is sent, why and to whom, and how you control and delete it. Contact: support.zahyfit@gmail.com.
2. What stays on your phone
The app works without an account. Your profile (age, sex, height, weight, goal, activity), food, water and fasting logs, weight and body measurements, workouts and training plans, coach chats and settings are stored only on your phone unless you sign in (section 3). Meal photos stay on your phone and are sent only when you ask for them to be analysed (section 4).
3. Optional account and sync
If you choose to sign in with Google, we use Google Firebase Authentication and receive your name, email address, profile photo and account ID. The data listed in section 2 (except photos) is copied to Google Firebase Firestore so you can reach it from your other devices, together with your device's notification token. Security rules make each account's data available to its owner only. You can sign out at any time and delete the account and all its stored data from inside the app (section 12).
4. Artificial intelligence
Only when you use an AI feature, what that feature needs is sent: for meal analysis, the meal photo, its nutrition label or your text description; for the AI coach, your message, a summary of your profile, goals and logs needed to answer (such as your average calories or weight change) and any photo you attach; for a training plan, your goal, level, available days, equipment and any injuries you mention.
With the built-in AI, these requests pass through our server hls.animes.live, which forwards them to an available AI provider (such as Google Gemini or Groq) and returns the answer. Our server does not store the content of your requests or the answers. It keeps, temporarily in memory, a daily counter tied to a random installation ID (not your name or account) to prevent abuse, reset daily. The provider processes the request under its own policies.
If you choose “Use my own provider” and enter your key, requests go directly from your phone to the provider you chose, and your key is stored encrypted on your phone. AI results are estimates, not medical advice.
5. Health Connect
Only with your permission, and only for the types you allow, the app reads from Health Connect: weight, body fat, nutrition, active and total calories burned, and steps; and writes to it: meals you log, weight and body fat, and calories burned in your workouts. This is used only to show your progress and calculate your goals. Reading may happen in the background if you allow it, to keep your data up to date. We do not sell Health Connect data, use it for advertising, share it with anyone, or send it to our servers. You can withdraw permission at any time in Health Connect settings.
ZahyFit's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
6. Camera, photos and microphone
The camera is used to photograph meals and scan barcodes; photos you pick from your gallery are used for analysis or attached to a coach message; the microphone is used for voice input, which is turned into text on your phone by default. If you choose an online speech provider in Settings, the recording is sent to that provider.
7. Barcodes
When you scan a product barcode, only the barcode number is sent to the open Open Food Facts database to fetch nutrition values.
8. Advertising
The free version shows ads from Google AdMob. Google may use your device's advertising ID and device information to show and measure ads and prevent fraud. In the EEA, the UK and where the law requires, we ask for your consent through Google's form, and you can change your choice under “Privacy options” in Settings. You can reset or delete your advertising ID in your phone settings. Premium subscribers see no ads.
9. Analytics and notifications
We use Google Firebase Analytics to learn how often the app is opened and general device and OS information, to improve the app, without the content of your logs. We use Firebase Cloud Messaging to send the notifications you allow; you can turn them off in the app or phone settings.
10. Subscriptions and payments
Payments are made through Google Play. We never see your card details. We only receive what is needed to activate your subscription: the purchase status and plan.
11. Sharing
We do not sell your data. Data is processed only by the parties needed to provide the features above: Google (Firebase, AdMob, Google Play, Gemini), the AI providers our server uses (such as Groq), and Open Food Facts. We may disclose information if the law requires it.
12. Retention and deletion
Phone data stays until you delete it in the app, clear the app's data or uninstall it. Account data stays until you delete the account. In the app: Settings → Account → “Delete account and all data”. The account and all data stored in it are deleted permanently at once; the copy on your phone stays on it. Without access to the app, email us from the account's address at support.zahyfit@gmail.com and we will delete it within 30 days (see the account deletion page). Analytics and advertising data are kept by Google under its policies.
13. Security
All data is sent over encrypted connections (HTTPS). Built-in AI provider keys are kept on our server, not in the app. Your own key, if you add one, is stored encrypted on your phone. No method is perfectly secure, but we take reasonable measures to protect your data.
14. Children
The app is not directed to children under 13, and we do not knowingly collect their data. If you learn that a child has sent us data, contact us and we will delete it.
15. Your rights
You can access, correct and delete your data in the app, withdraw any permission (Health Connect, camera, microphone, notifications, personalised ads) in the app or phone settings, or contact us with any privacy request.
16. Changes
When we update this policy we change the “Last updated” date above, and tell you in the app if the change is significant.