Privacy Policy

1. Who this policy applies to

This policy applies to everyone who uses the App, with or without an account, with or without the AI Coach, and with or without a paid subscription. It also serves as the App's terms of use: use the App only as intended and in compliance with applicable law; the App is provided "as is", without warranties, to the extent permitted by law.

2. Ways to use the App

• Without an account (default). The App works offline. What you enter is stored only on your device, in the App's private storage, and is not transmitted to us. Reading from your health platform (section 5) also works in this mode, and that data stays on your device.
• With the AI Coach (optional). Chatting with a coach needs an internet connection and sends your messages to Google Gemini through our servers (section 6). To count your free and paid requests, the App signs you in with an anonymous technical identity (no email or name) the first time you use the AI Coach, unless you already have an account.
• With a free cloud account (optional). If you sign up, the data you create in the App is also stored on our servers so it can be backed up and synchronised across your devices (section 7).
• With a subscription (optional). AI Coach Premium is purchased through the Apple App Store or Google Play (section 8).

3. Information stored on your device

The following is saved locally on your device and stays under your control:

• Profile information you choose to enter — for example name or nickname, gender, age, height, weight, fitness goal, experience level, and where you train.
• Fitness data — workouts, programs, exercise logs, completed sessions, calorie estimates, goals, charts, notes, and progress.
• Activity and heart-rate data read from your health platform, if you connect one (section 5).
• AI Coach data — your chats with the coaches, the coach's notebook (short notes the coach keeps about your training, such as goals, preferences, or injuries you mentioned), scheduled coach messages and reminders, and your AI privacy choices.
• Photos you choose to add — for example a profile photo, a photo attached to a note, or a photo you send to a coach.
• App preferences — such as theme, units, language, coach voice settings, and notification settings.

If you never create an account and never use the AI Coach, this information does not leave your device, except when you choose to export or share it with your device's own features (for example, sharing a screenshot).

4. Device permissions

The App asks for a permission only when you use a feature that needs it. Every permission is optional, and you can grant or revoke it at any time in your device's system settings:

• Apple Health / Health Connect — to read activity and heart-rate data (section 5).
• Microphone and speech recognition — to talk to your coach by holding the talk button. Speech is turned into text on your device (section 6).
• Camera and photo library — to add a profile photo, attach a photo to a note, or send a photo to your coach.
• Notifications — for workout, rest-timer, reminder, and coach messages. These are created on your device.
• Wearable connection — to show and control your workout on a paired Wear OS watch or Apple Watch, and to read heart rate from it through your health platform.

5. Health data (Apple Health / Health Connect)

With your explicit permission, the App connects to Apple Health (HealthKit) on iOS or Health Connect on Android to READ these data types: steps, walking and running distance, active energy (calories) burned, and heart rate (including live heart rate during a workout from a paired watch or band). The App never writes data to Apple Health or Health Connect.

How this data is used:

• To provide the App's health and fitness features to you: daily activity, heart rate and its history, live heart rate during a workout, your step goal and streaks, and a heart-rate summary saved with your workout log.
• To personalize the AI Coach — only if you choose "Personalize my coaching" (section 6). Then a short summary (for example today's steps or your heart-rate averages from a recent workout) can be included in a request so the coach can answer about your training.

Where this data goes:

• It is shown in the App and, when it is part of a saved workout, stored in the App's private storage with your workout journal.
• If you have a cloud account, the heart-rate summaries saved with your workouts are synced to our servers as part of your workout journal (section 7).
• If you allowed the AI Coach to use your data, the summaries described above are sent through our servers to Google Gemini only to answer your request, and are not stored by us or used by Google to train models (section 6).
• It is never sent anywhere else.

Your control:

• Connecting a health platform is optional; the App works without it.
• You can revoke access at any time: on iOS in the Health app under Sharing → Apps → Cubex Fitness; on Android in the Health Connect settings.
• You can stop the AI Coach from using it at any time with "Share my data with the coach" in the App's Profile.

What we never do with your health data:

• We never use it for advertising, marketing, or ad targeting, and never use it to build advertising profiles.
• We never sell it, and never share it with data brokers or information resellers.
• We never use it to decide eligibility for credit, insurance, employment, or benefits.
• We never store it in iCloud.
• We never disclose it to a third party for that party's own purposes.

