This Privacy Policy explains how Oxyn ("we", "our", "the app") collects, uses, and safeguards your personal information when you use our bilingual (Arabic / English) AI fitness application on iOS, Android, or the web.
1. Information We Collect
Account information
- Email address, and (if you sign in with Google) your name and profile photo.
- Authentication tokens managed by our backend provider.
Fitness & health data you provide
- Workouts, exercises, sets, reps, weights, and personal records.
- Body measurements, weight logs, and optional progress photos.
- Meal logs, macronutrient totals, and food scans.
- Onboarding details such as age, height, goals, and training experience.
Usage & device data
- Basic device info (platform, app version, language) needed to run the app.
- Diagnostic logs and crash reports so we can fix bugs.
2. How We Use Your Information
- Operate core app features (log workouts, track meals, generate AI coaching).
- Personalize plans, calorie targets, and recommendations.
- Sync your data across your devices.
- Process subscription purchases and restore entitlements.
- Prevent abuse and secure your account.
3. Third-Party Services
We share data only with the processors required to run the app:
- Supabase — hosts our database, authentication, and file storage.
- Google (Gemini AI & Sign-In) — powers AI features such as meal scans, exercise recognition, and coach responses; and, if you use Google Sign-In, handles authentication.
- RevenueCat, Apple App Store, Google Play Billing — handle subscription purchases and receipts. We never receive your full payment card details.
These providers act as data processors on our behalf and are contractually required to protect your information.
4. Data Retention
We keep your data for as long as your account is active. If you delete your account, we permanently remove your personal data within 30 days, except where retention is required by law (for example, subscription billing records).
5. Your Rights
- Access, correct, or export the data associated with your account.
- Delete your account from the app's Settings, or by emailing us.
- Withdraw consent for optional processing at any time.
To exercise any of these rights, email gally.oxyn.ai@gmail.com.
6. Children's Privacy
Oxyn is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will delete it.
7. Security
We use encryption in transit (HTTPS) and encryption at rest via our backend provider. No system is perfectly secure — please use a strong, unique password and keep your device up to date.
8. International Transfers
Our providers may process data outside your country of residence. By using Oxyn you consent to such transfers, subject to appropriate safeguards.
9. Changes to This Policy
We may update this policy from time to time. We will post the new "Last updated" date at the top and, for material changes, notify you in the app.
10. Contact Us
Questions or requests? Email gally.oxyn.ai@gmail.com.