Introduction
This Privacy Policy explains how FitMax, a mobile application by Mehmet Sancaktutan & Burak Taş, handles your information. We built FitMax to respect you: we don't sell your data, we don't show ads, and we don't track you across other companies' apps.
By using FitMax, you agree to the practices described here. If you do not agree, please discontinue use of the app.
Information We Collect
We collect only what the app needs to work well for you. This falls into two groups: information you provide, and information collected automatically.
Information You Provide
This is the information you enter or submit directly while using the app:
- No account / anonymous use: There is no sign-in, registration, email, or password. We never create or collect a user ID, and the analysis and plan requests carry no user, device, or session identifier. Identity exists only at the Apple ID (billing) level and as an anonymous subscription profile.
- Body photos: The one to three photos you take or pick are resized and sent to the AI provider through our proxy to produce your report. On success, the full-resolution originals are also written to the app's own storage on your device. They are not stored on our servers, and there is no cloud sync — but the app's storage is not excluded from device backups, so they will be included in an iCloud or computer backup if you make one.
- On-device measurements: Before your photos are sent, the app uses Apple's Vision framework on your device to estimate shoulder-to-waist ratio, shoulder and hip tilt, arm span, leg-to-torso proportions, and image sharpness. That step uploads nothing — but the resulting numbers are included as text in the analysis request.
- Profile & fitness data: Your name, gender, age, height, weight, goal, activity level, training preferences, plans, and workout logs are stored on your device. Your gender, age, height, weight, training experience, and goal are included in the analysis request; when you generate a training plan, your name and a dated summary of your previous reports go with it as well, unless you turn off "use my body analysis" in the questionnaire.
- Analysis reports: Each report — scores, estimated body fat, strengths, and advice — is saved on your device along with the paths to its photos. Reports and photos accumulate without a limit and are not cleaned up automatically.
- Result cards you save or share: If you save or share a result card, the app builds an image containing your scores and a square crop of your own photo centred on your face, found by on-device face detection. Saving writes it to your system Photos library, where it syncs to iCloud Photos if you have that on and remains after FitMax is deleted. Sharing hands it to whichever app you choose.
- Cached exercise media: Exercise animations are cached on your device so they do not download twice. There is no in-app control to clear this cache, and cached filenames encode the source URL, so someone with access to your unlocked device could tell which exercises you had viewed. The exercise detail screen loads animations in an embedded web view pointed at the remote host, which lets that host set cookies in the app's web-content store.
- Subscription data: Purchase transactions are handled by Apple and a subscription service, which receives a device identifier (IDFV), IP address, install ID, and device information (model, OS version, language, time zone) tied to an anonymous profile. Card details never reach us.
Automatically Collected Information
To keep the app secure and reliable, limited technical information — such as your subscription and entitlement status and basic device information necessary for the app to function — may be processed. We do not use advertising identifiers and we do not build advertising profiles.
How AI Processing Works
When you run a body analysis or generate a training plan, the relevant photos and text are sent over an encrypted connection through our own proxy — hosted on Vercel — to Anthropic, which produces the result. Requests carry no account, device, or user identifier. Under Anthropic's published API policy, data sent through the API is not used to train its models; that is the provider's commitment rather than something the app itself can guarantee.
Purchases and Subscriptions
All purchases and subscriptions are processed by Apple through the App Store, and Apple handles billing. We never receive or store your payment card details.
Analytics
FitMax does not use third-party advertising or cross-app tracking analytics. Any analysis we perform is limited to aggregate, privacy-respecting diagnostics used to keep the app stable and improve reliability. We do not sell analytics data.
Backend Services
Your data is handled with privacy in mind. Your history and preferences are stored on your device rather than in an online account. Where the app connects to online services, data travels over encrypted connections (HTTPS/TLS), and without a login there is no profile linking that activity to your identity.
Third-Party Services
We rely on a small number of trusted providers to operate the app. Each processes data only as needed to deliver its function:
- Anthropic (Claude) — Analyses your body photos and produces the report. The photos and the accompanying text are sent to this provider through our proxy. Under the provider's published API policy, data sent this way is not used to train its models; that commitment is the provider's rather than something the app can enforce..
- Vercel — Hosts our request proxy, which every analysis request passes through so that provider API keys never ship inside the app. The connection is encrypted end to end, but it terminates on this infrastructure, which means your photos pass through it on their way to the AI provider..
- Apple — Apple's in-app purchase system processes the auto-renewing subscriptions. Payments are charged to your Apple ID; we never receive or store your card details..
- Adapty — Manages subscription state, purchase validation, and premium entitlement through an anonymous device-level profile. Advertising-identifier (IDFA) collection is switched off, so the app does not track you across other companies' apps or websites..
- GitHub — Hosts the public exercise database and the demonstration animations. The database is downloaded the first time you open the Training tab, without any action from you, and animations load as you browse. No personal data is attached, but the host sees your IP address as it would for any web request..
These providers may process data outside your country. We choose providers that maintain appropriate security and data-protection standards.
Data Retention
We keep as little as possible. Because there is no account, your history and preferences are stored only on your device and remain available for as long as you keep the app installed. Removing them in the app or uninstalling deletes them.
Data Deletion Requests
You can remove your data at any time: FitMax has no account, so there is nothing to delete on a server. Everything the app stores — your profile, your analysis reports and their photos, your plans, and your workout history — lives only on your device, and Settings → Delete My Data erases all of it permanently in one step. Removing the app does the same. Note that a result card you chose to save lives in your system Photos library and is not affected, and neither is your subscription — manage or cancel it from your Apple ID settings.. Because there is no account, your history and preferences live only on your device, so clearing them in the app or deleting the app removes them completely.
Deleting the app from your device does not cancel any active subscription. If you need help, contact us at support@aurelionlabs.digital and we will assist with your request.
Children's Privacy
FitMax is not directed to children under 17 (or the minimum age required in your region). We do not knowingly collect personal information from anyone under that age. If you believe a child has provided us data, contact us and we will delete it.
International Users
You can use the app from anywhere in the world. Because we work with international providers, your information may be processed in countries other than your own. Where applicable law (such as the GDPR or Turkey's KVKK) grants you rights to access, correct, export, or erase your data, we honor those rights — most can be exercised directly in the app, and the rest by contacting us.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of this page. Significant changes will be communicated within the app where appropriate.
Contact
If you have questions about this policy or your data, contact us at support@aurelionlabs.digital.