Health Connect (Android): Cubex Fitness's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. Health Connect data is transferred only to provide features you asked for — your cloud backup and sync, and, with your consent, personalized AI coaching — and never for advertising or data mining.

Apple Health (iOS): Cubex Fitness uses HealthKit data only to provide the App's health and fitness services, in line with Apple's App Store Review Guidelines (5.1.2 and 5.1.3). HealthKit data is never used for advertising, marketing, or data mining, is never stored in iCloud, and is shared with a third-party AI service (Google Gemini) only with your explicit permission, only to answer your request.

6. The AI Coach (Google Gemini)

The AI Coach is an optional feature. The coaches' answers are generated by Google's Gemini models (Google LLC). Coaches are AI characters, not real people.

Before you send your first message, the coach shows a consent card that explains this and lets you choose:

• "Personalize my coaching" — your requests can include a compact summary of your data: profile (name or nickname, gender, age, height, weight, goal, experience level, where you train), recent workouts and personal bests, today's activity and heart-rate summaries (section 5), relevant entries from the coach's notebook, and your local date and time.
• "Chat without my data" — only your message and your local date and time are sent; the coach answers in general terms.

You can change this choice at any time in the App's Profile ("Share my data with the coach"). If the choice ever needs to cover new kinds of data, the App asks you again.

What is sent to Google Gemini, and when:

• When you send a message or ask the coach for something (a workout, a program, advice, a meal idea), the App sends your message, the recent messages of that chat, the coach's character instructions, and — if you allowed it — the data summary described above.
• When the AI Coach prepares something for you on its own — for example the coaching lines during a coached workout, a summary after it, a weekly report, daily advice, a chat title, or a scheduled coach message — the App sends the same kind of request with the workout or period it is about.
• If you choose to send a photo to the coach (for example of a meal or gym equipment), that photo is sent to answer you.
• Requests go through our own server, which checks your request limit and forwards the request to Google. Our server does not store the content of your messages or photos. It stores only what is needed to run the service: usage counters (the number and time of your requests), your free-trial and subscription status, and a technical device identifier used so that a free trial is granted only once per device — linked to your anonymous or registered account.

How Google handles it: we use Google's paid Gemini API service. Under Google's terms for this service, Google does not use your prompts or the answers to train or improve its models. Google may keep requests for a limited period (currently up to 55 days) solely to detect abuse and comply with law, then deletes them. Requests may be processed in the United States or other countries where Google operates. See the Gemini API Additional Terms of Service and policies.google.com/privacy.

Voice and camera:

• Speech recognition: when you hold the talk button, your speech is converted to text on your device by the operating system's on-device speech recognition. The audio is never sent to us or to Google Gemini — only the resulting text is sent, like a typed message.
• The coach's voice is generated on your device by a voice model that runs on your device. The voice model may be downloaded once from our servers; no text or audio is sent to create speech.
• Live voice sessions: if the App offers a live voice conversation with a coach (it is clearly marked and you start it yourself), your voice is streamed during that session directly from your device to Google Gemini, using a one-time access key from our server, so the coach can listen and answer in real time. The audio is processed under the same Google terms described above and is not stored by us.
• If the App offers movement or form analysis with the camera, the video is analysed on your device and is not sent to us or to Google, unless the feature clearly tells you otherwise before you start it.

Chat history and the coach's notebook:

• Chats are stored only on your device. We keep no copy. With "Save chat history" off in the App's Profile, a chat is deleted when you leave it.
• The coach's notebook is stored on your device and, if you have a cloud account, synced with your other data (section 7) so that your coach knows you on all your devices.
• "Delete all AI data" in the App's Profile permanently deletes your chats, the coach's notebook (including the synced copy), scheduled coach messages, and AI advice.

Important limits:

• AI answers can be wrong or incomplete. The AI Coach gives general fitness and nutrition information, not medical advice, diagnosis, or treatment. Talk to a doctor before starting a new training or nutrition program, and stop exercising and seek help if you feel pain, dizziness, or other symptoms. Do not share information you do not want processed by an AI service.
• The coach can create workouts and programs, log sets, and set reminders in the App when you ask; you can review, edit, or undo these.
• You can rate or report an answer from inside the chat, or email support@cubexfitness.com about an inappropriate or harmful answer; we use this feedback only to improve the coaches' instructions. When you report or rate an answer down, that answer and your note are kept for up to 12 months so we can review it.

