Privacy Policy

Data We Collect

When you create an account and use AbFit, we collect the following information to provide our fitness coaching service:

• Account Information: Your name, email address, profile photo, and login credentials used to create and manage your AbFit account.
• Fitness Profile: Gender, age, height, weight, fitness goals, activity level, and training frequency that you provide during onboarding or profile setup.
• Workout & Progress Data: Completed workouts, exercise history, duration, calories burned, workout categories chosen, and any progress photos you choose to upload.
• Booking Information: Coaching session bookings, appointment dates and times, session type (online or in-person), payment confirmations, and cancellation records.
• Messaging Data: Trainer conversation text and supported photo/video attachments, plus messages and responses in AI Coach.
• Check-In Data: Entries including weight logs, energy levels, sleep hours, notes, and photos or videos you choose to submit.
• Device & Usage Information: Device type, operating system, and basic app usage patterns used for performance monitoring and troubleshooting.

How We Use Your Data

Your information is used exclusively to deliver and improve the AbFit experience:

Payment Availability

Apple/Google in-app purchases are configured but inactive. Stripe startup is disabled by default. This website does not offer an active paid plan, trial or checkout.

Data Storage & Security

Account and fitness records are stored in PostgreSQL. New supported private media uploads use Replit App Storage, with storage references recorded in PostgreSQL.

• Workout progress & history are stored persistently so your records are never lost between sessions.
• Booking records including appointment dates, times, session types, and status are retained in our secure database.
• Messages and AI conversation history are stored for the messaging and coaching features and may be reviewed by authorized trainers.
• Private photo/video uploads: New progress photos, check-in media and supported trainer-message attachments are stored in App Storage. Access is checked against authentication and ownership or authorized trainer access; media retrieval supports expiring, protected links.
• Legacy uploads: Existing uploads and references have not been migrated by this storage change. This description of new private uploads is not a claim that legacy files were moved or revalidated.
• Passwords are hashed using bcrypt with a strong salt — we never store plain-text passwords.
• Transport security: All data in transit is encrypted via HTTPS/TLS.
• Access controls: Protected media endpoints validate the user's session and ownership or trainer authorization.

Video Content

Workout tutorial videos shown in the AbFit exercise library and workout player may be streamed from external hosting providers (such as YouTube, Vimeo, or similar video CDNs).

Where possible, we use privacy-friendly embed modes (e.g. YouTube's no-cookie domain) to minimise third-party data collection during video playback.

Data Sharing

We do not sell, trade, or rent your personal information to any third party. Your data is only shared in these limited circumstances:

• Authorized trainers: Can review client records and coaching conversations through protected trainer interfaces. The AI Coach flow also notifies the trainer about new client messages; notifications can include a message preview.
• AI chat processing: The configured OpenAI integration receives recent AI conversation text and instructions to generate responses. AI messages and responses are stored in PostgreSQL. Avoid sending information you do not want processed by the AI service. This does not imply that uploaded photos or videos are sent to the AI chat model.
• Storage: Replit App Storage holds new supported private photo/video uploads; PostgreSQL holds their references and associated account records.
• Transactional messages: Configured email and notification services deliver account and coaching communications. Contact support for questions about these services.
• Legal requirements: We may disclose data if required by law, court order, or to protect the safety of our users.

Your Rights

You have full control over your personal data. At any time you can:

• Access a copy of the personal data we hold about you by contacting our support team.
• Correct inaccurate or incomplete information directly in your Profile or Edit Profile screen.
• Request deletion of your account and all associated data (see Section 8 below).
• Opt out of non-essential communications by updating your notification preferences in Settings.
• Export your workout and check-in history — contact support to request a data export.
• Withdraw consent for data processing at any time by deleting your account.

Data Deletion

You have the right to request the deletion of your personal data at any time. To request deletion of your account and all associated data:

Contact support about deletion scope, retained records, uploaded files and backups. This page does not specify an unverified deletion deadline or payment-record retention period.

Children's Privacy

For questions about eligibility, use by minors, or a child's data, contact support@abfit.app.

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page.
• Send a notification to the email address linked to your account.
• Display an in-app notice the next time you open AbFit.

Your continued use of AbFit after any changes constitutes your acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding your privacy or this policy, our team is here to help: