Privacy Policy

AFitBot values your personal information and privacy. This Privacy Policy explains how AFitBot collects, uses, stores, shares and protects information when you use our mobile application and related services.

By using AFitBot, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Policy, please stop using the app and related services. Acknowledging this Policy does not replace the separate, optional consent for AI data sharing in the iOS app described in Section 6.2.

1. Who we are

App: AFitBot
Developer / operator: Shenzhen Feibao Technology Co., Ltd
Privacy contact: info@afitbot.com

AFitBot is an AI-powered fitness companion that provides account services, personalized workout planning, training records, AI coaching, movement analysis and profile management.

2. Information we collect

Account and login information

Email address, nickname, avatar, user ID and account status.
Google account identifier when you choose Google Sign-In.
Apple account information when you choose Sign in with Apple.
Authentication tokens and login records needed to keep your account secure.

Google Sign-In data

Access: When you choose Google Sign-In, AFitBot requests openid, https://www.googleapis.com/auth/userinfo.email and https://www.googleapis.com/auth/userinfo.profile. Google provides your Google account identifier, primary email address and basic profile information, such as your display name and profile picture when returned. These sign-in permissions do not request your Gmail messages, Google Drive files, calendars or contacts.
Use: AFitBot sends your Google account identifier, email address and display name to AFitBot service systems to authenticate you, create or associate your AFitBot account and initialize your account nickname. Fitness information and conversation content described in Section 6.1 come from your use of AFitBot and connected exercise equipment; these are not requested from Google by these sign-in permissions.
Processing and sharing: Shenzhen Feibao Technology Co., Ltd handles this information as the operator of AFitBot. Google processes the sign-in request, and our cloud hosting, storage and security service providers may process account information as necessary to operate the service under the confidentiality and data protection obligations in Section 7. The restrictions on sale, advertising, cross-app tracking and data brokers in Section 6 also apply to Google Sign-In information.
Google data and AI services: Google Sign-In information is used for login and account profile services. We do not send this information to Alibaba Cloud Tongyi Qianwen or other AI service providers, or use it to train AI models. AFitBot's use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and retention: Google Sign-In information associated with your AFitBot account is subject to the storage and protection measures in Section 8. We retain it for as long as necessary to provide and secure your account, subject to the legal and other retention grounds in Section 9. Account deletion includes deletion or anonymization of the associated Google account identifier, email address and display name under Section 9, including its retention exceptions and backup handling.
Revocation and deletion: You can revoke AFitBot's Google access through your Google account's third-party connections. Revocation stops future authorized access; it does not automatically delete your AFitBot account or information already stored by AFitBot. To request deletion of your account or Google Sign-In information, email info@afitbot.com with the subject “AFitBot Account / Google Data Deletion” and identify the email address associated with your AFitBot account. Do not send your Google password or authentication tokens.

Fitness and health-related information

Height, weight, age, gender, body fat range, target weight, training areas, training experience, duration and schedule, and injuries or health conditions that you choose to enter. Relevant BMI and metabolism estimates may be calculated from this information.
Workout plans, exercise records, training duration, calories and steps.
Heart rate, sleep or other health and fitness data when you choose to provide it or authorize a supported health service.

AI, photos and workout content

Text messages, prompts and relevant conversation content that you submit to the AI fitness coach.
Voice recordings collected when you actively use voice input and grant microphone access, and the text recognized from those recordings.
Photos that you upload for avatars, workout records, fitness analysis or movement recognition.

Face data

Captured face photos: temporary face photos captured by your device camera when you choose to use the face recognition feature. These photos are temporarily stored on your device only for processing and upload, and are immediately and permanently deleted from your device's local storage once the upload is completed or fails.
Facial feature information (facial templates): numeric facial feature vector data derived from face photos, used solely for face recognition enrollment and identity verification within the app.

Device, app and diagnostic information

Device model, operating system version, app version, language, network status and approximate service region derived from network information.
App instance identifiers, Android ID, OAID and basic app identifiers used for security and diagnostics.
Operation logs, crash logs, error logs, security logs and basic performance diagnostics.

3. How we use information

To create, authenticate, secure and manage your account.
To provide workout planning, training records, fitness statistics, movement analysis and AI coaching features.
To analyze workout data and generate personalized fitness suggestions.
To enroll and verify your face recognition status when you choose to use the face recognition feature.
To improve app reliability, diagnose crashes, prevent abuse, and protect account and system security.
To respond to support requests, account deletion requests, legal obligations and regulatory requirements.

4. App permissions

AFitBot may request the following permissions only when needed for a related feature:

Camera: take or upload profile images, support workout movement analysis, and capture face photos when you choose to use face recognition.
Photos: choose profile images and upload workout or fitness-related images.
Microphone: record voice input only when you choose to use it. Recordings are sent through AFitBot servers to the Alibaba Cloud Tongyi Qianwen agent for speech recognition, as described in Section 6.1. Microphone permission does not replace the separate AI data-sharing consent in the iOS app.
Notifications: send account, training, reminder or service-related notifications if you allow them.

You can disable permissions in your device settings at any time. Some features may not work properly if required permissions are disabled.

5. Face data protection policy

Face data is sensitive personal information. AFitBot enforces strict standards to ensure user privacy and security regarding face data.

5.1 Collection, intended uses and disclosure

Collection: we collect face data (temporary photos and facial feature vectors) only when you actively initiate and consent to using the face recognition feature. Prior to enrollment, the app will explicitly display a prompt informing you of the specific collection purpose, retention period and deletion policies to obtain your explicit consent.
Intended uses: face data is used strictly and solely for account verification and security authentication related to fitness features. Face data is never used for advertising, marketing, cross-app tracking, user profiling or any commercial purpose unrelated to your account security.
Disclosure: we do not sell, rent or trade face data to any third party. Face data will not be disclosed to any external entity except authorized service providers who directly assist in processing account authentication under strict contractual confidentiality obligations.

5.2 Sharing and third-party protection assurance

No commercial sharing: we do not sell face data, share it with data brokers, or use it for cross-app or cross-website tracking.
Service provider obligations: face data may only be processed by our cloud infrastructure or technical service providers as strictly necessary to execute the authentication service.
Third-party equal protection assurance: we explicitly confirm that any third party with whom AFitBot shares face data (such as secure cloud hosting service providers) is contractually obligated to provide the same or equal level of protection for your face data as stated in this Privacy Policy.

5.3 Storage and retention policy

Local temporary file deletion: any temporary image captured during face enrollment is held in local memory strictly for the duration of the upload process. Once the upload is completed or fails, the local temporary file is immediately and permanently deleted from your device storage.
Retention period: extracted facial feature data (facial vectors) is stored securely on protected cloud servers with encryption and strict access controls. Face data is retained for no longer than 24 months from your most recent face enrollment or authentication. This retention period supports stable identity checks without requiring frequent re-enrollment while maintaining account security.

5.4 Revoking consent and deleting face data

How to revoke consent: you may revoke your consent for AFitBot to collect or access your face data at any time by disabling Camera permissions for AFitBot in your device settings (Settings > Privacy > Camera > AFitBot) or by disabling the Face Recognition feature in the app settings. Revoking consent will prevent further collection of face data without affecting your ability to use non-face features.

How to delete your face data: you can delete your stored face data at any time through either of the following methods:

In-app self-service: go to App Settings > Account Security > Reset/Delete Face Data to instantly purge your facial record.
By request: contact us by email at info@afitbot.com with the subject line “Face Data Deletion Request”.

Deletion execution: upon receiving your deletion request or when you delete your account, we will permanently delete or anonymize all your associated face data from our active servers and backups within 30 days.

6. Third-party services

To provide certain features, AFitBot may use third-party service providers. These providers process information only as needed to support the relevant service.

Google Sign-In and Sign in with Apple for account login.
AI service providers for AI coaching, text processing or movement analysis. Alibaba Cloud Tongyi Qianwen provides fitness question answering, fitness analysis, personalized training plan generation and speech recognition as described below.
Cloud hosting, storage, analytics, crash diagnostics and security service providers.

We do not sell your personal information. We do not use health information, fitness information, email address or face data for advertising or cross-app tracking. We do not share personal information with data brokers.

