Privacy Notice
Who we are
AI FitPlan is operated by Kostadin Petkov, trading as "AI FitPlan". Kostadin Petkov is the data controller for the personal data described in this notice and decides how and why it is processed. Contact: hello@aifitplan.app.
Personal data we collect
Account data (email address and authentication identifiers, including your Google account email and user ID if you sign in with Google). Profile and health-related data you enter during onboarding: age, sex, height, weight, goals, activity level, diet preferences, allergies and available equipment. Generated content: nutrition plans, workout plans, grocery lists, progress entries and AI coach conversations. Support messages you send us. Limited technical data such as IP address, device and browser type, and error logs. We never see or store your card details.
Why we use it and our legal basis
To create and manage your account and provide the service, including generating and storing your plans and coach replies (performance of our contract with you). Health-related profile inputs are processed on the basis of your explicit consent, which you give by entering them and can withdraw at any time by deleting them or your account. To keep the service secure, prevent fraud and abuse, and improve reliability using error and aggregated data (legitimate interests). To meet accounting, tax and other legal obligations (legal obligation). Marketing emails, if any, are sent only with your consent.
Who we share data with
Hosting, database, authentication and infrastructure providers that run the application on our behalf. AI model providers that process your profile inputs and chat messages solely to generate plans and coach responses. Paddle.com Market Ltd, our Merchant of Record, which receives your name, email address, billing and transaction data in order to process payments, manage subscriptions, calculate and remit tax, issue invoices, and handle refunds and payment support. Professional advisers such as accountants and lawyers. Public authorities where disclosure is legally required. We never sell your personal data or use it for third-party advertising.
International transfers
Some providers, including Paddle, process data outside your country. Where personal data leaves the UK or EEA we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
How long we keep it
Account, profile and plan data is kept while your account is active and for up to 12 months after you stop using the service, then deleted or anonymised. Support correspondence is kept for up to 24 months. Invoice and transaction records are retained by us and by Paddle for the period required by tax law (typically 6-10 years). If you delete your account, your profile, plans and chat history are deleted promptly.
Your rights
You can request access to your personal data, correction of inaccurate data, erasure, restriction of or objection to processing, and portability, and you can withdraw consent at any time where processing relies on consent. Email hello@aifitplan.app to exercise any right; we respond within one month. If you are in the UK or EEA you may also complain to your local data protection supervisory authority.
Security
We use appropriate technical and organisational measures: encryption in transit (HTTPS/TLS), encryption at rest in our managed database, row-level security so each account can only read its own records, least-privilege access controls for administrative access, and secure secret storage for API keys. We review these measures regularly.
Cookies
We use strictly necessary cookies and browser local storage to keep you signed in and remember basic preferences. Checkout pages served by Paddle may set their own cookies needed to complete a purchase. We do not use advertising cookies. You can clear or block cookies in your browser settings, but sign-in will not work without the essential ones.
Changes to this notice
We may update this notice as the product evolves. The current version always appears on this page.