Automate My Fitness Privacy Policy

Who We Are

Automate My Fitness provides digital health and fitness coaching designed to help users improve their health through nutrition, activity, recovery and lifestyle tracking.

If you have any questions about this Privacy Policy, please contact us using the details provided at the end of this document.

Information We Collect

Depending on how you use our website or app, we may collect:

• Name
• Email address
• Phone number
• Date of birth
• Height, weight and body measurements
• Fitness and activity data
• Nutrition and food logs
• Progress photos (if you choose to upload them)
• Health questionnaire responses
• Coaching messages and support requests
• Heart rate, HRV, steps, sleep and related wellness metrics (when you connect Apple Health or Health Connect)
• Voice and speech input (when you use voice features such as the food coach)
• Calendar information (if you allow access to schedule workouts or coaching sessions)
• Approximate location (if you allow location access for workout tracking)
• Data from Bluetooth-connected fitness devices (for example heart rate monitors)
• Motion and activity sensor data
• Device information
• IP address
• Browser type
• Usage analytics
• Crash reports
• Cookies and similar technologies

If you choose to connect Apple Health, Google Health Connect or other wearable devices, we will only access the information you explicitly authorise.

Health Information

Some information you provide may be considered health data under the UK GDPR and GDPR.

This data is only processed with your explicit consent and is used solely to provide personalised coaching, progress tracking and app functionality.

We do not sell your health information.

How We Use Your Information

We use your information to:

• Create and manage your account
• Deliver personalised coaching and in-app features you request
• Track your progress
• Power optional AI features for your own use of the app only (for example meal photo estimates and coach answers) — not to train or improve generalized AI/ML models
• Provide customer support
• Send important service notifications
• Improve our website and app product experience (not by training foundational AI models on Google user data)
• Detect fraud and maintain security
• Comply with legal obligations

Where you have given consent, we may also send newsletters or marketing communications. You can unsubscribe at any time.

Google Workspace APIs and Limited Use

If you connect Google Calendar (or other Google Workspace APIs we request with your consent), we use that access only to provide or improve user-facing features of Automate My Fitness — for example scheduling coaching sessions, showing availability, and creating or updating calendar events you ask us to manage.

We affirm that:

• Raw or derived data from Google Workspace APIs is not used to develop, improve, or train generalized AI and/or ML models.
• We do not transfer Google Workspace API data to third parties for advertising, data brokerage, or for those parties to train foundational or generalized AI/ML models.
• Any transfer of such data to a service provider is only to operate our application features under agreements that prohibit use of the data for other purposes, consistent with Limited Use.
• We do not sell Google Workspace API user data.

Google Photos: Automate My Fitness does not request or use the Google Photos API. Meal and progress images, when you choose to upload them, come from your device camera or on-device photo library (or similar device sharing), not from Google Photos API access.

AI and machine learning services

Some optional features use third-party AI services to process content you submit (for example a meal photo, a coaching question, or related health context you already store in the app) so we can return a result to you. This processing is solely to provide that feature for your account.

Current AI service providers we may use:

• Google Gemini API / Google Cloud Vertex AI — paid / billing-enabled Google Cloud project usage for in-app analysis and coaching responses. Under Google's Paid Services terms, prompts and responses are not used by Google to train or improve their general models.
• Anthropic Claude (API) — paid API usage for certain nutrition estimation fallbacks, under Anthropic's commercial API terms that do not use API customer content to train their models.

We do not use Google Workspace API data (including Google Calendar data) or Google Photos API data to train Automate My Fitness models, or to train or improve any third-party foundational AI/ML models. We do not operate a separate “free consumer” AI path that allows providers to train on Google Workspace or Photos API user data.

Legal Basis for Processing

Where applicable under UK GDPR and GDPR, we process your information based on:

• Your consent
• Performance of our contract with you
• Legitimate business interests
• Compliance with legal obligations

Apple Health & Health Connect

If you choose to connect Apple Health or Android Health Connect:

• We only access the data you authorise.
• This may include heart rate, heart rate variability (HRV), steps, sleep, weight, workouts and related activity data, depending on the permissions you grant.
• We may write health data back to Apple Health only for information you choose to log in the app.
• Health data is used solely to provide features within Automate My Fitness.
• Health data is never used for advertising purposes.
• We do not share HealthKit or Health Connect data with third parties for marketing or advertising.

Device permissions (mobile app)

The Automate My Fitness iOS and Android apps may request optional permissions on your device. You can decline any permission; related features will not be available until you allow access in your device settings.

• Camera — for meal photo nutrition estimates and, when you start a guided session, for on-device movement feedback. Video is not uploaded unless you explicitly choose to share it.
• Photo library — to let you choose existing meal or progress photos to upload from your device, including via the “Log meal in AMF” share extension when you share images from other apps. This is on-device photo access, not Google Photos API access.
• Microphone and speech recognition — so you can ask the food coach questions by voice.
• Calendar — to schedule workout plans and coaching sessions via Google Calendar (or your device calendar), if you choose to connect it. Calendar data is used only for scheduling features, not for AI model training.
• Location (while using the app) — to support workout tracking and location-based features, if you allow it.
• Bluetooth — to connect to heart rate monitors and compatible fitness devices.
• Motion and fitness sensors — to capture activity and support health tracking features.
• Face ID or device biometrics — to unlock the app on your device. Biometric data is processed by your device's operating system; we do not receive or store your biometric information.
• Push notifications — to send coaching reminders, meal prompts and important service updates. You can turn notifications off in your device settings.

Sharing Your Information

We may share limited information with trusted service providers that help us operate our services, including:

• Cloud hosting providers (for example Google Firebase / Google Cloud)
• AI processing providers listed in “AI and machine learning services” above
• Analytics providers
• Customer support providers
• Payment processors
• Authentication providers (for example Google Sign-In, Sign in with Apple)
• Crash and diagnostics providers (for example Firebase Crashlytics)

These providers process data on our behalf to operate the app and are required to keep it secure. They are not authorised to use Google Workspace API user data to train generalized AI/ML models.

We may also disclose information where required by law.

Data Security

We use industry-standard technical and organisational measures to protect your information, including encrypted communications, secure authentication and access controls.

While we take reasonable steps to safeguard your information, no internet service can guarantee absolute security.

Data Retention

We retain personal information only for as long as necessary to provide our services, comply with legal obligations and resolve disputes.

You may request deletion of your account at any time.

Your Rights

Depending on your location, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your information
• Restrict processing
• Object to processing
• Withdraw consent
• Request data portability
• Lodge a complaint with your local data protection authority

Cookies

Our website uses cookies to improve functionality, analyse website traffic and enhance your experience.

You can manage cookie preferences through your browser settings.

Children's Privacy

Automate My Fitness is not intended for children under 16 years of age. We do not knowingly collect personal information from children.

Third-Party Services

Our website and app may contain links to third-party services. We are not responsible for the privacy practices of external websites or applications.

Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated through the app or website.

Contact

If you have any questions about this Privacy Policy or your personal information, please contact:

Automate My Fitness
Email: support@automatemyfitness.com