Privacy Policy

Who this applies to

This policy covers the Fitness Champ mobile app, published by RayMish. Questions about this policy or how the app handles information go to fitnesschamp@raymish.com.

Data the app reads

With your permission, Fitness Champ reads the following from Apple Health (iOS) or Health Connect (Android):

• Step count
• Walking / running distance
• Active energy burned (calories)

The app never reads any other data type (heart rate, sleep, body weight, etc.) from those stores. You can revoke access at any time from your device's Health or Health Connect settings, or from the app's own Settings screen.

Data the app writes

Only if you turn on Save to Apple Health (iOS) or Save to Health Connect (Android) in the app's Settings, Fitness Champ saves the following data that you log in the app to that store, from the day you turn it on:

• Foods you log: calories, protein, carbohydrate, fat, fiber, sugar, sodium and the food's name
• Water you log (one daily total)
• Body weight you log

This is off by default. Deleting an item in Fitness Champ removes it from the health store too; turning the setting off stops new writes but leaves what was already saved there, which you can delete from the Health or Health Connect app. Writing happens on your device — the data is not sent to us or anyone else.

Health data is used solely to show your own activity back to you inside the app — never for advertising, marketing, or any other use-based data mining, and never sold or disclosed to third parties.

Separately, while you're actively tracking a walk or run, Fitness Champ counts your steps using your device's built-in motion sensor (Motion & Fitness on iOS, the step-counter sensor on Android). This only runs while a tracked session is open, is not connected to Apple Health or Health Connect, and nothing from it is stored anywhere but your device.

Data you enter yourself

The app also stores information you type in directly:

• Workout plans, logged sets, reps, and weights
• Manually tracked walks and runs
• Favorited exercises
• Your food log — what you ate, how much, and when
• Calorie and macro goals, and the age, sex and activity level you enter to calculate them
• Body-weight weigh-ins, body measurements and progress photos
• Custom foods, saved meals, meal plans, water, fasting history and reminder times
• Preferences — units (kg/lb, km/mi), rest timer length, body weight, height, daily goal

Food lookups (Open Food Facts)

When you search the online food database or scan a barcode, the app sends the search words or the barcode number to Open Food Facts, a free, non-profit food database, to fetch the product's nutrition values. Nothing else is sent: no account, no identifier, and nothing from your food log. Open Food Facts handles those requests under its own privacy policy.

Camera, photos and microphone

The app asks for each of these only when you first use a feature that needs it:

• Barcode scanning uses the camera only while the scan screen is open, to read the barcode. No photo is kept.
• Nutrition label scanning reads the text on a label photo with your phone's own text recognition. The photo is not uploaded or kept.
• Progress photos you take or choose are stored only on your device and are never uploaded.
• Meal photos (Pro) are sent for an AI estimate only when you choose one and tap Estimate — see “AI meal logging” below.
• The microphone is used only while you dictate a meal (Pro), and the app doesn't record or keep the audio — see “AI meal logging” below.

Photos you choose from your library are only those you pick; the app doesn't browse your library. You can turn camera, photo and microphone access off at any time in your device settings.

AI meal logging (Pro)

Describe a meal turns a short description (“grilled chicken, a cup of rice and a side salad”) or a meal photo into foods with calories and macros, which you review before anything is logged. It only runs when you tap Estimate, and the first time the app asks your permission before sending anything. You can withdraw it at any time with Send meals to OpenAI in Settings. Here is what happens:

• What is sent: the text you typed or dictated, or the meal photo you chose (shrunk on your phone to about 768 pixels) with any caption you added. Along with it, the app sends the same random, anonymous app-user ID that RevenueCat uses (see “Subscriptions”), so we can check that you have Pro and apply the monthly limit (if you're signed in, it's your account's ID instead). Nothing else is sent — not your food log, goals, weight, health data, name or email.
• Who handles it: it goes to our own server (hosted by Vercel), which passes the text or photo — without your app-user ID — to OpenAI to produce the estimate. We ask OpenAI not to store the request; under its API terms OpenAI does not use it to train its models, and keeps it for up to 30 days only to detect abuse (longer only if the law requires it).
• What we keep: we don't store your meal photos, and we don't keep your meal text with your ID. To run monthly limits we keep, in a database hosted by Supabase, how many estimates each anonymous app-user ID has used this month (expires after about 35 days) and whether that ID has Pro (for up to 10 minutes). To prevent abuse, per-minute request counters keyed by the anonymous ID and by IP address expire after about 2 minutes. Expired records are deleted soon after. So that the same description gets the same answer, estimates for text descriptions are cached for up to 30 days under a one-way code of the text, not linked to any user. Our server's own logs record each request's size and cost, never the text or photo; our hosting provider also keeps standard request logs (such as IP address and time) for a short period.
• Voice: dictation uses your phone's built-in speech recognition (Apple Speech on iOS, Google speech services on Android). Where your phone supports it, this happens entirely on the device; otherwise the audio is processed by Apple or Google under their own privacy policies. Fitness Champ doesn't record or keep the audio, and the resulting text goes nowhere until you tap Estimate.
• Where: our server and database run in Singapore, and OpenAI processes requests in the United States.

If you don't use Describe a meal, none of this happens. AI estimates can be wrong — always check them before logging.

