Privacy Policy

Effective date: 2026-08-07

This Privacy Policy describes how Gen Health ("we", "us") handles information when you use the genfit mobile application (the "App") on iOS and Android.

Who this applies to

The App is provided to gym members. Accounts are created by your gym or our team — there is no public self‑service sign‑up inside the App. If you do not have an account, do not use the App.

The App and all of its digital features are free to use. A gym may separately charge for real‑world membership, facilities, or in‑person services. Those charges do not purchase or unlock any digital content or feature in the App.

Information we collect

Account information

When you sign in, we process:

• Email address
• Password (stored and verified by Firebase Authentication; we do not store your password in plain text)
• Authentication identifiers, IP address, and user-agent information used by Firebase Authentication for account security and abuse prevention

Fitness profile

When your gym or our team provisions your account, they may set an initial fitness profile. You can later edit these fields in the App:

• Fitness goal (e.g. lose weight, build muscle)
• Body weight and height
• Activity level

Your fitness profile is stored in Google Firebase Cloud Firestore under your account and is also cached locally on your phone so the App can display it reliably between sessions.

Workout and nutrition logs

When you log activity in the App, we store:

• Workout sessions: exercise names, sets, reps, weight, duration, and date
• Meal entries: food name, calories, protein, carbs, fat, meal type, and date

These records are stored in Google Firebase Cloud Firestore so they sync across sessions and devices tied to your signed‑in account.

Health and fitness data from Apple Health and Health Connect

If you grant permission, the App reads the following from Apple Health on iOS, or Health Connect on Android:

• Steps and active energy burned
• Heart rate, resting heart rate, and heart rate variability
• Respiratory rate
• Body weight
• Sleep analysis
• Stand hours
• Workouts

We use this to calculate your daily Readiness score, Sleep score, and Body Clock, and to show your weekly trends. To do that, a daily summary of these figures is sent to our backend (Google Cloud and Firebase) and stored against your account. We keep the daily summary, not the raw sample-by-sample history from your device.

If you grant write permission, the App also saves data back to Apple Health or Health Connect: workouts you complete, your body weight, and the calories, protein, carbohydrates, fat, and water you log.

Health data is used only to provide these features to you. We never use it for advertising or marketing, never sell it, and never share it with third parties for their own purposes. We do not store health data in iCloud.

Health access is entirely optional. You can decline it, or withdraw it at any time in the iOS Health app (Sharing → Apps) or in Android Health Connect settings, and the rest of the App continues to work — the recovery cards simply show no data.

Camera and photos

With your permission, the App uses the camera to photograph a meal so it can be identified and logged, to scan barcodes on packaged food, and to scan your gym's check-in code. Meal photos are sent to our backend and processed by an AI service provider solely to identify the food and estimate its nutrition. They are not used to train third-party models and are not shared for any other purpose.

If you choose a profile picture, it is uploaded to Firebase Storage and stored against your account. You can change or remove it at any time in the App.

Notifications

With your permission, the App sends notifications when a rest timer finishes and at the time you choose for workout reminders. These are scheduled on your device. You can turn them off in iOS or Android settings, or in the App.

Technical and diagnostic data

The App uses Firebase Crashlytics to record crashes and errors so we can fix them. These reports contain device and diagnostic information. We do not attach your name, email address, or account identifier to them. The App does not include Firebase Analytics and does not collect product-interaction or advertising data.

Firebase Authentication and Cloud Firestore collect a Firebase user agent containing device type, operating system, App bundle ID, and developer platform. Firebase states that this user agent is not linked to a user or device identifier and uses it to understand platform and SDK-version adoption. Firebase Authentication also keeps login IP addresses for a limited period for security and abuse prevention.

The App does not access your location, contacts, or microphone.

How we use information

We use the information above to:

• Authenticate you and keep your session secure
• Display your workout and meal history
• Calculate nutrition summaries shown in the App
• Calculate your Readiness score, Sleep score, Body Clock, and weekly trends from your health data
• Generate personalized workout and meal plans, and identify food you photograph
• Diagnose crashes and errors

We do not sell your personal information.

Where data is stored

Account information, fitness profile fields, workout sessions, meal entries, daily health summaries, and your profile picture are processed using Google Firebase and Google Cloud (Google LLC) in cloud infrastructure. Firebase may process data in the United States and other countries where Google operates data centers.

Meal photos and plan-generation requests are additionally processed by an AI service provider on our behalf, solely to return the result you asked for.

Your fitness profile may also remain in a local cache on your device until you delete the App or clear its storage. Appearance preferences are stored locally on your device.

How long we keep data

We keep account and logged fitness data while your account is active. When you delete your account in the App (Profile → Delete account), the App verifies your password, deletes your fitness profile, workout sessions, meal entries, daily health summaries, and seed metadata from Cloud Firestore, clears the locally cached profile, and then deletes your Firebase Authentication account. If deletion cannot complete, the App keeps the account active and shows an error so you can retry. Backup copies may persist for a limited period in Firebase systems after deletion.

Your choices and rights

Depending on where you live, you may have rights to access, correct, or delete your personal information.

In the App you can:

• Delete your account and associated app data — Profile → Delete account (requires password confirmation)
• Sign out — Profile → Sign out
• Edit profile fields — Profile → Edit profile
• Withdraw health access — iOS Health app (Sharing → Apps → genfit), or Android Health Connect settings
• Turn off notifications — iOS or Android system settings, or in the App

For other requests, contact us at support@gen-health.app.

Children

The App is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect information from children.

Changes

We may update this Privacy Policy. We will change the effective date at the top when we do. Continued use of the App after an update means you accept the revised policy.

Contact

Gen Health

Email: support@gen-health.app