Privacy Policy

What we collect

We collect only what you give us or what the app needs to work:

• Account: your email address and a password (stored as a secure hash by our authentication provider, never in plain text).
• Profile: display name, date of birth, time zone, and your preferred units (lb or kg).
• Onboarding answers: your goal (such as lose fat or build muscle), sex (male or female), height, current weight, goal weight if you give one, activity level, and whether you turned on GLP-1 mode. We use them to estimate your daily calorie, protein, carb, fat, fiber and water targets, and your date of birth to apply the protections for people under 18 (see Ages 13 and up). You can change them in the app at any time.
• GLP-1 mode: if you tell us you take a GLP-1 medication, we store only that GLP-1 mode is on. It stays on your account. It is never sent to your clinic and never used for, or sent to, any AI feature.
• Training: workout templates, workouts, exercises (including custom exercises you create), sets, reps, weights, effort ratings (RPE), rest times, cardio (kind, date, minutes, distance and calories), and programs you start (name, length, schedule, the answers they were built from, and which program week each workout was).
• Nutrition: foods you log or save (names, barcodes, serving sizes), calories, protein, carbs, fat, water, your macro targets for training days and rest days, whether you set a day as a training or rest day, and any activity add-ons you create (a name and extra carbs and protein) with the days you log them.
• Body metrics: weight, waist measurement, body fat if you enter it, and any notes you add.
• Check-ins: your weekly check-in answers and any check-in photos you take.
• Messages: messages between you and a coach you have linked with.
• Coach accounts: if you sign up as a coach, your display name, specialty, account status, and billing records for the coach plan.
• Links: records of which coach you are linked with, and whether you have a clinic link (we store a link ID and dates, never the clinic's name).

Much of this is health information. We treat all of it as sensitive and use it only to provide OpoFit to you.

Kept only on your phone: the shot-day reminder you can set in GLP-1 mode (a weekday and a time). It is stored on your device, is never sent to us or synced, and is removed when you turn GLP-1 mode off or delete your account. The notification says only "OpoFit reminder".

What we don't do

• We do not sell or rent your data, and we do not share it for advertising.
• We do not show ads.
• We do not use ad trackers, tracking pixels, or third-party analytics SDKs in the app or on this website.
• Our logs record technical identifiers and error codes only. They do not contain your weights, foods, names, email address, or anything you type.

How we use your data

• To run the app: save your logs, show your progress, and sync between your devices.
• To share data with a coach or clinic, only when you set that up (see below).
• To keep the service secure, prevent abuse, and fix problems.
• To answer you when you contact support.
• To meet legal obligations.

Where your data is stored

Your data is stored with Supabase, our database and authentication provider, on servers in the United States. Access is protected by row-level security so that each account can reach only its own data. Data is encrypted in transit.

So you can train without signal, a workout in progress and finished workouts that have not synced yet are kept in the app's private storage on your iPhone until they reach our servers. Rest timer alerts are local notifications from the app and only say that rest is over.

Other service providers that process limited data for us:

• Apple processes App Store subscription payments. We receive whether you are subscribed, not your card details.
• RevenueCat manages App Store subscriptions for us. It processes your purchase records (which plan, when it started, renews or ends, trials and refunds), keyed by an anonymous user id: a random account id that is not your name or email. We send RevenueCat no name, email, health data or other attributes. Our server keeps a copy of which plan is active so it can check access itself. When you delete your account, we ask RevenueCat to delete your purchase records too.
• Food databases. When you search for a food or scan a barcode, our server sends the search text or barcode, and nothing that identifies you, to the USDA FoodData Central and Open Food Facts databases.
• jsDelivr, a public content delivery network, is used only to load exercise pictures in the app. The app asks it for a picture by file name and sends no personal data: nothing from your account, workouts or other logs. Like any web server, it sees your device's IP address with each request. Pictures are cached on your iPhone after the first view.
• Amazon Web Services (AWS Bedrock) runs the AI model behind Quick workout, Build a program and Suggest meals. For a quick workout, our server sends only your answers to its questions (time, place, equipment, target, experience and any areas to go easy on) and the list of exercises that fit them. For a program, it sends only your answers to its questions (goal, experience, training days, session length, place, equipment, any areas to go easy on, focus and program length) and the list of exercises that fit them; week-by-week progress and suggested weights are worked out on your iPhone, not by the AI. When you ask for meal ideas, it sends only the calories, protein, carbs and fat you have left today (whole numbers) and your answers to its questions (which meals, diet, effort and portion size). None of them sends your name, email, account id, age or date of birth, body measurements, weights, workout history, GLP-1 mode or food logs. Workouts, programs and meal ideas come back to the app and are saved only if you choose to save, start or log them.
• Vercel hosts this website. Like any web host, it may keep short-lived request logs (such as IP addresses) for security and reliability.
• A payment processor will handle coach plan payments on the web once coach billing opens. We will name it here before it does.

