Privacy Policy

• Account and contact data: email address, authentication provider, account identifiers, and support communications.
• Photos and AI content: body photos, generated physique projections, meal photos, and AI-generated analysis or feedback.
• Fitness and wellness data: age, height, weight, goals, activity level, workout schedule, exercises, sets, repetitions, progress, meals, and estimated nutrition information.
• Purchase data: product, subscription status, renewal and expiration dates, transaction identifiers, and store. FitMirror does not receive or store full payment-card details.
• Usage and technical data: feature events, attribution parameters, app version, device model, operating system, diagnostics, error reports, and security or abuse-prevention signals. Our legacy image-generation protection stores a keyed hash rather than a raw network address.

We use information to create projections; personalize workout and nutrition guidance; calculate fitness targets; operate accounts and subscriptions; provide support; maintain security and prevent abuse; diagnose errors; understand feature usage; comply with law; and improve FitMirror. We do not use body or meal photos for advertising.

Body photos and related prompts are transmitted to Google's Gemini API to generate physique projections. Meal photos and relevant fitness context are transmitted to Anthropic's API for meal analysis. Workout context may also be sent to Anthropic to generate coaching. These providers process the information on our behalf to return requested results. Do not upload a photo unless you agree to this processing.

We disclose information only as needed to operate FitMirror, comply with law, protect rights and safety, or complete a corporate transaction. Providers include Supabase for database, storage, and authentication; Google and Anthropic for AI; RevenueCat, Apple, and Stripe for subscriptions and billing; PostHog for limited product analytics; Sentry for privacy-filtered diagnostics; and Resend for support email. We require providers handling user data to protect it consistently with this Policy and applicable law.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and FitMirror contains no third-party advertising.

• Temporary web previews: if you do not create an account, the uploaded photo, generated projection, and funnel session are deleted within seven days after your last funnel activity.
• Transferred previews: after a generated projection is successfully copied to your account, the original funnel photo, duplicate projection, and temporary funnel session are deleted within 24 hours.
• Account images: physique images and meal photos stored with your account are retained until you delete your account. Replacing the image displayed in your profile does not delete earlier account images.
• Other account data: fitness, workout, nutrition, and profile data are generally retained until account deletion.
• Required records: limited transaction, fraud-prevention, security, backup, and legal records may be retained for as long as reasonably necessary for those purposes, then deleted or de-identified.

You can delete your account in FitMirror or contact us. Account deletion removes account database records and stored meal and physique images, subject to limited legally required records and normal backup cycling.

You can decline camera or photo-library permission, but photo features will not work. You may request access, correction, deletion, or a copy of your information by contacting us. Depending on where you live, you may have additional rights and a right to appeal our response. We may verify your identity before fulfilling a request.

Browser “Do Not Track” signals are not standardized. FitMirror does not use cross-site advertising trackers or respond differently to those signals.

We use private storage, access controls, signed URLs, authentication, input validation, and diagnostic redaction designed to protect information. No system is completely secure. Providers may process information in the United States or other countries where they operate, subject to appropriate contractual and legal safeguards.

FitMirror is not directed to anyone under 18, and we do not knowingly collect information from minors. If you believe a minor has provided information, contact us so we can delete it.

We may update this Policy as FitMirror or applicable requirements change. We will update the effective date and provide additional notice for material changes where required.

Support Vector Labs LLC
support@supportvectorlabs.com