Privacy Policy

1.1 Information you provide

• Account information. Your email address and password, or your Sign in with Apple / Google sign-in credentials. Authentication is handled by Supabase.
• Health intake (onboarding). When you set up OrbFit, we ask about your sex, age, height, current and target weight, activity level, desired pace, diet, sleep, and physical capability. We also ask about self-reported medical conditions (for example, diabetes or pregnancy) and injuries or mobility limitations. This is health data. We treat it with extra care: we use it only to personalize your plans and coaching, we never use it for advertising, and by entering it you consent to us processing it for those purposes. You can decline to answer any intake question, though some features personalize less without it.
• Daily voice check-ins. You can record a short daily audio check-in. The audio is uploaded, transcribed, and analyzed by AI to extract tasks and a summary (see Section 3). The audio file itself is deleted from storage immediately after transcription. The transcript and summary stay in your account.
• AI voice coach conversations. When you talk to the realtime voice coach, your live audio is streamed and processed to generate spoken responses (see Section 3).
• Nutrition data. Food photos you take (analyzed by AI to identify foods), foods you find via barcode or text search, and the meals and macros you log.
• Workout data. Workout logs and, optionally, workout proof videos you record with your camera and upload to our storage. OrbFit uses the camera only — it does not access your photo library.
• Weight and water intake history.
• Profile and community data. Your handle, display name, and avatar — some of which are visible to other users (see Section 5).
• Waitlist email. If you join the waitlist on our website, we collect your email address.
• Support messages. Anything you email to support@itson.app.

1.2 Information collected automatically

• Usage analytics. We use PostHog (hosted in the US) to understand how the Service is used. Events are tied to your user ID and retained for approximately 12 months.
• Push notification tokens.Collected via Expo so we can send you notifications you've enabled.
• Basic technical data. Device and app information needed to run and debug the Service.

We do not use advertising trackers or ad networks.

1.3 Information from connected services (all optional, all opt-in)

• Apple HealthKit / Android Health Connect.If you grant OS-level permission, we read your steps, distance, active minutes, and active calories. You control this through your device's health permissions and can revoke it there at any time.
• Garmin. If you connect a Garmin account (via OAuth), we sync daily activity summaries. You can disconnect Garmin at any time in the app.

Data from HealthKit, Health Connect, and Garmin is used only to power your OrbFit experience — activity tracking, XP, streaks, and coaching. It is never used for advertising or marketingand is handled in accordance with Apple's and Google's health data framework rules.

We use your data to:

1. Provide the Service — create your account, generate personalized workout and nutrition plans, track habits, XP, streaks, and leaderboards.
2. Power AI features — transcribe your check-ins, run the AI voice coach, analyze food photos, and generate insights and summaries.
3. Sync and display your progress — across your devices and, for the limited profile fields described in Section 5, on leaderboards.
4. Operate and improve the Service — analytics, debugging, and feature development.
5. Communicate with you— service messages, push notifications you've enabled, and responses to support requests.
6. Meet legal obligations and enforce our Terms of Service.

We do not sell your personal data, and we do not use your health data for advertising or marketing of any kind.

AI is central to OrbFit, so here is exactly what happens:

• Daily check-ins: your recording is transcribed by OpenAI (Whisper), then Anthropic extracts tasks and generates a summary. The audio file is deleted from storage immediately after transcription.
• Realtime voice coach: your live audio streams through Daily / Pipecat Cloud (voice transport); Deepgram converts your speech to text; Anthropic generates the coach's responses; Cartesia (and on some surfaces, OpenAI) converts responses to speech.
• Food photos: analyzed by Anthropic vision models to identify foods and estimate nutrition.
• Chat and coaching: text conversations with the coach are processed by Anthropic.

Model training: our agreements with our AI providers are on API terms that do not use customer data for model training by default.

We share data only with service providers ("processors") that operate parts of the Service on our behalf, and only what each needs:

We may also disclose data if required by law, to protect the rights and safety of users or the public, or — should the business ever be sold or reorganized — to a successor who must honor this policy.

We do not share your data with advertisers or data brokers, and we do not sell it.

OrbFit has leaderboards. If you use the Service, your handle, display name, avatar, total XP, level, and rank are visible to other OrbFit users.

There is currently no setting to hide yourself from leaderboards. Your health data, check-ins, transcripts, meals, weight, and workout details are notvisible to other users — only the leaderboard fields listed above. Choose a handle and avatar you're comfortable showing publicly.

• Delete your account: in the app, go to Settings → Delete account. Your account enters a 30-day grace period (during which you can change your mind by signing back in), after which your data is permanently purged.
• Export your data: email support@itson.app and we will send you a JSON export of your data within 30 days.
• Health permissions: revoke HealthKit / Health Connect access in your device settings; disconnect Garmin in the app.
• Push notifications: control them in your device settings.
• Marketing emails: if we send any, every one includes an unsubscribe link.
• Global Privacy Control (GPC): our website honors GPC browser signals. We do notrespond to legacy "Do Not Track" (DNT) signals, which have no settled meaning.

If you live in California or another US state with a comprehensive privacy law (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others), you have the right to:

• Access the personal data we hold about you;
• Delete it;
• Correct inaccuracies;
• Receive a portable copy of it;
• Not be discriminated against for exercising these rights; and
• Appeal if we decline a request.

To exercise any of these, email support@itson.app. We will verify your identity (typically by confirming control of the email on your account) and respond within 45 days. You may use an authorized agent; we will require proof of the agent's authority and may still verify your identity directly. If we deny a request, you may appeal by replying to our decision, and we will respond to your appeal.

For clarity under these laws: we do not sell personal data, we do not share it for cross-context behavioral advertising, and we honor GPC on our website. We process health-related data only with your consent and only to provide the Service.

Controller: Paulo Batista Ferraz, reachable at support@itson.app.

Legal bases. We process your data on the following bases:

• Contract — providing the Service you signed up for (account, plans, tracking, leaderboards);
• Consent — health intake data, voice recordings, HealthKit / Health Connect / Garmin data, and any marketing emails. You may withdraw consent at any time (stop using the feature, revoke device permissions, disconnect the integration, or email us) without affecting prior processing;
• Legitimate interests — analytics, security, and service improvement, balanced against your rights;
• Legal obligation — where the law requires us to keep or disclose data.

Your rights. You may request access, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interests. Email support@itson.app. You also have the right to lodge a complaint with your supervisory authority.

International transfers. We are based in the US and our processors are primarily US-based, so your data is transferred to the United States. Where required, these transfers are protected by Standard Contractual Clauses (SCCs) or another lawful transfer mechanism.

OrbFit is not for children. You must be at least 13 to use it (16 in the EEA/UK). We do not knowingly collect data from anyone under those ages. If we discover we have, we will delete the account and its data. If you believe a child is using OrbFit, email support@itson.app.

We use commercially reasonable safeguards to protect your data — including encrypted connections, access controls, and row-level security in our database so your records are only readable by you and our systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If a breach affects you, we will notify you as required by law.

The Service is operated from the United States and our service providers store and process data primarily in the US. If you use OrbFit from outside the US, you understand your data will be transferred to and processed in the US, which may have different data protection laws than your country. For EEA/UK users, Section 9 describes the safeguards we apply.

We may update this policy as the Service evolves. If we make material changes, we will notify you in the app or by email before they take effect and update the "Last Updated" date above. Your continued use after the effective date means the updated policy applies.

Paulo Batista Ferraz
Operator of OrbFit
support@itson.app
New Jersey, USA