Draft. The operator name and contact email have not been set on the server (LEGAL_OPERATOR, LEGAL_EMAIL), and a lawyer has not reviewed this text. Do not submit the app to a store with this banner showing.

Privacy Policy

Last updated 23 October 2026

This policy explains what ZeroFitness (“the app”) collects, why, who sees it, and how you can have it deleted. It applies to the app and to our server at fitness.zerotal.dev. It is run by [operator name not set] (“we”, “us”). Contact: [contact email not set].

In short. Your food log, weight and fasting history live on your phone. If you create an account, a copy is also stored on our server so you can change phone. If you take a meal photo for AI scanning, the photo is sent to our AI provider to work out calories, and we do not keep it. We do not sell your information, show ads, or use tracking or analytics tools.

1. What we collect

Information	Why	Where it is
Your entries: food log, water, weight, body measurements, fasting history, daily targets, and the details you give when setting up (sex, date of birth, height, activity level, goal)	To run the app: totals, targets, charts and fasting timers	On your phone. A copy is on our server only if you have an account (see “Backup”)
Account: email address, a one-way hash of your password (we cannot read your password), an account number, your subscription status, and the devices signed in	To let you sign in, keep your subscription and bring your data to a new phone	Our server
Backup: a copy of your entries, stored as one file per account	So you can restore your data on a new phone	Our server. Server backups of that file are encrypted
Meal photos (Premium AI scanning) and any note you type to correct a result	To estimate the food and calories in the photo	Sent through our server to our AI provider and not stored by us (see section 3)
Barcodes you scan	To look the product up	The barcode number is sent from your phone to Open Food Facts. Found products are saved on your phone
Purchase status: that a subscription is active and when it ends	To unlock Premium and to let the server enforce AI limits	Our server and RevenueCat. We never see your card details
Technical: your network (IP) address, the time and the page or action requested, and how many AI scans your account used today	Security, preventing abuse, fixing faults and fair-use limits	Web server logs (IP addresses kept up to 14 days). For abuse limits we keep only a salted, scrambled form of your address, not the address itself

The app asks your phone for permission to use the camera (barcodes and meal photos), your photo library (only when you choose a photo) and notifications (the “fast complete” reminder, which your phone schedules itself; we send no push messages).

2. Health information

Weight, body measurements, fasting history, food intake, date of birth and similar entries are health-related, which many laws treat as sensitive. We use it only to provide the features you ask for. By creating an account, or by using a feature that sends it to us, you agree to us processing it for that purpose. You can withdraw that agreement at any time by deleting your account (section 6). Without an account, your entries stay on your phone.

3. Meal photos and our AI provider

When you use AI scanning, the photo (and anything you type to correct a result) is sent from your phone to our server and on to Anthropic, which runs the AI model that estimates the food. The result comes back to your phone. We do not save the photo or the result on our server. Under Anthropic's published terms for its business API, content sent to it is not used to train its models, and is not kept by default except where needed for legal or safety reasons. Do not photograph anything you would not want a service provider to process, such as documents or other people.

AI estimates are approximate and can be wrong. You always review and can change them before anything is saved.

4. Who else receives information

Only service providers that help us run the app, and only what they need:

Anthropic: meal photos and correction notes, for AI scanning.
Our hosting provider (Contabo): runs the server that stores accounts and backups.
RevenueCat: manages subscriptions. It receives your account number and purchase details.
Apple or Google: process payments and manage your subscription under their own privacy policies.
Open Food Facts: receives the barcode number you scan, and your network address, as any website does.
Our email provider (Resend): delivers the codes we email you to confirm your address and to reset your password. It receives your email address and the message.

We do not sell personal information, we do not use advertising or analytics tools, and we do not share your entries with anyone else. We may disclose information if the law requires it. Some of these providers are in other countries (for example the United States), so your information can be processed outside your own.

5. How long we keep it

On your phone: until you delete it or uninstall the app.
Your account and backup: until you delete your account.
Server backups: encrypted copies are kept for 14 days, so deleted data disappears from them within about 14 days.
Meal photos: not kept by us.
Server logs: up to 14 days.
Daily scan counters: contain no personal details and are kept to enforce limits.
Purchase records: kept by Apple, Google and RevenueCat under their own policies.

6. Your choices and rights

See or correct your data: it is all visible in the app, and you can edit or remove entries there.
Delete your account and its backup: in the app, Settings, Account, Delete account. You can also ask us at [contact email not set]. Deleting your account does not cancel a subscription; cancel that in the App Store or Google Play.
Get a copy, object, or ask a question: email [contact email not set].
Complain: if you are not satisfied, you may complain to your data protection authority. In South Africa this is the Information Regulator (inforeg.org.za).

7. Security

Connections to our server use HTTPS. Passwords are stored only as one-way hashes. Server backups are encrypted, and the key is not kept on the server. Access to the server is limited to us. No system is perfectly secure, so please use a password you do not use elsewhere. If a breach affects you, we will tell you and the regulator as the law requires.

8. Children

The app is for people aged 18 and over. We do not knowingly collect information from anyone younger. If you think a child has given us information, contact us and we will delete it.

9. Changes

If we change what we collect or who we share it with, we will update this page and, for material changes, tell you in the app before it takes effect. The date at the top shows when it last changed.

10. Contact

[operator name not set]
[contact email not set]