CoreFit Privacy Policy
Last Updated: July 4, 2026 Effective Date: July 4, 2026
Welcome to CoreFit (the "App" or the "Service"). We value your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data. Please read this Policy carefully before using the Service.
1. About Us
The App is developed and operated by CHENHSI TECHNOLOGY CO., LTD. ("we," "us," or "our").
- Contact Email: support@corefit-ai.com
- Official Website: https://www.corefit-ai.com
If you have questions about this Policy, please contact us through the methods above.
2. Scope
This Policy applies to our collection and processing of personal data when you download and use CoreFit through Apple App Store, Google Play, or other authorized channels. This Policy does not apply to the privacy practices of third-party websites or services, even if linked from the App.
3. Data We Collect
3.1 Data You Provide
| Category | Items | Collection Timing |
|---|---|---|
| Account data | Name, email address, password (stored encrypted) | When registering an account |
| Profile | Username, profile photo, gender, birthday, location text input | When setting up your profile |
| User identification and settings | User ID, language setting, privacy settings, account status, entitlement status | When creating an account and using the Service |
| Body data | Height, weight, body fat percentage | When completing fitness questionnaires or editing your profile |
| Fitness information | Fitness goals, experience level, preferred exercise types, training frequency, preferred training times, intensity, style, and location | When completing fitness questionnaires |
| Health information | Physical conditions, existing injuries, special needs | When completing fitness questionnaires (optional) |
| Exercise records | Heavy lift experience and personal records for squats, deadlifts, shoulder press, bench press, etc. (weight and reps) | When completing fitness questionnaires (optional) |
| Training data | Exercises, sets, reps, weights, rest times, and notes for each workout | When using workout logging |
| Custom content | Custom exercises (name, video link, description), custom training plans, workout templates | When using exercise library or plan features |
| Social data | Friend relationships, student relationships, shared workout schedules and plans | When using social and coach features |
| Personal bio | Personality description, interests, motto, languages, certificates, tags | When editing your profile (optional) |
3.2 Data from Third-Party Sign-In
If you choose Google or Apple sign-in, we receive your profile name and email address. We do not receive your third-party account password.
3.3 Subscription and Payment Data
When you purchase subscriptions, points, or coach seat packs, transactions are processed by Apple App Store or Google Play Store. We do not directly collect your credit card number or other financial account information. Payment-related data obtained or processed through RevenueCat and platform transaction mechanisms includes anonymous or platform user identifiers, product IDs, transaction IDs, subscription status, plan type (Pro/Coach), subscription period, renewal status, trial status, purchase history, and point/seat entitlement status.
3.4 Data We Do Not Collect
For clarity, the App does not collect:
- precise location (GPS) or coarse location data
- advertising identifiers (IDFA, GAID)
- contacts or phone numbers
- SMS or call history
- continuous camera or microphone access (only one-time photo library or camera access when you choose to upload a profile photo)
- health platform data (HealthKit, Google Fit)
- browsing history or usage data from other apps
- we do not actively use cookies or similar technologies for cross-site tracking or advertising tracking
Third-party services or platforms may process IP address, device information, system version, transaction identifiers, cookies, WebView storage data, or other necessary technical data for transaction verification, security, fraud prevention, abuse detection, video playback, or service maintenance under their own privacy policies.
4. How We Collect Data
- Direct collection: when you register, set up a profile, complete fitness questionnaires, log workouts, create content, or use social features.
- Third-party sign-in: when you sign in through Google or Apple, data is provided under the corresponding OAuth process.
- Payment platforms: subscription and purchase information is transmitted through Apple/Google payment systems and RevenueCat.