7. Information we collect when you create a cloud account

If — and only if — you create an account, we collect and store:

• Account data: your email address and authentication identifiers. If you sign in with Google or Apple, we receive the basic identifier your provider shares (Apple's "Hide My Email" addresses are supported).
• Profile data you entered in the App (see section 3) and your preferred language.
• Fitness content you created: programs, workouts, exercise logs (including heart-rate summaries saved with a workout — section 5), custom exercises, notes and their photos, charts, goals, and the coach's notebook (section 6).
• Device and session information: device name or model and platform for each signed-in device, and session times — so you can see and sign out your devices, and because accounts have a device limit.
• Service email events: delivery status of the emails we must send you (confirmation, password reset, account security notices).

Fitness and health information is sensitive. We treat all of it as private to you and never use it for advertising or profiling.

We do NOT collect: precise location, contacts, advertising identifiers, browsing history, or data from other apps. The App contains no advertising of its own; videos played in YouTube's player may contain YouTube's ads (section 17).

8. Purchases and subscriptions

AI Coach Premium and any other purchase is processed by the Apple App Store or Google Play. We never receive your payment card or bank details. To unlock Premium on your devices, we use RevenueCat (RevenueCat, Inc.), which receives from the store the purchase and subscription status (product, price, currency, dates, renewal and trial status, and a store transaction identifier) linked to your anonymous or registered account identifier. You manage or cancel a subscription in your App Store or Google Play account settings; deleting the App or your account does not cancel it.

9. Anonymous usage statistics and crash reports (all users)

To understand how the App is used and to find and fix errors, the App uses Google Firebase (Google Analytics for Firebase and Firebase Crashlytics), with or without an account.

What we receive: which screens and features are used (for example, that a workout was started or finished, its duration and number of exercises, or that an AI chat was opened or a request limit was reached); coarse profile attributes from the setup quiz — fitness goal, experience level, gender, and age band (never your exact age); app version and language; device model and operating-system version; a random identifier for your installation; and, if the App crashes, a technical crash report.

What is never included: your name, nickname, or email; the content of your chats, notes, or photos; your workouts or programs; your weight, height, or body measurements; health-platform data; advertising identifiers; precise location. This data is not used for advertising and does not track you across other companies' apps or websites.

These reports are processed by Google LLC on servers in the United States. Usage statistics are kept for at most 14 months and crash reports for about 90 days, then deleted automatically. You can turn this off at any time with the "Share anonymous usage stats & crash reports" switch in the App's Profile; the App works the same with it off.

10. Why we process data (legal bases)

• To provide the services you ask for — the App's features, the AI Coach, sign-in, backup and sync, and purchases (performance of a contract).
• To keep the service secure and fair — sessions, device limits, request limits, and abuse prevention (legitimate interest).
• To improve and stabilise the App — anonymous usage statistics and crash reports (legitimate interest; you can opt out, section 9).
• With your explicit consent — reading your health platform (section 5) and letting the AI Coach use your data (section 6). Health data is special-category data in some jurisdictions (for example GDPR Article 9), and your explicit consent is the basis for processing it. You can withdraw consent at any time without affecting earlier processing.
• To send strictly transactional emails — address confirmation, password reset, and security notices. We do not send marketing emails.

11. Who processes your data

We share data only with service providers ("processors") that act on our instructions, only as needed to run the App:

• Google LLC — the Gemini API for the AI Coach (section 6), and Firebase analytics and crash reports (section 9).
• Google LLC (YouTube) — the YouTube API Services that find the coach video picks, and YouTube's embedded player that plays them (section 17).
• Supabase, Inc. — database, authentication, file storage, and the server that forwards AI Coach requests; hosted on Amazon Web Services in the United States.
• Cloudflare, Inc. — network protection and content delivery in front of our servers, and delivery of App content and voice-model downloads.
• Resend (Plus Five Five, Inc.) — sends our transactional emails (United States).
• RevenueCat, Inc. — subscription status (section 8).
• Apple Inc. and Google LLC — app distribution, in-app purchases, in-app rating prompts, and "Sign in with Apple / Google" if you use them, under their own privacy policies.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We may disclose information if required by law, or to protect the rights and safety of our users, and in a merger or acquisition (in which case this policy continues to apply to your data).

