Privacy Policy

Guest plans, meals, measurements and progress photos are stored on this device in IndexedDB. Clearing browser data can remove them. Signing in attaches your guest records to your account and synchronizes them with our server, including compressed progress photos. Signing out separates account records from guest records.

An account is identified by the email address you verify with a sign-in code. We store your profile details, nutrition and training records, plan settings and sync metadata to provide the workspace across devices, keep sessions secure and answer support requests. We do not sell personal data and do not use your food records for advertising.

Food searches and barcodes are sent to Open Food Facts. AI descriptions, images or recordings go to the configured AI provider only when you request parsing; review the proposed foods before saving. Stripe and RevenueCat process purchases, and Apple or Google process native store purchases. Cloudflare hosts the application, database, file storage and email delivery. We store account, order and entitlement records, not full card details. Camera, microphone and local notification access require your permission.

The site stores your language preference in the XFIT_LOCALE cookie and local storage, and your sign-in session in an HttpOnly cookie. When analytics is enabled, Google Analytics 4 receives page paths, titles and campaign parameters to measure aggregate usage; checkout can include anonymous analytics identifiers. The analytics provider sets its own cookies. Blocking them affects measurement only, not sign-in or tracking features.

Workspace Settings provides JSON export, import, device clearing and deletion of nutrition records. Device clearing keeps cloud records; account-data deletion sends deletion records to the cloud and other devices on sync. Account deletion is available in account settings and removes the account and its synced records, while payment providers keep their own transaction records. Export a backup before deleting. Access is protected by sign-in codes and server-side permission checks; no method is completely secure. We keep records while your account exists and publish policy changes on this page. Send access, correction or deletion requests to the support address below.