5. How We Use Your Data
We use personal data only for the following purposes:
| Purpose | Description |
|---|---|
| Core service delivery | Create and manage your account, record training data, manage training plans and templates, and provide exercise library features |
| AI personalization | Generate personalized training plans and weight suggestions through AI based on fitness goals, preferences, body data, and training history |
| Social and coach features | Manage friend/student relationships, share training content, and send in-app notifications |
| Subscription and purchase management | Verify subscription status, manage Pro/Coach access, process points, seat packs, refunds, or purchase restoration |
| Service improvement | Understand feature usage to improve product experience (we currently do not use third-party analytics tools) |
| Customer support | Respond to questions or requests |
| Legal compliance | Comply with applicable laws and regulations |
Without your consent, we will not provide or share your personal data with third parties for advertising, marketing, or data analytics purposes. We also do not sell your personal data.
6. AI Features and Data Processing
The App's AI features, including AI training plan generation and smart weight suggestions, are technically supported by OpenAI. When you use AI features:
6.1 Data Sent to AI
We transmit requests and receive responses through the OpenAI Responses API using HTTPS/TLS encrypted connections. To generate personalized training suggestions, the following data may be sent to OpenAI's API:
- your fitness goals and preferences
- body data (height, weight, body fat percentage)
- exercise experience level
- training history (exercises, weights, reps, etc.)
- text you enter in AI conversations
6.2 AI Data Processing Principles
- Data is transmitted over encrypted connections (HTTPS/TLS).
- Under OpenAI commercial API terms, data submitted through the API is not used to train OpenAI models. We have not enabled any additional data sharing or model training options.
- We do not send your email address or account password in AI requests.
- OpenAI may retain API request and response data within the scope allowed by its policies for abuse monitoring, security, and service provision. According to OpenAI's current public explanation, the Responses API may store application state by default for about 30 days. Actual retention periods, controls, and exceptions depend on OpenAI's then-effective policies.
7. Third-Party Services
The App uses the following third-party services, which may process certain data under their own privacy policies:
| Provider | Purpose | Data That May Be Processed | Privacy Policy |
|---|---|---|---|
| Appwrite Cloud | Backend services (authentication, database, file storage) | Account data, profile, training data, profile images | https://appwrite.io/policy/privacy |
| RevenueCat | Subscription management and in-app purchase processing | Anonymous user ID, subscription status, purchase history (no credit card information) | https://www.revenuecat.com/privacy |
| OpenAI | AI training plan generation and smart weight suggestions | Fitness goals, body data, training history, conversation content | https://openai.com/privacy |
| Google OAuth | Google sign-in | Google profile name, email | https://policies.google.com/privacy |
| Apple Sign-In | Apple sign-in | Name and email provided by Apple (you may choose to hide email) | https://www.apple.com/legal/privacy/ |
| Apple / Google payment systems | Subscription and purchase transactions | Transaction information managed directly by the platforms | See each platform's privacy policy |
| YouTube | Exercise demonstration videos and user custom video link playback | Technical data related to video playback under YouTube/Google policies | https://policies.google.com/privacy |
Without your consent, we will not provide or share your personal data with advertisers, data brokers, or other advertising-purpose third parties, and we do not sell your personal data.
8. Data Sharing and Disclosure
Except for the third-party services described above, we share personal data only in the following situations:
- With your consent: when you actively choose to share workout schedules or plans with friends/students.
- Social features: your username and profile photo may be visible to friends/students; other profile fields are visible according to your privacy settings.
- Legal requirements: when required by law, regulation, legal process, or government authority.
- Rights protection: when necessary to protect the rights, property, or safety of us, our users, or the public.
- Business transactions: if a merger, acquisition, or asset sale occurs, your data may be transferred with the business. We will notify you before transfer in such cases.
We do not sell your personal data.
9. Data Storage and Protection
9.1 Storage Location
- Cloud storage: your account data, profile, workout records, and other User Content are stored on Appwrite Cloud servers. (Note: Appwrite Cloud servers may be located outside your country or region.)
- Local storage: to provide offline use, some data is cached on your device.
9.2 Security Measures
We use reasonable technical and organizational measures to protect personal data, including:
- TLS/SSL encryption for network transmission
- encrypted password storage, not plaintext
- Appwrite access controls so users can access only their own data
- privacy controls for profile fields so you can manage visibility
However, no internet transmission or electronic storage method can be guaranteed 100% secure. We cannot guarantee absolute security, but we continuously work to protect your information.