AI coach (Pro)

The AI coach writes a weekly review of your training and nutrition, and can build a workout plan for you. It only runs when you tap Review my week or Build with AI, and the first time the app asks your permission before sending anything. You can withdraw it at any time with AI coach in Settings. It works like AI meal logging above — the same server, the same anonymous app-user ID for the Pro check and monthly limit (not passed to OpenAI), the same handling by OpenAI, and the same counters — with these differences in what is sent:

• Weekly review: that week's totals and averages, as numbers — the number of workouts, sets, minutes and total weight lifted (and the week before's, to compare), sets per muscle group, up to six personal records (exercise name, weight and reps), walks and runs with their distance, how many days you logged food, your average calories, protein, carbs and fat against your targets, your weight trend at the start and end of the week and your goal weight, average steps, and your weight goal (lose, maintain or gain). Not sent: what you ate, your notes, photos, measurements, health records, name or email.
• Workout plans: the choices you make — goal, days per week, session length, experience level, the equipment-filtered list of exercises to choose from, and any notes you type (for example an injury to work around). Don't put anything in the notes you wouldn't want sent.
• What we keep: nothing beyond the counters described above. The review and the plan come back to your phone and are stored there (and synced with your account if you're signed in), like the rest of your data.

The weekly check-in that suggests calorie changes doesn't use AI and doesn't send anything: it runs on your phone from your food log and weigh-ins.

Anonymous usage stats

To learn which features help people stick with their training, the app sends anonymous usage events to PostHog, an analytics service, in the United States. An event says something happened — for example that the app was opened, a streak was extended, a reminder was tapped or the day's quests were finished — with small counts such as the streak length, plus the app version, device model and operating system. Events are tied to a random ID created on your device, not to your account, name or email, and never include what you log: no food, weights, measurements, photos, health data or anything you type. We don't keep your IP address or work out your location from it. Turn this off any time in Settings → Share usage stats.

Subscriptions (Fitness Champ Pro)

Pro is an optional subscription sold through the App Store or Google Play. Payment is handled entirely by Apple or Google — the app never sees your card or payment details. To check whether a subscription is active, the app uses RevenueCat, a subscription processor. RevenueCat receives a random, anonymous app-user ID created on your device and the store's purchase record (product, price, purchase and renewal dates). It does not receive your name, email, health data, or anything you log. If you sign in (see below), the app gives RevenueCat your account's random ID instead, so Pro follows you to your other phones — including from iPhone to Android. This information is used only to unlock Pro features and restore your purchase on a new device.

Accounts and sync (optional)

You never need an account to use Fitness Champ. If you open Account in Settings and sign in with Apple or Google, the app keeps a copy of your data in your account so it stays safe if you lose your phone and stays the same on every phone you sign in on. Here is what that involves:

• What is stored: your sign-in details — a random account ID, your email address (with Apple this can be a private relay address if you chose “Hide My Email”) and, with Google, the name and profile picture link Google shares — and a copy of what you log in the app: your food log, nutrition goals, custom foods, saved meals, meal plans, water, fasting history, reminder times, weigh-ins, body measurements, workout plans and sessions, tracked walks and runs, favorite exercises and settings. If you have Pro, your progress photos are backed up too; without Pro they stay on your phone.
• What is not stored: anything read from Apple Health or Health Connect, your Health settings, and caches the app keeps for itself. We never receive your Apple or Google password.
• Who handles it: accounts and the synced copy are stored by Supabase in Singapore. Sign-in itself is handled by Apple (privacy policy) or Google (privacy policy). Your data is protected so that only your signed-in account can read it, and it's encrypted in transit and at rest.
• How it's used: only to sync your data between your phones and restore it when you sign in. We don't look through it, analyze it, use it for advertising, or share it with anyone.
• Signing out stops syncing; everything stays on your phone and in your account.
• Deleting your account (Settings → Account → Delete account) immediately and permanently deletes your account, the synced copy and any backed-up progress photos from our servers. The data on your phone stays until you remove it or uninstall the app. You can also ask us to delete your account at fitnesschamp@raymish.com.

Where your data lives

Health-store readings and everything you log — your food diary, workouts, weight, measurements and progress photos — are saved in local storage on your device. Unless you sign in to back up and sync, your log never leaves your phone — apart from the weekly totals the AI coach sends when you ask for a review. The only network requests are the food lookups, subscription checks, AI meal estimates and AI coach requests, anonymous usage stats (unless you turn them off) and (if you've signed in) syncing described above, plus loading exercise animations. Home screen widgets read a summary from the app on your device. If you export a backup or CSV file, it goes only where you choose to save or share it.

Uninstalling the app permanently deletes the data on your phone. Without an account, the only things held on a server are the anonymous AI usage counters and caches described above. They're tied to a random ID rather than to you, so we can't look them up by name or email, and they expire on their own. If you've signed in, your account and its synced copy stay until you delete the account.

Data sharing

We do not sell, rent, or share your data with advertisers or data brokers, and we never use it for advertising. Fitness Champ includes no advertising or crash-reporting SDKs; its only analytics are the anonymous usage stats described above, which you can turn off. The services named above — Open Food Facts for food lookups, PostHog for anonymous usage stats, RevenueCat for subscription status, Vercel, Supabase and OpenAI for AI meal estimates and the AI coach, and Supabase, Apple and Google for optional accounts — receive only the limited information described in their sections, and only to provide those features.

Children's privacy

Fitness Champ is not directed at children under 13 and does not knowingly collect information from children. Accounts are optional and hold only the sign-in details and synced data described above. If you believe a child has created an account, contact us and we'll delete it.

Changes to this policy

If this policy changes, the updated version will be posted at this same address with a new effective date above.