6.1 Alibaba Cloud Tongyi Qianwen: information and purposes

AFitBot uses Alibaba Cloud Tongyi Qianwen through AFitBot servers. Depending on the feature you choose, the following information is sent to Tongyi Qianwen to provide the relevant service:

Fitness questions and conversations: the questions you submit and relevant conversation content, to generate responses. Your questions may contain personal information; please avoid including passwords or unnecessary identifying information.
Body, injury and training information: gender, age, height, weight, body fat range, BMI, estimated metabolism, target weight, training areas, experience, duration and schedule, and injuries or health conditions you enter, for fitness analysis and personalized training plan generation. Relevant exercise records from AFitBot and connected exercise equipment may also be used for analysis.
Voice recordings: if you use voice input, recordings are sent through AFitBot servers to the Tongyi Qianwen agent for speech recognition. The recognized text is then used for fitness questions.

Body, injury and training information comes from information you enter in AFitBot and related estimates; conversation content comes from messages you submit; recordings come from voice input you actively initiate with microphone access; exercise records come from your use of AFitBot and connected exercise equipment. AFitBot servers also receive account and conversation identifiers to associate your information, conversations and plans.

Third-party data protection: AFitBot requires Alibaba Cloud Tongyi Qianwen to provide the same or equal level of protection for personal information shared through these AI services as described in this Privacy Policy, including confidentiality, appropriate access controls and use limited to providing the relevant services.

The storage, security, retention and deletion provisions in Sections 8–10 also apply to information processed through these AI services.

6.2 Optional AI data-sharing consent in the iOS app

Before relevant information is sent to Tongyi Qianwen, the iOS app identifies the provider, explains what information will be sent and why, and asks for your permission. AI data sharing is optional: you can sign in and use non-AI features without agreeing. AI analysis, chat, AI training plan generation and voice uploads stay disabled until you agree. Consent is linked to your account.

You can withdraw consent in Settings > Smart fitness services to stop future sharing. Signing in without selecting AI consent also turns off AI consent for that account. Withdrawal does not automatically delete information already processed; use the privacy contact in Section 14 or the contact shown in the app to request deletion.

7. Sharing and disclosure

We share personal information only in the following situations:

With your consent or at your direction.
With service providers that help us operate AFitBot under confidentiality and data protection obligations.
When required by law, regulation, legal process or lawful government request.
When necessary to protect the rights, safety and security of users, the public, AFitBot or our services.

8. Storage, security and international processing

We use reasonable administrative, technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration and disclosure.

AFitBot's main service systems may store and process information on servers located in mainland China. Some third-party service providers may process information in other regions depending on the service you use. When information is transferred or processed across regions, we take steps designed to protect it in accordance with applicable law.

9. Data retention and deletion

We retain personal information only for as long as necessary to provide AFitBot services, protect security, comply with legal obligations, resolve disputes and enforce agreements.

You may delete your account in the app or request deletion by contacting us. After account deletion, we will delete or anonymize personal information associated with your account unless retention is required by law, security, fraud prevention, dispute resolution or legitimate business record obligations. Face data follows the specific retention and deletion rules described in Section 5. Backup copies may remain for a limited period before they are overwritten or removed from backup systems.

For deletion instructions, see Account Deletion.

10. Your rights and choices

Depending on your location and applicable law, you may have the right to:

Access, correct or update your personal information.
Delete your account and request deletion of personal information.
Withdraw consent for optional permissions or data processing.
Request a copy of certain personal information.
Object to or restrict certain processing activities.

To exercise these rights, use the app settings where available or contact us at info@afitbot.com.

11. Children and minors

AFitBot is mainly intended for adult users. Minors should use AFitBot only with the consent and guidance of a parent or legal guardian. We do not knowingly collect personal information from children where parental consent is required by applicable law.

12. Health and fitness disclaimer

AFitBot provides fitness and wellness information for general reference only. It does not provide medical diagnosis, treatment, prescription or professional medical advice. Please consult a qualified healthcare professional before starting a new exercise program, especially if you have any medical condition.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through reasonable methods such as in-app notices, page announcements or updated effective dates. The updated Policy will apply from the effective date shown above unless otherwise stated.

14. Contact us

If you have questions, requests or complaints about this Privacy Policy or our privacy practices, please contact us:

Shenzhen Feibao Technology Co., Ltd
Customer support: info@afitbot.com
Privacy contact: info@afitbot.com

AFitBot Privacy Policy