Privacy Policy

Last updated: 24 August 2026

Who we are

Fitness Freak is operated by CognitiveSquad (contact@cognitivesquad.com). This policy explains what we collect when you use the Fitness Freak mobile app and website, and how we handle it.

What we collect

• Account data: email address, display name and authentication provider (Google, Apple or email/password), managed through Firebase Authentication.
• Fitness profile: age, gender, height, weight, goals, equipment, diet preference, allergies — provided by you during onboarding.
• Activity data you log: workouts (exercises, sets, weights), food diary entries, body weight, measurements, morning check-ins (sleep, energy, soreness) and cardio sessions (including GPS-derived distance during runs you actively start).
• Photos: progress photos and food photos you choose to upload. They are stored in private, per-user storage readable only by you.
• Usage & diagnostics: anonymous analytics and crash reports (Firebase Analytics, Crashlytics) to keep the app stable.

How AI features use your data

Fitness Freak's AI features — the coach chat, the weekly review, the AI meal planner, the AI workout-plan designer, AI macro estimation and food-photo recognition — are generated by OpenAI, L.L.C. (United States). The app asks for your permission before any of these run for the first time, and you can turn them on or off at any time in Profile → AI features & data sharing. AI features are optional: the rest of Fitness Freak works with them switched off.

What is sent to OpenAI

• Your fitness profile: name, age (derived from your date of birth), gender, height, weight, target weight, body-fat percentage, muscle mass, body water, visceral fat, bone mass, body type, fitness level, training experience, workout location and equipment, days per week and minutes per workout, primary and secondary goals, diet preference, allergies, disliked foods, activity level, sleep hours and daily steps.
• Your logged activity: workouts and sets, food diary entries, body weight and measurements, morning check-ins, cardio minutes and distance, and your calorie and macro targets.
• What you type: your messages to the coach and the answers you give when designing a workout plan.
• Meal photos: when you use photo food logging, the photo itself is transmitted to OpenAI so the foods and portions can be identified. Only photos you explicitly choose to analyse are sent — the app confirms each one before it leaves your device. Progress photos are never sent.

How it is collected

The fitness profile comes from what you enter during onboarding and later edit in the app; the activity data comes from what you log; chat messages and plan answers come from what you type; photos come from your camera or photo library at the moment you choose one. Our Cloud Functions assemble a compact summary of this data and send it to OpenAI's API over an encrypted connection. Your device never talks to OpenAI directly, and the API key never leaves our servers.

What is never sent to OpenAI

Your email address, your password and sign-in credentials, and your account identifier are not included in what we send. Neither are your payment details or your location.

What it is used for

Solely to produce the result you asked for: a coaching reply, a weekly review, a meal plan, a workout plan, an estimate of a food's macros, or the foods identified in your photo. That result is returned to us, shown to you and stored in your own account. We do not use it for advertising or profiling, we do not sell it, and neither we nor OpenAI use it to train AI models.

OpenAI's obligations

OpenAI processes this data on our behalf as our service provider, under OpenAI's API terms and data-processing agreement. Those terms require OpenAI to provide protection of your data equal to or equivalent to the protection described in this policy: the data is used only to provide the service to us, it is not used to train OpenAI's models, it is retained only briefly for abuse monitoring and then deleted, and it is not disclosed to anyone else.

AI outputs are estimates and coaching guidance — never medical advice.

What we never do

• We never sell your personal data.
• We never show your photos, logs or conversations to other users.
• We never use Razorpay data beyond processing your subscription.

Payments

Web subscriptions are processed by Razorpay; in-app subscriptions by Apple or Google. We receive subscription status, never your card details.

Data retention & deletion

Your data is kept while your account is active. Deleting your account (Profile → Delete account in the app) permanently removes your profile, logs, photos, conversations and authentication record. See our Account Deletion page for details.

Security

Data lives in Google Firebase (Firestore and Cloud Storage, Mumbai region) behind per-user security rules: only you can read your data; server-managed records (subscriptions, AI context) cannot be written by any client.

Children

Fitness Freak is intended for users aged 13 and above.

Changes & contact

We'll update this page when the policy changes. Questions: contact@cognitivesquad.com.