Privacy policy
Effective August 11, 2026 · Beta version
This beta policy describes the current product implementation. It will be reviewed and updated before a general public release.
Information FIT processes
- Account: email address, authentication identifiers, consent receipts, and account status.
- Profile: optional photo, age, height, weight, goals, experience, gym, equipment, dietary preferences, allergies, and movement limitations.
- Nutrition: scanned products, labels, food logs, nutrient totals, meal approvals, recipes, pantry and grocery information.
- Fitness: plans, scheduled workouts, sets, weight, repetitions, effort feedback, completion history, and optional check-ins.
- AI operations: requested feature, model, token counts, request identifier, and limited security and cost information.
FIT does not currently collect HealthKit records, precise location, payment-card information, contacts, or continuous microphone recordings.
How information is used
We use information to operate and secure accounts; remember preferences; analyze products; calculate logged nutrition; build meal, grocery, and workout plans; preserve progress; provide TOBURT explanations and set feedback; enforce beta allowances; prevent abuse; and diagnose failures.
FIT does not sell personal health data or use allergy, body-measurement, food, fitness, or workout information for third-party advertising. Public community posting is disabled during beta.
Service providers
- Supabase provides authentication, database, storage, and server functions.
- OpenAI processes minimized context needed for a TOBURT request. Relevant context may include selected goals, allergies, product information, limitations, exercise logs, or feedback.
- Expo/EAS and Apple support app building, distribution, notifications, and platform diagnostics.
- Open Food Facts and other identified sources may provide public product information.
Permissions
Camera access is used for barcode scanning and optionally taking a profile photo. Photo-library access is optional. Notifications are used only for reminders the user enables.
Retention, security, and choices
Active account data is retained while needed to provide FIT. We use encrypted transport, authenticated access, private server secrets, row-level database controls, and request limits. No system can guarantee absolute security.
Users can correct profile information, remove logs where controls are available, disable notifications, keep profiles private, sign out, and permanently delete the account under You → Account controls.
Contact
Privacy and data requests can be sent to support@toburt.com. Users who cannot sign in may use that address to request account-deletion assistance.