Progress photos

• Photos are private. They are stored in private storage and are never shown publicly.
• Face blur is available, so you can hide your face before a photo is saved.
• Only you, and a coach you have linked with, can see your photos. Photos are never shared with a clinic.
• Photos must be of yourself. Photo check-ins are off for anyone under 18.

Coaches

A coach can see a client only after that client links with them in the app. A linked coach sees only what the app shows coaches about that client, not your account email, password, or anything outside OpoFit. You can unlink from a coach at any time, and the coach then loses access. Coaches agree to keep client data confidential under the Coach Agreement.

Sharing with your clinic

If you work with a weight management or medical clinic, you can choose to send it a weekly summary. Clinic sharing is off by default, and only you can turn it on:

1. In the app, you open Share with your clinic and read exactly what will be shared.
2. If you agree, the app gives you a one-time code (valid 15 minutes).
3. You give the code to your clinic. The clinic's system claims it through OpoRx, the clinic platform that connects to OpoFit, and the link is made.

What the clinic receives

Once a week, for the week just ended (Monday to Sunday in your time zone):

• The week's start date.
• Your weight at the start and end of the week, and how many times you weighed in.
• Average daily calories, protein, carbs and fat on days you logged food, and your targets for each (your training-day targets).
• Average daily water and your water target.
• Number of strength sessions, number of cardio sessions, and cardio minutes.
• Check-in adherence (the share of check-ins you completed) and body fat percentage, if recorded.
• Your food log for each day you logged food: the date, that day's totals for calories, protein, carbs, fat and water, and each food entry with its meal (such as breakfast), food name, calories, protein, carbs and fat.

If a weekly summary fails to arrive, we may resend summaries for recent weeks. Anything we don't have is sent as empty, not as zero.

What the clinic never receives

• Your photos.
• Your messages.
• Your coach's notes.
• Your name, email address or date of birth. The summary is tied only to a random link ID.
• Whether you use GLP-1 mode, your shot-day reminder, or your other onboarding answers.

OpoFit does not learn which clinic you linked with. You can unlink at any time in the app (More, Share with your clinic), and no further summaries are sent. A clinic can also end the link from its side.

Once a summary is sent, the clinic holds its own copy. That copy is governed by the clinic's own privacy practices and any obligations it has as a health care provider, not by this policy. Unlinking stops future summaries but does not delete what the clinic already received; ask your clinic about its records.

Health data breaches

We work to keep your data secure. If there is a breach of security involving your health data, we will notify affected users, the Federal Trade Commission, and, where required, the media, as the FTC Health Breach Notification Rule requires, and we will meet any state notification laws that apply.

Payments

The OpoFit client subscriptions (OpoFit and OpoFit Pro) are purchased and billed through Apple and managed with RevenueCat, as described above. Coaches pay OpoFit for the coach plan on this website. Any payment between a client and a coach happens outside OpoFit and is between them; we do not receive or store information about it.

This website

The public pages of opofit.net use no cookies, no analytics and no third-party scripts. Fonts are served from our own domain. If you sign in as a coach, we set a sign-in session cookie that is needed to keep you signed in; it is not used for tracking.

How long we keep data

We keep your data while your account is open. When you delete your account, we delete your account and the data tied to it within 30 days, as described on the Delete Account page. [Retention period and backup handling pending legal review.] We may keep limited records longer where the law requires it, such as billing records for coach accounts.

Your choices and rights

• You can view and edit most of your data directly in the app.
• You can unlink a coach or a clinic at any time in the app.
• You can delete your account in the app or by emailing us.
• You can ask us for a copy of your data, or to correct or delete it, by emailing support@opofit.net. Depending on where you live, you may have additional rights under state privacy or consumer health data laws, and we will honor them. We will not treat you differently for using them.

Ages 13 and up

OpoFit is for people 13 and over. We do not knowingly collect data from anyone under 13: the app won't let anyone under 13 finish setting up. If you believe a child under 13 has an account, email us and we will delete it.

If you are 13 to 17

We use your date of birth to keep extra protections on until you turn 18:

• Photo check-ins are off.
• GLP-1 mode is not offered, and we don't ask about GLP-1 medication.
• Calorie targets are conservative: suggested targets never cut more than 10% below your estimated maintenance, and calories can't be set below a minimum for your age.
• A coach can be in contact with you only if you link with them by invitation.

Changes to this policy

If we change this policy, we will update the date at the top. If a change materially affects how we use or share your data, we will tell you in the app before it takes effect, and we will ask for your consent where the law requires it.

Contact

OPORX LLC, 1185 Glensboro Rd Ste 4, Lawrenceburg, KY 40342. Email support@opofit.net.