We believe your health data belongs to you. This page explains what CorFit collects, why, who can see it, who we share it with, and how to delete it. It covers the CorFit iPhone app, the Android app and the web app at thecorfit.com.
Your email address, display name and sign-in method (email and password, Sign in with Apple, or Google). With Apple or Google we receive only what you allow them to share, which may be a private relay email address. We never see your password; it is handled by Firebase Authentication.
Linked to you Required to use the appWhat you enter: age, sex, height, weight, fitness goal, activity level, equipment and location preferences, diet preferences, workout history and notes, personal records, and food logs and meal plans. It is stored in your private account on Google Firebase (Firestore). We keep roughly the last 90 days of daily nutrition logs and your most recent workouts, and remove older entries.
Linked to you Private to you unless you share itYou may tell us about injuries or physical limitations, food allergies, a heart or blood-pressure condition, or that you are pregnant or postpartum. We use these only to make workouts and meal suggestions safer and more suitable. They are never used for advertising. They are shared with your coach only if you turn on "Health details" when you accept coaching or later, and with our AI provider only after you allow AI features and generate a plan (see below). You can change or remove them in your profile at any time.
Sensitive OptionalIf you add a profile photo, it is stored in Firebase Storage and shown to you and to your friends in CorFit. Photos in feed posts are shown to every signed-in user who sees that post. We don't read your photo library; you pick the images you upload.
Linked to you OptionalIf you turn on "Save workouts to Apple Health" in Profile and grant permission, CorFit writes completed workouts (type, duration and estimated calories) to Apple Health on your device. CorFit does not read your Apple Health data, and Apple Health data is not uploaded to our servers or used for advertising.
Write-only Off by defaultBefore your first AI workout or meal plan, the app asks whether you allow CorFit to send your profile and health details to Anthropic. If you say no, nothing is sent and CorFit uses its built-in library instead. You can change this at any time in Profile.
When you ask for an AI workout or meal plan, your app sends a request through our server to Anthropic (the company behind the Claude AI model). The request contains what is needed to build the plan: age, sex, height, weight, goal, activity level, equipment, any injuries or limitations, allergies and diet preferences you entered, a calorie target, and for workouts your recent lifts. It does not include your name, email or account identifier. Anthropic processes it under its API terms; under those terms API content is not used to train its models by default. Anthropic may keep API content for a limited period for safety and abuse prevention. See anthropic.com/privacy. The result is shown to you and saved in your account. Our server also keeps a per-account count of how many AI plans you have generated this week, to apply plan limits.
AI output can be wrong or unsuitable. It is not medical advice. Check with a qualified professional if you have a health condition or injury.
Sent to Anthropic when you generate Not sent otherwiseThe camera is used only while you scan a barcode in Nutrition. Images are processed on your device and are not stored or uploaded. The barcode number is sent to the Open Food Facts public database (and, if that finds nothing, a UPC lookup service) to find the product. No account details are sent with it.
Open Food Facts / UPC lookup No images storedIf you join a team, your display name and the messages and workouts you share in team chat are visible to that team's coach and members. The coach can lock chat or mute members. Messages pass through an automated word filter before they are sent, and you can report messages and block people. We store message content, your display name and timestamps.
Visible to team membersAny signed-in user can publish posts (text and up to four photos) that every signed-in CorFit user can see, together with the author's display name. A coach's posts can also show their team's name and an ad for the team with its price. Any user can like, report or block.
Visible to all signed-in usersEvery member of a team is coached by the team's coach. Joining shares nothing by itself. The member chooses separately whether to share (1) a training summary (recent sessions, weekly count, streak) and (2) nutrition totals (daily calories and macros for the last two weeks), and (3) health details (injuries and conditions you listed, which can include pregnancy or a heart condition, plus food allergies). The health details switch is separate and off unless you turn it on. Turning a sharing option off deletes that part of the shared summary.
While you are on a team, the coach also always sees: which of the workouts they sent you mark as done; the weekly check-ins you choose to send (which may include weight, sleep, energy, soreness, and whether you had pain and where); and the workouts, nutrition targets and replies they send you. If you report pain, your coach is notified. A coach can charge a monthly price for their team (see Payments). This data is visible only to your coach and you, is used only to provide coaching, and is never sold.
When a coach creates an invite, it stores the label they typed (for example a first name), the team, an expiry and, once used, which account accepted it. If you leave the team, are removed by your coach, or your subscription to a paid team ends, the coaching data you shared is deleted; if a coach deletes their team, all coaching data for that team is deleted.
Visible to your coach only You choose what to shareCorFit subscriptions (Pro, Unlimited, Coach Pro, Coach Unlimited) are bought through Apple (or Google Play / Stripe on other platforms) and managed through RevenueCat. We receive your subscription status, product and renewal dates. We never receive your card or Apple ID payment details.
Paying for a team. If a coach charges for their team, you pay on a checkout page hosted by Stripe. Stripe collects and holds your payment details; we receive a customer reference and your subscription status (active, past due, canceled) and renewal date. The coach sees the price they set and your payment status, not your card details. Coaches who get paid complete identity and bank verification directly with Stripe; we store a payout account reference and status.
