What we collect

• Google account basics: your email address, name and profile picture, used to sign you in and show your avatar.
• Profile and fitness data: what you tell the coach or enter during setup, such as goal, sex, age, height, weight, training schedule, equipment, injuries or limits, food preferences and allergies, plus the meals, workouts, weigh-ins, plans, targets and weekly reviews that come from using the app.
• Meal photos: processed to estimate what is on the plate. The photo itself is not stored; only the resulting meal entry (items, portions, calories and macros) is saved.
• Chat conversations and coach memories: your messages and the coach's replies, and short notes the coach keeps so it can remember your goals and preferences between sessions.
• Feedback and optional usage diagnostics: ratings and comments you choose to send, and high-level operational events (such as which tab was opened, response latency, and tool call counts). Usage events never include your messages and can be turned off at any time in Privacy & Data Controls (PDPA).

How we use it

Your data is used only to provide the coaching: answering your questions, estimating meals, building and adjusting plans, tracking progress and writing weekly reviews. Feedback and usage events help us fix problems and improve the product.

• No advertising, and no ad tracking.
• We do not sell or rent your data.

Who processes it

Fitness Buddy runs on Google Cloud. These services process data on our behalf:

• Vertex AI (Gemini): understands your messages and meal photos and writes the coach's replies.
• Vertex AI Agent Engine (Agent Runtime): runs the coach agents, conversation sessions and coach memories.
• Firestore: stores your profile, logs, plans, reviews and feedback.
• Cloud Run: hosts this web app.
• Model Armor: screens inputs and outputs for prompt injection and unsafe content.
• Cloud Data Loss Prevention (DLP): detects and redacts personal information.

Sign-in uses Google Identity Services.

How we protect it & Administrator visibility boundary

• Strict Coach Chat Confidentiality: Backend administrators cannot view your private AI Coach chat messages, coach memories, meal photos, nutrition logs, body weight/measurements, or live camera form-check sessions in the Admin Console. Your coaching conversations are strictly isolated to your authenticated account.
• Personal information such as emails and phone numbers is redacted before it is written to logs or coach memories.
• Each account's data is kept separate, and the app only reads and writes data for the signed-in user.
• Traffic is encrypted in transit, and Google Cloud encrypts stored data at rest.

How long we keep it

• Your account data (profile, logs, plans, reviews, conversations and coach memories) is kept until you delete your account.
• Operational logs are kept for 30 days (or purged immediately if you withdraw usage-data consent).
• Feedback is kept to improve the product.
• Meal photos are not stored.

Your choices and PDPA rights

• Withdraw Usage Data Consent (PDPA Sections 13–16): open the account menu (or click the Private shield pill in the Coach header) and choose Privacy & Data Controls. Turning off Share Usage & Operational Diagnostics Data immediately stops operational telemetry, redacts request previews in server logs, and purges your historical presence and usage records from the Admin Console without affecting any AI Coach features.
• Access & Portability (Export): open the account menu and choose Export my data to download everything as a JSON file.
• Erasure (Delete): choose Delete my account in the account menu. This permanently deletes your profile, logs, plans, reviews, coach memories, conversations, and operational telemetry. Your Google account is not affected.
• Correction: ask the coach to fix any entry, or change your details in chat.

Not medical advice

Fitness Buddy provides general fitness and nutrition guidance. It is not a doctor and does not diagnose or treat any condition. Talk to a healthcare professional before starting a new program, and seek medical help for pain, injuries or worrying symptoms.

Contact and changes

Questions or requests? Open an issue on the GitHub repository. Please don't post personal or health details there.

If this policy changes, we will update this page and the date above.

