Privacy Policy — Wab Fit

Last updated: 2026-09-10

What we collect

Your account: email, password (hashed), display name, username, and an avatar if you add one.

Reports: when a message, comment, meal or account is reported, the report is recorded with its reason, any note written with it, and the identifiers of the reported content and its author.

What you log: workouts and weights, meals and their photos, blood-glucose readings, body measurements, and your in-app messages to friends.

From the health platform, with your permission: steps, heart rate, sleep and similar — read from Apple Health or Health Connect only after you grant each type explicitly.

Technical: your device's push-notification token, and a short crash trail (no personal content) that helps us fix crashes.

What we do not do

No ads. No selling of data. No third-party analytics or tracking SDKs in the app. We do not read your messages — and your email address is never shown to any other user; friends see usernames only.

AI meal-photo analysis

When you explicitly choose to analyse a meal photo, that photo is sent to an AI provider (OpenAI or Z.ai, per your in-app choice) to estimate calories and nutrients, and the estimate is returned to you. No photo is ever sent unless you request it by pressing the analyse button.

Sharing with friends

You control each sharing toggle individually and can turn any off, or remove a friend, at any time — access ends immediately.

Where data lives

On Supabase servers in the EU (Frankfurt), behind row-level rules that make each row readable by its owner alone. Meal photos live in a private bucket read only through short-lived signed URLs.

Deleting your account

In the app: Profile → Delete account. This permanently removes your account, rows and photos. Or write to support@wabfit.com.