Privacy Policy

1. Introduction

EthioFit (“we”, “us”, “our”) operates the EthioFit mobile application (the “App”). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our App.

By creating an account or using EthioFit, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the App.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: name, email address, and password
• Profile information: date of birth, height, gender, and activity level
• Workout data: exercises, sets, reps, weight lifted, duration, distance, notes, and perceived exertion (RPE)
• Nutrition data: calorie intake, water consumption, and meal photos
• Health logs: weight measurements, sleep data, mood entries, and step counts
• Custom content: routines you create, exercise names, and workout notes
• AI coaching conversations: messages you send to our AI fitness coach
• Profile photos

2.2 Information from Health Platforms

With your explicit permission, we may access health data from:

• Apple HealthKit (iOS): workout data, active calories, steps, heart rate, distance, and sleep analysis
• Google Health Connect (Android): exercise sessions, active calories burned, steps, heart rate, distance, and nutrition data

We only access the specific data categories you authorize. Health data is never sold or used for advertising.

2.3 Information Collected Automatically

• Device information: device model, operating system version, and app version
• Session data: IP address, user agent, and login timestamps
• Push notification tokens for delivering notifications you have opted into
• Crash reports and error logs (via Sentry) including stack traces and device state at the time of error

3. How We Use Your Information

• Provide the service: Track workouts, log nutrition, display progress, and sync health data across your devices
• AI coaching: Process your messages with our AI coach to provide personalized fitness guidance. Conversations are sent to Google's Vertex AI for response generation.
• Guided classes: Stream fitness class videos and track your progress through class segments
• Personalization: Customize workout suggestions, set and track fitness goals, and calculate stats and streaks
• Notifications: Send workout reminders, achievement alerts, and streak nudges based on your notification preferences
• Crash reporting: Diagnose and fix technical issues using error logs sent to Sentry
• Analytics: Understand how the App is used to improve features. This data is aggregated and not used for individual tracking.

4. Third-Party Services

We share data with the following services to operate EthioFit:

We do not sell your personal information to third parties. We do not share your data with advertisers.

5. Data Storage and Security

• Data is stored in encrypted PostgreSQL databases
• Authentication uses secure session tokens with expiration
• Passwords are hashed and never stored in plaintext
• All API communication is encrypted via HTTPS/TLS
• We implement access controls to limit who can access user data internally

6. Data Retention

• Your data is retained as long as your account is active
• When you delete data (workouts, logs, etc.), it is soft-deleted (marked as deleted) and permanently removed within 30 days
• When you delete your account, all associated personal data is permanently deleted within 30 days
• Anonymized, aggregated analytics data may be retained indefinitely

7. Your Rights

You have the right to:

• Access your data — view all your personal information within the App
• Correct your data — update your profile and fix workout entries
• Delete your data — delete individual entries or your entire account
• Export your data — request a copy of your data by contacting us
• Opt out of push notifications — adjust notification preferences in the App settings
• Revoke health platform access — disconnect HealthKit or Health Connect at any time through your device settings

To exercise any of these rights, contact us at support@ethiofit.com.

8. Children's Privacy

EthioFit is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@ethiofit.com and we will promptly delete it.

9. Health Data Special Provisions

Health and fitness data collected through Apple HealthKit and Google Health Connect is treated with heightened protection:

• This data is never used for advertising or marketing
• This data is never sold to third parties, including data brokers
• This data is only used to provide the core fitness tracking features you have requested
• You can revoke access to health platform data at any time through your device settings

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email. Your continued use of EthioFit after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

For questions about this Privacy Policy or your data:

Email: support@ethiofit.com