International transfers: our providers process data in the United States and other countries. If you are in the EU/EEA, the UK, Switzerland, or a similar jurisdiction, we rely on the Standard Contractual Clauses or other lawful safeguards offered by these providers.

12. Data retention and deletion

• Data on your device stays until you delete it in the App, clear the App's data, or uninstall the App.
• AI chats are never stored on our servers. Google may keep AI requests for up to 55 days for abuse monitoring (section 6). Usage counters are kept while your account exists. Answers you report or rate down are kept for up to 12 months (section 6).
• Synced data is kept for as long as your account exists.
• An anonymous AI Coach identity and its usage counters are kept while you use the AI Coach; when you create an account they move to it. You can ask us to delete them at any time (section 13).
• You can delete your account at any time: in the App (Profile → Account → Delete account) or on the web at https://account.cubexfitness.com/delete-account (this works even if the App is uninstalled). Deleting your account permanently removes your synced data, photos, coach notebook, device records, usage counters, and your login. Copies in encrypted backups are purged automatically within 30 days.
• Deletion is irreversible. Account deletion does not touch the data on your device; remove it by clearing the App's data or uninstalling the App.

13. Your rights

Depending on where you live — including under the GDPR (EU/EEA, UK) and US state privacy laws such as the California Consumer Privacy Act — you have the right to:

• access the personal data we hold about you and receive a copy in a portable, machine-readable format;
• correct it (most of it is directly editable in the App);
• delete it (section 12);
• restrict or object to processing, and withdraw consent at any time;
• not be discriminated against for exercising your rights;
• complain to your local data-protection authority.

We do not sell or share personal information as defined by California law, and we do not use automated decision-making that produces legal or similarly significant effects on you. To exercise a right, email support@cubexfitness.com from the address linked to your account (or include your in-App account details); we answer within 30 days.

14. Children

The App is not directed at children. You must be at least 13 years old (or the higher minimum age in your country) to use the App, and at least 18 years old to use the AI Coach. We do not knowingly collect data from children; if you believe a child has given us personal data, contact us and we will delete it.

15. Security

• In transit: all traffic between the App and our servers, and between our servers and Google, is encrypted (TLS / HTTPS).
• On our servers: per-user access rules (row-level security) keep each account's data separate, and sessions use short-lived rotating tokens. The keys to the AI service are kept on our servers, never in the App.
• On your device: data is stored in the App's private, sandboxed storage, protected by your device's security (passcode, biometrics).

No method of transmission or storage is 100% secure, but we limit access to the minimum needed to run the service.

16. Changes to this policy

We may update this policy. We will change the "Last updated" date and, for material changes — for example a new kind of data sent to the AI Coach — tell you in the App before the change applies and, where required, ask for your consent again.

17. Coach video picks (YouTube)

Some evenings your coach posts a few YouTube videos in a chat. The App uses YouTube API Services to find and play these videos. By watching them you also agree to the YouTube Terms of Service (www.youtube.com/t/terms).

• How the videos are chosen: our server searches YouTube for each language without any information about you and publishes a public list of videos. The App picks the evening's videos on your device, using your app language and the gender and fitness goal in your profile. This choice is never sent to us or to YouTube.
• What stays on your device: which videos you were shown, watched or marked "Not helpful", so the App does not show them again. This history is not synced to our servers and is deleted when you delete the App.
• "Not helpful": when you mark a video, the App sends us the video's YouTube ID, the language, the reason and your anonymous or registered account identifier. A video reported by several users is hidden for everyone. Reports are kept for up to 12 months and are deleted with your account.
• Playing a video: videos play inside the App in YouTube's own embedded player (youtube-nocookie.com). When you play one, YouTube (Google LLC) receives information such as your IP address, device and browser details and what you watch, may use cookies or similar technologies, and may show its own ads, under Google's Privacy Policy (policies.google.com/privacy). We do not receive this information. Video thumbnails are loaded directly from YouTube's servers.
• What we store from YouTube: only each video's YouTube ID, title, channel name and length. Our server checks this list every day and removes a video within 30 days once YouTube no longer offers it.
• Your choice: the videos are free and optional — you can simply not play them. You can turn off coach notifications in the App, and the evening videos then wait quietly in the chat.

18. Contact

Questions or requests about privacy or this App:

• Cubex AI Technologies Inc.
• Email: support@cubexfitness.com
• Website: www.cubexfitness.com