✦ SlimSyFit

Last updated: April 27, 2026

Privacy Policy

1. Who we are

SlimSyFit ("we," "us," "our") is a wellness application offered by an individual operator based in Texas, USA, that provides personalized intermittent fasting plans, AI coaching, and meal tracking. You can reach us at slimsyfitsupport@gmail.com.

2. What information we collect

Information you provide

• Account info: Your email address and password (or Google account if you sign in with Google)
• Survey responses: Your goals, gender, age, height, weight, dietary preferences, and other answers from our onboarding quiz
• Profile info: Your first name, optional measurements, progress photos, weight log entries, mood entries
• Meal data: Foods you log, photos you scan, water intake
• Coach conversations: Your messages with our AI coach Ava

Information collected automatically

• Usage data: Pages you visit, features you use, fasting timer activity
• Device data: Browser type, operating system, general location (country/state level only — never precise GPS)
• Cookies: Authentication tokens to keep you logged in; analytics cookies to understand which features need improvement

Payment information

We never see or store your full credit card number. All payments are processed by Stripe, who handles card details under PCI-DSS Level 1 compliance. We only see your name, email, subscription status, and last 4 digits of your card.

3. How we use your information

• To create and personalize your fasting and nutrition plan
• To respond to your AI coach questions with relevant context
• To process your subscription and send receipts
• To send you optional reminders and progress updates (you control these in Settings)
• To improve SlimSyFit by analyzing aggregated usage trends
• To respond to your support requests
• To prevent fraud and abuse of our service

4. Who we share data with

We only share data with service providers we need to operate the app:

• Stripe — payment processing (stripe.com/privacy)
• Supabase — account authentication and database storage (supabase.com/privacy)
• Anthropic — powers Coach Ava AI (anthropic.com/legal/privacy). When you chat with Ava or use photo meal scanning, your message and relevant context (your goals, recent meals, fasting state) are sent to Anthropic's API. They process the request and return a response — they do not store the data for training purposes per their commercial terms.
• Vercel — hosts our website and serverless functions (vercel.com/legal/privacy-policy)
• Google — only if you choose to sign in with Google. We receive your email and name; we do not get access to your Gmail, Drive, or other Google data.

We never sell your personal data to advertisers, brokers, or anyone else.

5. How long we keep data

• Active accounts: Data retained for as long as your account is active
• After cancellation: We keep subscription/billing records for 7 years (US tax law requirement). All other data is deleted within 90 days unless you request earlier.
• Coach conversations: Retained for up to 12 months for context, then anonymized
• Photos you upload: Stored only on your own device unless you explicitly choose to back them up

6. Your rights

You have the right to:

• Access — request a copy of all data we hold about you
• Correct — update inaccurate information (most fields are editable in Settings)
• Delete — close your account and have data removed (Settings → Account → Delete account, or email us)
• Export — get a copy of your data in JSON format
• Object — opt out of analytics or marketing emails
• Withdraw consent — for any data processing based on consent

To exercise any of these rights, email slimsyfitsupport@gmail.com. We respond within 30 days.

California residents (CCPA)

You have additional rights including the right to know what categories of personal information we collect and the right to opt out of any "sale" of personal information (we don't sell, but the right exists).

European residents (GDPR)

You have rights under GDPR including data portability and the right to lodge a complaint with your local data protection authority.

7. Children's privacy

SlimSyFit is not intended for use by anyone under 18. We do not knowingly collect data from minors. If you believe a minor has signed up, contact us immediately and we will delete the account.

8. Security

We protect your data with:

• HTTPS encryption for all data in transit
• Encrypted database storage (Supabase managed)
• No storage of credit card numbers (Stripe-managed)
• Hashed passwords (bcrypt)
• Regular security updates from our hosting partners

While we follow industry best practices, no system is 100% secure. If we discover a breach affecting your data, we will notify you within 72 hours.

9. International data transfers

SlimSyFit is operated from the United States. Our hosting partners (Supabase, Vercel, Anthropic, Stripe) operate data centers in the US and EU. By using SlimSyFit, you consent to your data being processed in these jurisdictions.

10. Cookies

We use a minimum set of cookies:

• Essential: authentication tokens to keep you logged in
• Functional: remembering your preferences (units, theme)
• Analytics: understanding how features are used (anonymized; you can opt out via your browser's "Do Not Track" setting)

We don't use advertising cookies or third-party trackers.

11. Medical disclaimer

SlimSyFit is a wellness app, not a medical service. Information from Coach Ava and our plans should not replace advice from a qualified healthcare provider. Always consult your doctor before starting any fasting regimen, especially if you are pregnant, nursing, have an eating disorder, take medications, or have a medical condition.

12. Changes to this policy

If we materially change this policy, we'll email you at the address on file at least 14 days before changes take effect. Minor updates (clarifying language, new third-party providers) will be posted with an updated date at the top of this page.

13. Contact

Questions? Email slimsyfitsupport@gmail.com — we respond within 24 hours.