# Privacy Policy **Last updated: 08/09/2026** **Applies to: AI Fitness for iOS** **Provider established in Sweden** --- ## The short version AI Fitness keeps your data on your device. There is no AI Fitness account, no AI Fitness server, and no copy of your training or nutrition history held by us. The app's AI features run on Apple's Foundation Models framework. Most requests are processed **entirely on your device** and never leave it. Some requests — generally longer or more complex ones — may be sent to **Apple's Private Cloud Compute**, a system Apple designed so that even Apple cannot access what is processed there. Neither path sends your data to us, and neither involves any third-party AI company. Two further things worth knowing: - **Apple Health**, if you turn it on, shares nutrition data between this app and your Health app, under your control. - The app requires **iOS 26 or later** and a compatible device to use AI features, because they depend on hardware Apple's on-device models require. We do not sell your data. We do not use it for advertising. We cannot read it. --- ## 1. Who we are AI Fitness is developed and published from Sweden by Kenechi Okolo, the controller in respect of the limited processing described in this policy. Questions, or to exercise any right described here: **appsupport@canvasandthemachine.com**. --- ## 2. What the app stores, and where All of the following is written to a database inside the app's own storage on your device. It is not transmitted to us and we have no means of accessing it. **Training** - Workouts: date, duration, exercises, sets, weight, repetitions, and any effort rating (RPE or RIR) you record - Routines and programmes, including any generated for you - Personal records and statistics derived from your logged sessions **Nutrition** - Meals: name, time, and the food items in them, with calories and macronutrients - Photographs taken to log a meal, and the food identified in them - Nutrition targets you set - Meals suggested to you, whether or not you ate them **Coach** - Your conversations with the in-app coach, including your messages and its replies - A record of which suggestions were shown to you and whether you acted on them, used to avoid repeating itself and to limit how often it interrupts you **Settings** - Your goals, experience level, available equipment, preferred units, and training preferences **What we do not collect** We do not operate analytics, advertising, tracking, or crash reporting services in this app. We do not collect your name, email address, location, contacts, device identifiers, or usage statistics. There is nothing to sell and no profile of you exists on any system we control. [If you later add analytics, crash reporting, or any SDK that phones home, this section must be rewritten before that release ships.] --- ## 3. AI features The app's AI features — the training coach, meal photo recognition, and generated routines, programmes and meal suggestions — run on **Apple's Foundation Models framework**, built into iOS. We have not integrated any third-party AI provider. No AI request made by this app is sent to us, to Google, OpenAI, or any company other than Apple. There are two ways a request may be handled, and the app moves between them automatically depending on what you asked and what your device can do locally: ### On-device processing Most requests — logging a meal by typing or speaking, everyday coaching questions, routine generation — are processed **entirely on your device**, using a language model that runs locally. Nothing is sent anywhere. This works without a network connection. ### Private Cloud Compute Longer or more demanding requests may be sent to **Apple's Private Cloud Compute (PCC)**, a cloud system Apple built specifically to extend on-device Apple Intelligence without the privacy trade-offs of a conventional cloud service. Apple states that: - Data sent to PCC is used only to fulfil your request, and only for as long as needed to do so - It is not retained after the request completes, and not used to train Apple's or anyone else's models - Apple engineers and staff do not have access to the data processed there, and Apple states this is independently verifiable — Apple publishes the software running on PCC for outside security researchers to inspect Apple's own description of this system is at: https://security.apple.com/blog/private-cloud-compute/ We have not independently audited Apple's implementation and rely on Apple's published claims. ### What this means in practice - **You do not choose** which path handles a given request; the system decides, and the app does not currently indicate which one was used. - **No profile of you is built** by either path. Apple states that PCC requests are not linked to your Apple ID or to other requests. - **Meal photographs** you use for photo logging are processed via whichever path handles that request, then discarded once processed. A copy of the photograph is stored locally in the app's database. - **AI features require iOS 26 or later** and a device capable of running Apple's on-device models. Older devices may not be able to use these features, or may be limited to the parts of the app that don't need them — logging by hand, browsing