Privacy Policy

Last updated: October 27, 2026

This policy explains what data the GFC mobile app collects, why, where it is stored and how to delete it. In short: we collect only what the app needs to work, show no ads, do no tracking and never sell data.

1. Who is responsible

Illia Kyryliuk (Ілля Кирилюк), developer of GFC. Contact for any data question: support@gfcfitness.app.

2. What data we process

• Account: email and password (the password is stored only as a secure hash).
• Body parameters: age, sex, height, weight, target weight, goal, activity level, training level, training places.
• Workouts: programs, workouts, sets (weight, reps, perceived effort), cardio, exercise notes.
• Nutrition and wellbeing: food diary, your own foods and recipes, water, sleep and wellbeing, weight history.
• Photos: meal photos and photos of your own exercises — only the ones you add yourself. Before upload the app downsizes each photo and removes its metadata (including location).
• AI consent: the date you agreed to AI food estimation and the number of AI requests per day (for the daily limit).
• Feedback: messages you send via “Report a problem”.
• Technical logs: IP address, time and type of requests, errors — recorded automatically by our providers’ servers for security and troubleshooting.

3. Health data

Weight, body parameters, nutrition and sleep are health data. We process them only to make the app work: calculate your calorie and macro targets and show your progress and history. The legal basis is your explicit consent given at sign-up (Art. 9(2)(a) GDPR). Other account data is processed to provide the service to you (Art. 6(1)(b) GDPR). You can withdraw consent at any time by deleting your account.

4. Where data is stored

• Supabase (servers in the EU, Ireland) — database, sign-in, file storage (photos). Photos are kept in private storage: only you can see them.
• Resend (EU, Ireland) — sending emails with sign-in and password reset codes (only your email and the code).
• Expo (650 Industries, USA) — delivering app updates. When checking for updates, Expo’s server receives technical request data (IP address, app and OS version), but none of your in-app data.

5. AI food estimation

When you describe food in text (or dictate it) and tap “Calculate”, only the text of the description is sent to the Claude model by Anthropic (USA) — without your name, email or any other account data. Photos are never sent to AI.

• This happens only after you agree to it in the app. Without consent nothing is sent.
• This is a transfer of data outside the EU, to the USA. It is made under Anthropic’s data processing terms, which include the European Commission’s Standard Contractual Clauses.
• Under Anthropic’s policies, data sent via their API is not used to train models by default and is automatically deleted within 30 days (longer only if a request violates their usage policy or the law requires it).

6. Barcode scanner

When you scan a barcode and the product is not in your own list, the app looks it up in Open Food Facts (an open food database, France). Only the barcode number is sent.

7. What we don’t do

• No advertising.
• No tracking or behavioral analytics; we don’t track you across other apps or websites.
• We don’t sell or share your data with anyone other than the providers listed above.

8. Retention

Data is kept while you have an account. Profile → Delete account (“Видалити акаунт”) in the app immediately deletes your account, all your records and all your photos. Providers delete technical logs automatically after a short period.

9. Your rights

You have the right to:

• access your data;
• correct it (most of it directly in the app);
• delete it (in the app or on request);
• receive it in a machine-readable format (portability);
• withdraw consent — to health data processing or to AI estimation;
• lodge a complaint with the data protection authority in your country.

Send requests to support@gfcfitness.app from your account email. We reply within 30 days.

10. Age

GFC is intended for people aged 16 and over. If you are under 16, please don’t use the app.

11. Not medical advice

GFC provides general training and nutrition guidance and is not medical advice. If you have any health problems, consult a doctor before starting to train.

12. Changes

If this policy changes, we will update the date at the top of this page. We will announce significant changes in the app.