Privacy Policy

Effective date: [TBD — counsel to confirm]

waliFit helps users plan training, log workouts and runs, track simple nutrition habits and optional daily time-restricted eating sessions, grow a Vitality Tree, and use Wali AI coaching features. This Privacy Policy explains what information waliFit collects, how it is used, and the choices users have.

This policy applies to the waliFit mobile app, website, backend services, and related support channels.

Information We Collect

We collect information users provide directly, information generated while using the app, and limited information from device permissions users choose to enable.

Account information

• Email address, authentication identifiers, display name, username, profile photo, account status, legal acceptance timestamps, and app preferences.
• Sign-in information from supported providers such as Apple, Google, or email authentication.

Profile and training setup

• Goals, training experience, preferred units, training days, available equipment, injuries or limitations users choose to enter, body weight, daily protein target, daily hydration target, and rest timer defaults.

Workout, run, and nutrition information

• Planned workouts, completed workouts, sets, reps, weights, RPE, workout notes, exercise history, personal records, calendar entries, protein and hydration logs, and related progress data.
• Optional daily time-restricted eating (TRE) sessions, including selected eating-window preset, start and end times, and optional notes. waliFit V1 does not offer extended or multi-day fasting plans.
• WaliRun data, including active-run location data used to calculate route, distance, pace, duration, splits, and run personal records.
• Step and motion data read from the device's built-in motion sensor (the Apple pedometer on iOS, the step-counter sensor on Android) when the user grants the motion permission. waliFit uses steps for the Vitality Tree activity score. Steps are not manually entered, and waliFit does not integrate with Apple Health, Google Fit, or Health Connect.

AI and coaching information

• Messages sent to Wali AI, generated coaching responses, plan-generation prompts, training context used to personalize responses, body weight and injury or limitation information used as coaching context, and safety-related metadata needed to operate AI features.
• Journal entries, mood selections, and free-text reflections, including content processed by background sentiment analysis used to update coaching context.
• Nutrition parsing inputs and photos if the user chooses to use photo-based or screenshot-based import features.

Information We Generate About Users

In addition to information users provide directly, waliFit generates and stores information about each user, including:

• An inferred coaching and behavioral profile derived from messages, journal entries, mood selections, workout history, and activity patterns. The profile includes importance-scored facts about training preferences, limitations, and progress and is used to personalize Wali AI responses.
• Sentiment and behavioral trend signals computed from user content by background processes.
• Safety classifications and routing metadata assigned to messages and content for moderation, crisis detection, and abuse prevention.
• Personal records, streak status, Vitality Tree scoring, and other derived progress data.

Social and Arena information

• Group membership, leaderboard activity, PR feed activity, run club participation, friends, messages, and display information needed for social features.

Device, diagnostic, and usage information

• Device type, operating system, app version, crash logs, error logs, performance diagnostics, and basic app events needed to operate, secure, debug, and improve waliFit.

Support and communications

• Messages users send to support, feedback, deletion requests, export requests, and other communications with waliFit.

Device Permissions

waliFit only uses device permissions for specific app features:

• Health and fitness data: to read step count for the Vitality Tree activity pillar.
• Location while using the app: to track active WaliRun sessions. waliFit does not track location in the background for V1.
• Camera or photo library: to upload a profile photo, import a workout screenshot, or use planned photo-based nutrition features when enabled.
• Notifications: to send workout reminders, coaching messages, streak reminders, and account or safety notices when the user allows notifications.
• Calendar: when the user turns on calendar sync, to add their scheduled waliFit workouts to their device calendar. waliFit creates its own calendar for these events and does not read the user's personal calendar entries.

Users can change device permissions in their operating system settings. Some app features may not work without the related permission.

How We Use Information

waliFit uses information to:

• Create and manage user accounts.
• Provide workout logging, run tracking, simple nutrition logging, optional daily TRE tracking, calendar, Vitality Tree, streak, rest timer, and Arena features.
• Generate AI coaching responses, training plans, workout adjustments, and context-aware recommendations.
• Sync data across devices and restore user progress.
• Provide data export and account deletion.
• Personalize the app experience, including units, targets, training context, and notifications.
• Detect abuse, protect accounts, enforce Terms, debug issues, and maintain service reliability.
• Comply with legal, safety, App Store, and platform requirements.

waliFit does not sell personal information. waliFit does not use personal information for third-party advertising or cross-app tracking.

