← Back to ChromaFit

Privacy Policy

Last Updated: August 21, 2026

1. Data We Collect

• Health Data: With your permission, we read steps, active energy, weight, body-fat percentage, and lean body mass from Apple HealthKit. This data is stored locally on your device for your dashboard and recommendations.
• Photos and Meal Descriptions: Physique photos, food photos, and meal descriptions are transmitted securely to our AI providers to return the analysis you request. ChromaFit does not save the uploaded image on its servers.
• Product Analytics: We store app events such as app launches, completed onboarding, scans, workouts, shares, paywall views, and purchase outcomes. These events are associated with an anonymous RevenueCat app user identifier and contain no name, email address, photo, meal description, or health measurement.
• Community Data: If you choose to use Community, we create a passwordless anonymous identity and store your chosen nickname, circle memberships, reactions, challenge progress, reports, and content you choose to post. A score-only check-in stores only its consistency score and optional note; detailed adherence counts are not stored. If you choose pixelated-photo sharing, only a deliberately low-detail derivative is uploaded. A full photo is uploaded only when you explicitly choose Full Photo.

2. Use of AI

We use Anthropic for physique analysis, weekly reviews, and automated safety classification of Community text, and models accessed through OpenRouter for food analysis. Community moderation receives only the text you are attempting to publish, not your photo or fitness metrics. Inputs are sent only to provide the requested feature and are not used by ChromaFit for targeted advertising.

3. Subscriptions & Payments

ChromaFit Pro subscriptions are processed entirely through Apple's App Store. We do not collect, store, or have access to your payment information such as credit card numbers or billing addresses. All billing is managed by Apple. Subscription status is verified through RevenueCat, a third-party subscription management service, using only anonymous purchase identifiers.

4. Data Security

We use encrypted connections for data in transit and Supabase row-level security to restrict circle content to authenticated members of that circle. ChromaFit does not require a conventional account, email address, or phone number. Community uses a separate, device-bound anonymous identity. Circle members can see content you share with their circle. You can delete a post, leave a circle, or permanently delete your Community identity and its server-side posts from the Community profile controls. Because that identity is device-bound, delete it before uninstalling or save the Support ID shown in Community if you may need help deleting it later. You can erase locally stored fitness data through Reset App Data in Settings, and you can contact us to request deletion of analytics associated with your anonymous app identifier.

5. Community Safety

Community is available only to ChromaFit profiles age 16 or older. We use automated text safety checks and provide reporting and blocking controls. We may review reported content and remove content or access when needed to protect users, enforce safety rules, or comply with law. Community has no direct messages and does not rank bodies or people.

6. Contact