9.3 Data Retention
- Account data and related content are retained while your account is active.
- If you delete your account, we will delete or de-identify account-related personal data within 30 days, unless continued retention is required by law or legitimate business purposes such as transaction records, refunds, taxes, dispute handling, fraud prevention, or security audits.
- Subscription, one-time purchase, refund, point, and seat transaction records are handled according to Apple/Google/RevenueCat policies and our retention needs for transactions, entitlements, and disputes.
10. Your Rights
Under applicable laws, including Taiwan's Personal Data Protection Act, you have the following rights regarding your personal data:
- Inquiry and access: ask whether we hold your personal data and request access.
- Correction and supplementation: request correction or supplementation of inaccurate or incomplete data. You can also directly edit most profile data in the App.
- Deletion: request deletion of your personal data (see Section 11).
- Stop collection, processing, or use: request that we stop collecting, processing, or using your data in certain circumstances.
- Data portability: request data in a structured, machine-readable format where technically feasible.
To exercise these rights, contact us using Section 15. We will respond within a reasonable period after receiving your request, not exceeding 30 days.
11. Account and Data Deletion
11.1 How to Delete Your Account
You may request deletion of your CoreFit account through:
- In App: Me > Settings > Delete Account, then follow the prompts to complete verification and deletion.
- Email: send an account deletion request to support@corefit-ai.com.
11.2 What Happens After Account Deletion
After your account is deleted:
- Your profile, workout records, custom exercises, training plans, workout templates, profile images, and similar data will be deleted or de-identified.
- To preserve the integrity of other users' data and experience, records created jointly with other users (friend relationships, coach–student relationships, and workouts or plans you shared) will not be removed from those users' accounts. Instead, your account will be marked as "Deleted Account" in such records, and your identifiable information (display name, username, and profile photo) will be removed or de-identified from them.
- In-app notification data will be deleted or disassociated.
- Training content already shared with others may continue to exist as copies in their accounts.
- Your subscription will not be cancelled automatically. Please cancel your subscription through Apple App Store or Google Play Store before deleting your account, otherwise charges may continue.
- After account deletion, data will be removed from our servers within 30 days.
- Some data may be retained longer due to legal requirements or legitimate business needs, such as transaction records.
12. Minors' Privacy
The App is content-rated 4+ on Apple App Store and Google Play, but the Service is not primarily targeted at children under 13.
Children under 13: we do not knowingly collect personal data from children under 13 without verifiable consent from a parent or legal guardian. If we become aware that we have collected such data, we will delete it as soon as practicable and close the account. If you are a parent or legal guardian and wish to consent to a child under 13 using the Service, please first contact us by email at support@corefit-ai.com for identity and consent verification.
Minors aged 13 or older but under the legal age of majority: their legal representative should read and agree to this Privacy Policy and the Terms of Service before they use the Service.
If you are the legal representative of a minor user and wish to inquire, correct, stop use of, or delete that minor user's personal data, please contact us using Section 15.
13. Policy Updates
We may update this Privacy Policy from time to time. When material changes are made, we will:
- Update the "Last Updated" date at the top of this Policy.
- Notify you through in-app pop-up notices or announcements.
- If changes involve expanded data collection scope or changed purposes, notify you within a reasonable time before the changes take effect and obtain your consent where necessary.
We recommend reviewing this Policy periodically to understand how we protect your information.
14. Governing Law
This Privacy Policy is governed by the laws of the Republic of China (Taiwan).
15. Contact Us
If you have questions, comments, or requests about this Privacy Policy, please contact us:
- Company: CHENHSI TECHNOLOGY CO., LTD.
- Email: support@corefit-ai.com
- Official Website: https://www.corefit-ai.com
We will make reasonable efforts to respond within 30 days after receiving your contact.
*This Privacy Policy was last updated on July 4, 2026.*