我们收集的信息

• Google 账号基本信息：邮箱地址、姓名和头像，用于登录和显示你的头像。
• 个人资料和健身数据：你在设置时填写或告诉教练的信息，例如目标、性别、年龄、身高、体重、训练安排、器械、伤病或限制、饮食偏好和过敏，以及使用过程中产生的饮食、训练、体重记录、训练计划、目标和每周回顾。
• 餐食照片：仅用于识别和估算食物。照片本身不会被保存，只保存识别结果（食物、份量、热量和三大营养素）。
• 聊天记录和教练记忆：你的消息和教练的回复，以及教练为记住你的目标和偏好而保存的简短笔记。
• 反馈与可选的运行诊断数据：你主动提交的评分和意见，以及用于保障系统稳定性的高层级统计事件（如打开了哪个标签页、AI 响应耗时、工具调用次数）。诊断事件绝不包含你的聊天正文，且可随时在隐私与数据共享 (PDPA) 设置中关闭。

我们如何使用

你的数据只用于提供教练服务：回答问题、估算餐食、制定和调整计划、跟踪进度以及撰写每周回顾。反馈和使用事件帮助我们修复问题、改进产品。

• 没有广告，也没有广告追踪。
• 我们不会出售或出租你的数据。

由谁处理

Fitness Buddy 运行在 Google Cloud 上，以下服务代表我们处理数据：

• Vertex AI（Gemini）：理解你的消息和餐食照片，生成教练回复。
• Vertex AI Agent Engine（Agent Runtime）：运行教练智能体、对话会话和教练记忆。
• Firestore：存储你的个人资料、记录、计划、回顾和反馈。
• Cloud Run：托管本网页应用。
• Model Armor：检测输入和输出中的提示词注入和不安全内容。
• Cloud Data Loss Prevention（DLP）：识别并遮盖个人信息。

登录使用 Google Identity Services。

我们如何保护及管理员可见边界

• 聊天内容绝对私密（管理员不可见）：后台管理员在管理控制台（Admin Console）中无法查看你与 AI 教练的任何聊天消息、教练长期记忆、三餐饮食照片、体重围度数据或实时动作伴练音视频。你的所有对话与健康数据严格隔离在你的私人账户下。
• 邮箱、电话号码等个人信息在写入日志或教练记忆之前会被遮盖。
• 每个账号的数据相互隔离，应用只读写当前登录用户的数据。
• 数据传输全程加密，Google Cloud 对存储的数据进行静态加密。

保存多久

• 账号数据（个人资料、记录、计划、回顾、聊天记录和教练记忆）会一直保存，直到你删除账号。
• 运行日志保存 30 天（若你在设置中撤回使用数据共享授权，你的后台在线与访问记录将被立即抹除）。
• 反馈会保留，用于改进产品。
• 餐食照片不会保存。

你的选择与 PDPA 法定权利

• 撤回使用数据共享授权（PDPA 第 13–16 条）：打开右上角/左下角头像菜单（或点击教练窗口顶部的私密对话盾牌徽章），选择隐私与数据共享 (PDPA)。关闭「共享使用情况与运行诊断数据」开关后，系统将立即停止采集诊断事件、脱敏日志预览，并自动清空管理后台中你过往的在线与访问统计记录，且完全不影响 AI 教练功能。
• 查阅与可携权（导出）：打开账号菜单，选择导出我的数据，即可下载 JSON 格式的全部数据。
• 被遗忘权（删除）：在账号菜单中选择删除我的账号。这会永久删除你的个人资料、记录、计划、回顾、教练记忆、聊天记录及运行统计。你的 Google 账号不受影响。
• 更正权：让教练修改任意一条记录，或在聊天中更新你的信息。

非医疗建议

Fitness Buddy 提供一般性的健身和饮食指导。它不是医生，不会诊断或治疗任何疾病。开始新的训练计划前请咨询专业医疗人员；如有疼痛、受伤或令人担忧的症状，请及时就医。

联系与变更

有问题或请求？请在 GitHub 仓库 提交 issue。请不要在那里公开个人或健康信息。

如果本政策有变更，我们会更新本页面和上方的日期。