RevenueCat Stripe No card numbers stored by CorFitWorkout reminders and the weekly summary are scheduled on your device. If you are in a coaching relationship (as a coach or a client) and allow notifications, your device's push notification token is stored on our servers (Firebase Cloud Messaging) so we can notify you about check-ins, replies, new programs, targets and similar events. Notification text is kept short and avoids health details. You can turn notifications off in your device settings; signing out removes your token from that device.
Push token stored if you allow notificationsOn the web and Android apps, analytics start only after you tap Allow on the banner that asks; saying no keeps them off. We use Google Firebase Analytics to understand which features are used (for example "workout generated", "check-in sent") and Firebase Crashlytics to find crashes. These record events, app version, device model and OS, a random app-instance identifier, and approximate region derived from IP address. We design events so they never include your name, email, messages or health values. We do not use the advertising identifier and do not track you across other companies' apps or websites.
Firebase Analytics CrashlyticsIf you report content or a person, or report a problem with an AI plan, we store the report (who reported, what was reported and the content involved) so we can review it and act. Blocks you create are stored so they apply on all your devices.
Our servers and hosting providers (Google Cloud, Vercel) log technical data such as IP address, request time and errors for security and reliability. The web app stores your sign-in session and a cached copy of your data in your browser (IndexedDB and local storage); the iPhone app keeps a cached copy of your data in the app's private storage so it works offline. Signing out of the web app clears the cached copy.
We rely on your consent for sensitive health information you choose to enter or share, on performing our contract with you for providing the service, and on our legitimate interests in security, fraud prevention and product improvement. Where we rely on consent, you can withdraw it at any time.
We do not sell your data. We share it only with service providers who help us run CorFit, and with other users as described above.
| Provider | Purpose | Data |
|---|---|---|
| Google (Firebase, Google Cloud) | Accounts, database, file storage, push notifications, analytics, crash reports, Google sign-in | Everything stored in your account; analytics events; crash data |
| Anthropic | AI workouts and meal plans | Plan inputs listed above when you generate (no name or email) |
| Vercel | Hosts the website and the server that talks to Anthropic | Requests and technical logs |
| RevenueCat, Apple, Google Play | Subscriptions and purchases | Subscription status; an account identifier |
| Stripe | Paid team subscriptions and coach payouts | Payment details (held by Stripe), email, payout verification |
| Open Food Facts, UPC lookup service | Barcode product lookup | The barcode number only |
| Apple Health | Optional workout saving on your device | Stays on your device |
We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business (we would tell you and your choices would continue to apply).
In the app, on iPhone, Android and the web: open your profile or account menu and choose Delete Account. You will be asked to type DELETE and to confirm it's you by signing in again. We then delete your account and the data in it: your profile and everything stored in your account (workouts, nutrition, records, settings), your messages and shared workouts, your feed posts and photos, your profile photo, your friend connections, friend code and name-search listing, your block list, your push notification token, and your team membership and coaching data. If you are a coach, your team is disbanded: your clients are removed from it, their coaching subscriptions are canceled, and your payout account is closed. If a step cannot be completed, your account stays open so you can try again, and nothing is hidden from you.
Sign in with Apple: deleting from the iPhone app also revokes CorFit's access to your Apple ID. If you delete from the web or Android, you can remove CorFit yourself in your Apple ID settings (Sign in with Apple).
What we keep: records of payments and payouts we are required to keep for financial and tax purposes (these are not linked to your profile content), reports about content or people (kept to protect other users), and records held by Apple, Google, RevenueCat and Stripe under their own policies. Backups and logs are overwritten on a rolling basis, typically within 30 to 90 days.
Can't use the app? Email support@thecorfit.com from your account email and we will delete your account within 30 days.
Deleting your account does not cancel a subscription billed by Apple or Google. Cancel it in your App Store or Play Store subscriptions first, or you will keep being charged. Coaching subscriptions paid to a coach are canceled for you when your account is deleted.
You can change or remove most information in the app. Depending on where you live (including the EEA, UK and California), you also have the right to ask us to access, correct, delete or export your personal data, to object to or restrict certain uses, to withdraw consent, and to complain to your data protection authority. We do not sell or "share" personal information as those terms are defined in California law. Email support@thecorfit.com to make a request; we may need to verify it is you, and we will reply within 30 days.
Data is encrypted in transit (TLS) and at rest by Google Cloud. Access rules limit each account's data to you and to the people you have chosen to share it with. No system is perfectly secure; if we learn of a breach that affects you we will tell you as the law requires.
CorFit is not for children under 13, and we do not knowingly collect their data. When you set up an account we ask your age; if you give an age under 13, setup stops, the account is removed and that device or browser will not set up another. If you are under 18, use CorFit with a parent or guardian's permission; calorie targets for people under 18 are set to maintenance and weight-loss targets are not offered. Team, chat and friend features connect you with other users, so only connect with people you know. If you believe a child under 13 has given us data, contact us and we will delete it.
We and our providers process data in the United States and other countries. Where required, we rely on safeguards such as standard contractual clauses and the providers' certifications.
We may update this policy. We will post the new version here and tell you in the app about material changes. The "Last updated" date above shows the latest revision.
Questions or requests about privacy? Email support@thecorfit.com.