Privacy Policy — Wab Fit

Last updated: 2026-10-13

What we collect

Your account: email, password (hashed), display name, username, and an avatar if you add one.

Reports: when a message, comment, meal or account is reported, the report is recorded with its reason, any note written with it, and the identifiers of the reported content and its author.

What you log: workouts and weights, meals and their photos, blood-glucose readings, body measurements, and your in-app messages to friends.

From the health platform, with your permission: steps, heart rate, sleep and similar — read from Apple Health or Health Connect only after you grant each type explicitly.

Linking a Eufy account is optional. When you link, Wab Fit sends your EufyLife e-mail and password once to Eufy's servers to sign in, and does not store the password. It stores the sign-in token encrypted on its servers to import the scale's readings into your account, and deletes the token when you unlink or delete your account.

Technical: your device's push-notification token, and a short crash trail (no personal content) that helps us fix crashes.

Usage statistics: collected only while you are signed in. We record how long the app stays in the foreground, the time, visits and taps per screen and feature, bursts of repeated taps with their position on the screen, and your phone model, operating system, and app and update version. We never record what you type, never screenshots, and never your location; screen names are recorded without identifiers. They are seen only by the Wab Fit administration, for support and to fix screens that do not respond. Daily totals are kept for 400 days and tap bursts for 90 days, then deleted automatically. No third party receives them.

Your reports: what you write in an in-app report, with the screen it was sent from, the error text if there was one, and your device, operating system and app version. They are used to answer the report and fix the problem, and are deleted with your account.

Administration controls

The Wab Fit administration can hide a feature for one account, and the account is told inside the app. It can also send an in-app message to one account or to everyone.

What we do not do

No ads. No selling of data. No third-party analytics or tracking SDKs in the app. We do not read your messages — and your email address is never shown to any other user; friends see usernames only.

AI meal-photo analysis

When you explicitly choose to analyse a meal photo, that photo is sent to the AI provider OpenAI to estimate calories and nutrients, and the estimate is returned to you. No photo is ever sent unless you request it by pressing the analyse button.

Other tools that read photos and documents with AI

Three more tools send to the AI provider OpenAI only what you choose, and only when you press the tool's button:

• Price compare: the product photo you take or pick, or the name you type, to identify the product and then look up its price in shops.
• Where was this photo taken: the photo you pick, to estimate where it was taken.
• PDF editor: the image of a page whose signature you ask it to read, or the request you type with a description of the document.

Wab Fit does not keep these photos or texts on its servers once the request ends, and sends nothing about you to the shops.

The in-app assistant

The assistant is optional and does nothing until you explicitly agree inside the app. After you agree, each time you ask a question Wab Fit sends your question and the data needed to answer it — meals, workouts, fasts, glucose readings, body measurements and steps — to the AI provider OpenAI, which writes the reply. Your email address and your messages with friends are never sent. You can turn the assistant off from its page at any time, after which nothing more is sent.

Your conversations with the assistant, and what it remembers about you, are stored in your account on Wab Fit's servers so you find them on any device you sign in from. Nobody else can read them. You can delete any conversation, all of them, and the memory from the conversation history page inside the assistant, and all of it is deleted when you delete your account.

Sharing with friends

You control each sharing toggle individually and can turn any off, or remove a friend, at any time — access ends immediately.

Where data lives

On Supabase servers in the EU (Frankfurt), behind row-level rules that make each row readable by its owner alone. Meal photos live in a private bucket read only through short-lived signed URLs. What the tools above send to OpenAI is processed by OpenAI on its servers in the United States, under its own privacy policy. When the service is set to use DeepSeek instead, the same request is processed by DeepSeek on its servers in the People's Republic of China, under its own privacy policy; nothing is sent to both.

Deleting your account

In the app: Profile → Delete account. This permanently removes your account, rows and photos. Or write to support@wabfit.com.