← Back to ChromaFit

Privacy Policy

Last Updated: October 13, 2026

1. Data We Collect

• Apple Health: With your permission, we read steps, active energy, weight, body-fat percentage, and lean body mass for your dashboard and fitness recommendations. We also read sleep, heart rate variability, and resting heart rate to estimate daily readiness. These recovery measurements and their baselines are processed and stored on your device; the current readiness feature does not send them to our AI providers. If you choose "Fill from Apple Health" during setup, we also read date of birth, biological sex, and height to fill in your profile. When you allow Health write access, newly logged water, weigh-ins, meals (energy and available protein, carbohydrate, and fat values), and completed strength workouts can be saved to Apple Health. Entries imported from Health are not written back. You control each type of read and write access in Apple Health. Removing ChromaFit data does not remove records already saved in Apple Health; manage those records in Health. With separate AI-sharing consent, selected body measurements, training goals and profile, and activity or nutrition totals may be sent to provide the AI features described below.
• Widgets and Live Activities: ChromaFit shares daily totals and goals, streaks, and recent meal names and nutrition values with its widget through storage shared locally on your device. A Quick Log tap queues a meal locally; ChromaFit records it when the app next opens or returns to the foreground. Workout and calorie Live Activities display workout progress, rest times, or calorie and protein information on supported system surfaces such as the Lock Screen and Dynamic Island. The widget storage and Live Activity display remain on your device. When a queued meal is recorded in ChromaFit, the app's usual meal tracking and product analytics apply, including calorie and protein totals in analytics events. You choose whether to add widgets or enable the calorie Live Activity, and can manage Lock Screen access in iOS settings.
• Health Connect (Android): With your permission, we read steps, active calories burned, weight, body-fat percentage, and lean body mass from Health Connect, including past records so your history and trends are complete. This data is stored locally on your device for your dashboard and recommendations. If you turn on AI features, your weight, body-fat percentage, and lean mass may be sent to our AI provider to build your workout plan, and weekly totals such as steps may be included in your weekly review. We never write to Health Connect, and you can revoke access at any time in your phone's Health Connect settings. The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements. We do not sell Health Connect data, use it for advertising, or transfer it to third parties except as described here to provide the features you use.
• Photos and Meal Descriptions: Physique photos, food photos, and meal descriptions are transmitted securely to our AI providers to return the analysis you request. ChromaFit does not save the uploaded image on its servers. Your height and weight may be sent with a physique photo so the score accounts for your frame.
• Free Web Score (chromafit.live/score): The photo you upload, and the height, weight, and goal you optionally enter, are sent to Anthropic for a single analysis and are not stored by ChromaFit. To limit free scores to two per day, we store a salted one-way hash of your IP address and the time of each request. The hash cannot be turned back into your IP address. You must be 16 or older to use it.
• Product Analytics: We store app events such as app launches, completed onboarding, scans, workouts, shares, paywall views, and purchase outcomes. These events are associated with an app user identifier also used for subscription checks. Depending on the action, events can include selected goals and profile answers, calorie and protein targets or logged meal totals, workout duration and set counts, and scan confidence or progress counts. The inspected event payloads do not include your photos, free-text meal descriptions, or the sleep, heart rate variability, and resting heart rate measurements used for readiness.
• Community Data: If you choose to use Community, we create a passwordless anonymous identity and store your chosen nickname, circle memberships, reactions, challenge progress, reports, and content you choose to post. A score-only check-in stores only its consistency score and optional note; detailed adherence counts are not stored. If you choose pixelated-photo sharing, only a deliberately low-detail derivative is uploaded. A full photo is uploaded only when you explicitly choose Full Photo. Photo check-ins can also include workout, protein, water, and steps adherence counts. Report snapshots and moderation decisions may remain after a check-in is removed.

2. Use of AI

After you allow AI sharing, ChromaFit sends the relevant input through Supabase to Anthropic for physique analysis, workout plans, weekly reviews, and food analysis. Food photos or meal descriptions may instead be sent through OpenRouter to Google's Gemini service if the primary food-analysis service fails or is unavailable. Physique analysis can include the photo you submit, a previous photo and scores for comparison, your goal, and available body measurements. Workout plans use your training profile, goals, physique insights, and available body measurements. Weekly reviews use summaries of your tracking data. Sleep, heart rate variability, and resting-heart-rate measurements used by local readiness are not included in the current AI requests.

Workout generation requests are held in a server-side job so a plan can finish after the app closes. The job handler clears the prompt on completion or failure. The generated plan remains stored against the app's anonymous session; retrieving it does not automatically delete the server copy.

You can decline AI sharing and continue local tracking, or turn AI sharing off in Settings → Data & Privacy. Turning it off prevents subsequent AI requests; it does not retract data already transmitted. AI providers process submitted inputs under their applicable terms and retention settings.

Community publishing uses a separate automated text safety check through Anthropic. That check receives the text being posted, not the Community photo or fitness metrics. ChromaFit does not use these inputs for targeted advertising.

3. Subscriptions & Payments

ChromaFit Pro subscriptions are processed entirely through Apple's App Store on iPhone and Google Play on Android. We do not collect, store, or have access to your payment information such as credit card numbers or billing addresses. All billing is managed by Apple or Google. Subscription status is verified through RevenueCat, a third-party subscription management service, using an app user identifier and purchase details such as the purchased product and subscription status. The identifier can also associate purchase outcomes with app analytics; it does not include your payment-card details.

4. Data Security

We use encrypted connections for data in transit and Supabase row-level security to restrict circle content to authenticated members of that circle. ChromaFit does not require a conventional account, email address, or phone number. Community uses a separate, device-bound anonymous identity. Circle members can see content you share with their circle. You can delete a post, leave a circle, or permanently delete your Community identity and its server-side posts from the Community profile controls. Because that identity is device-bound, delete it before uninstalling or save the Support ID shown in Community if you may need help deleting it later. You can erase locally stored fitness data through Reset App Data in Settings, and you can contact us to request deletion of analytics associated with your anonymous app identifier.

5. Community Safety

Community is available only to ChromaFit profiles age 16 or older. We use automated text safety checks and provide reporting and blocking controls. We may review reported content and remove content or access when needed to protect users, enforce safety rules, or comply with law. Community has no direct messages and does not rank bodies or people.

6. Contact