programmes, and viewing statistics all work regardless. The coach is not a doctor, a physiotherapist, or a dietitian, and is not a substitute for one. --- ## 4. Apple Health If you grant permission, the app shares nutrition information with Apple Health. **Written to Health:** meals you log, as calories, protein, fat and carbohydrate, recorded against the time you ate. **Read from Health:** dietary calories, protein, fat and carbohydrate, so your daily totals include meals logged in other apps. Health data stays on your device and syncs only through your own iCloud account, under Apple's control, not ours. We never receive it, and it is never sent to any AI feature, on-device or otherwise — it is used only to display your totals inside the app. You can withdraw this permission at any time in the Health app under Sources. Doing so stops future sharing; entries already written remain in Health until you delete them there. --- ## 5. Notifications If you allow notifications, the coach may send occasional messages about your training or nutrition. These are composed on your device and delivered locally, never through a push server. No one outside your device knows what they say or whether you opened them. Notifications can be turned off in iOS Settings, or in the app. --- ## 6. How long data is kept For as long as you keep the app installed. Nothing expires on its own. - Individual workouts, meals and conversations can be deleted in the app - Deleting all data can be performed by selecting this option from the settings menu. - Deleting the app removes its database and everything in it Because we hold no copy, deletion on your device is final. We cannot restore anything for you. Requests handled by Private Cloud Compute are, per Apple's published design, already discarded once processed and do not need separate deletion. --- ## 7. Backups If you back up your iPhone to iCloud or to a computer, the app's database is included, under Apple's terms and your own iCloud settings. We have no access to those backups. --- ## 8. Your rights Under the EU General Data Protection Regulation, and comparable laws elsewhere, you have rights to access, correct, delete, and port your personal data, and to object to or restrict its processing. In practice, because your data lives on your device and not with us: - **Access and portability:** everything is visible in the app, and you can export your full database from the Account screen in SQL database format — a complete, machine-readable copy of your training and nutrition history. - **Correction and erasure:** edit or delete anything in the app directly. - **Objection:** stop using AI features, or revoke Health permission, at any time. The rest of the app carries on working. For anything processed via Private Cloud Compute, Apple's own privacy disclosures apply to that processing; see Apple's Privacy Policy at https://www.apple.com/legal/privacy/. If you believe your data has been mishandled, you may complain to a supervisory authority. Our lead supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY — imy.se). If you live elsewhere in the EEA, you may instead complain to the authority in your own country. If you are in the United Kingdom, you may complain to the Information Commissioner's Office (ico.org.uk). **Legal basis for processing**: on-device processing does not involve us or any third party, so no transfer or disclosure occurs on our part. Where a request is handled by Private Cloud Compute, this happens as part of the AI feature you chose to use, on the basis of your consent to that feature. You can withdraw it at any time by not using AI features, with no effect on the rest of the app. --- ## 9. Children AI Fitness is not intended for anyone under 16. We do not knowingly process data from children. --- ## 10. Security Your data is protected by iOS itself: app storage is sandboxed and encrypted at rest when your device is locked with a passcode. Requests handled by Private Cloud Compute are, per Apple's published design, protected in transit and while processed. Set a passcode and enable Face ID or Touch ID. Anyone with access to your unlocked device can open the app and see everything in it. --- ## 11. Not medical advice AI Fitness provides general fitness and nutrition information. It is not medical advice, not a diagnosis, and not a treatment plan. Its suggestions are generated automatically and may be wrong. Talk to a qualified professional before starting a new training programme or changing your diet, particularly if you are pregnant, have an injury, or have any medical condition. If something hurts, stop, and see a doctor or physiotherapist. If you are struggling with food, eating, or how you feel about your body, please speak to your GP or a registered dietitian. This app is not the right help for that. --- ## 12. Changes to this policy We will update this page when the app changes. Material changes — particularly any new collection or sharing, or a change in how AI requests are processed — will be flagged in the app before they take effect. The date at the top shows the current version. --- ## 13. Contact Kenechi Okolo, Sweden **appsupport@canvasandthemachine.com** We aim to respond to any request about your data within one month, as the GDPR requires.