Privacy Policy

Trofik ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to that information when you use the Trofik iOS and Android application.

1. Information We Collect

We collect the following types of information:

• Account information: Email address and password used to create and access your Trofik account, via our backend provider, Supabase ,along with an optional display name you can set on your profile.
• Location: with your permission, Trofik collects precise location data while you're actively tracking a workout session, used to calculate distance. Location is not collected in the background or outside of an active session.
• Fitness & workout data: Programs you create, exercises logged, sets, reps, weights, and workout history.
• Nutrition data: Food items scanned or manually entered, meal logs, barcode scans, and caloric information.
• Health data: With your permission, Trofik reads and writes fitness data such as workouts and active calories to Apple Health (HealthKit) on iOS or Health Connect on Android. This data is used solely to keep your Trofik data in sync and to enhance your fitness experience within the app.
• Protocol & supplement data: Peptide, medication, and supplement protocols, including dosages, injection sites, timing, and notes you enter manually.
• Journal entries: Personal notes and reflections you write within the app.
• Camera and photos: Used to scan food barcodes and, if you use Snap Food or recipe scanning, to capture a photo. Photos submitted to AI-assisted features are processed by our third-party AI service provider (Anthropic) solely to generate the requested result (e.g. identifying a food and estimating its macros) and are not stored by us or used to build advertising profiles.
• Calendar: Used only to add dose reminders you create. We do not read your existing calendar events.
• Notifications: Used to deliver reminders you schedule within the app.
• Purchase information: Subscription status is managed by Apple, Google, and RevenueCat. We do not store your payment card details.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Trofik app and its features.
• Generate AI-powered workout programs and food/recipe analysis personalized to your goals and inputs. Content produced by these AI features is clearly labeled as AI-generated within the app, and you should review it before relying on it.
• Sync your data across sessions and devices so your progress is always available.
• Send you notifications and reminders you have opted into.
• Respond to support requests and communicate with you about the app.

We do not use your health or personal data for advertising purposes, and we do not sell your personal information.

3. Health Data (Apple Health & Health Connect)

On iOS, Trofik uses Apple HealthKit to read your workout history and write completed workouts to Apple Health. On Android, Trofik uses Health Connect to read and write fitness data you authorize, such as exercise sessions and active calories burned. In both cases, this data is used only to provide and improve in-app features — to keep what you log in Trofik consistent with your device's health platform. We do not share this health data with third parties, use it for advertising, or sell it for any purpose. This data is additionally governed by Apple's HealthKit policies or Android's Health Connect permissions policy, as applicable, on top of this Privacy Policy. You can revoke health-platform access at any time in your device settings.

4. Data Storage & Security

Your account and app data are stored securely using Supabase, a SOC 2-compliant cloud database provider. Data is encrypted in transit (TLS) and at rest. We implement industry-standard security measures, but no method of transmission over the internet is 100% secure.

5. Third-Party Services

Trofik uses the following third-party services, each strictly to provide the functionality of the app:

• Supabase — database and authentication (Privacy Policy)
• RevenueCat — subscription management across the App Store and Play Store (Privacy Policy)
• Anthropic — AI-powered program generation and food/recipe photo analysis (Privacy Policy)
• USDA FoodData Central and Open Food Facts — public food and nutrition databases used for food search and barcode lookups. Only the search term or barcode you enter is sent — no account information is shared with them.
• WorkoutX — exercise library and instructional animations.

These services may receive limited data necessary to perform their function. We do not sell your personal data to any third party.

6. Data Retention

We retain your data for as long as your account is active. You may delete your account and associated data at any time by contacting us at the email below. Upon deletion, your data will be permanently removed from our systems within 30 days.

7. Children's Privacy

Trofik is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and data.
• Withdraw consent for HealthKit (iOS) or Health Connect (Android) access at any time in your device settings.
• Opt out of notifications at any time in your device settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.