AI Providers and Data Processing

Some Wali AI features send user inputs and relevant training context to third-party AI providers so they can generate a response.

Planned V1 provider routing:

• Anthropic: Wali AI coaching messages, complex training questions, program-generation prompts, and relevant training context, including active TRE status when fasting tracking is visible and relevant to the request.
• Google: nutrition parsing, photo or screenshot parsing when enabled, simple questions, onboarding import, and other high-volume parsing tasks; relevant simple coaching requests may include visible active TRE status.
• waliFit servers: account data, logs, runs, nutrition entries, optional daily TRE sessions, group activity, messages, AI routing metadata, and sync records.
• On device: rest timer, exercise library access, offline log queue, local cache, active run capture before sync, and local Vitality Tree display state.

waliFit aims to send only the information reasonably needed for the requested AI feature. AI providers may process data under their own terms and privacy documentation. Users should not enter information into Wali AI that they do not want processed by waliFit or its AI providers.

AI Personalization and Training Opt-Out

waliFit includes an AI personalization and training opt-out setting. When it is on, waliFit does not send the user's personal training context — including history, goals, limitations, and AI-derived coaching facts — to third-party AI providers, and does not use that user's content to improve waliFit's AI prompts, evaluations, or datasets. Wali AI will still answer messages, but its responses will be less personalized.

The setting does not control how third-party AI providers process the message the user sends under their own terms, and it does not stop processing needed for security, abuse prevention, or legal compliance.

Data Sharing

waliFit may share information with:

• Service providers that host, store, process, secure, analyze, or support the app, including database, storage, cache, push-notification relay, error and diagnostic monitoring, and infrastructure providers.
• AI providers, including Anthropic and Google, when users use AI-powered features.
• Authentication providers, such as Apple, Google, or email authentication services.
• App platforms, such as Apple App Store and Google Play, as needed for distribution, safety, compliance, and platform reporting.
• Legal, safety, or compliance recipients when required by law or necessary to protect users, waliFit, or others.
• Other users only when the user uses social features, such as groups, leaderboards, PR feed posts, run clubs, friends, or messages.

A current list of waliFit's named subprocessors is available on request to privacy@walifit.app.

waliFit does not sell user data to advertisers.

Profile Photos

Profile photos uploaded for a user's account are stored on waliFit's media hosting and may be served via public URLs to support display in the app and on social features such as posts, replies, leaderboards, and friend search. Users who do not want their photo publicly accessible can remove it in Settings; the app will fall back to a default avatar.

Data Retention

waliFit keeps information while an account is active and as needed to provide the service, comply with legal obligations, resolve disputes, prevent abuse, and enforce Terms.

When a user deletes an account, waliFit deactivates the account and schedules hard deletion of user data after 30 days, unless retention is required for legal, security, fraud-prevention, or compliance reasons.

Data Export and Account Deletion

Users can request a JSON export of their waliFit data from Settings. The export includes account settings, profile data, workout logs, run logs, nutrition logs, optional daily TRE sessions, Vitality Tree state, calendar records, AI-related records, and social data associated with the account.

Users can delete their account in Settings, or by visiting our account deletion page. Account deletion is intended to deactivate the account immediately and permanently delete eligible data after 30 days.

User Choices

Users can:

• Update profile and preference information in the app.
• Enable or disable notification permissions.
• Grant or revoke device permissions in operating system settings.
• Export their data as JSON.
• Delete their account.
• Hide optional fasting tracking from Home, Calendar, Profile, and Wali context in Settings.
• Opt out of waliFit using personal content to improve waliFit AI training or evaluation datasets.
• Stop using AI features if they do not want their messages or context processed by AI providers.

Children

waliFit is not intended for children under 13. Users under the age required by their country or region must have permission from a parent or legal guardian.

Security

waliFit uses reasonable technical and organizational measures designed to protect user information. No system is perfectly secure, and users should protect their account credentials and avoid sending sensitive medical, financial, or highly confidential information through Wali AI.

International Processing

waliFit and its providers may process information in the United States and other countries where service providers operate. Privacy laws may differ from the laws in the user's location.

Changes to This Policy

waliFit may update this Privacy Policy as features, providers, or legal requirements change. When changes are material, waliFit will provide notice through the app or another appropriate method.

Contact

Questions, privacy requests, data export requests, or deletion issues can be sent to privacy@walifit.app.

Legal entity: [TBD — counsel to confirm]
Mailing address: [TBD]