Legal
Privacy notice
Draft — last updated
This is a working draft, not a reviewed legal document. It describes what the current build actually does. It must be reviewed before Aham.Fit is listed on an app store or offered to paying customers.
What we collect
- Account details — your email address and a hashed password. If you sign in with Google, we receive your Google account email and basic profile from the ID token.
- Profile and goals — the figures you enter yourself: height, weight, age, sex, activity level, and your calorie and macro targets.
- Your diary — the foods, quantities, meals, weights, water and activity you log, with their timestamps.
- Content you submit for logging — meal photos, voice transcripts, typed descriptions and scanned barcodes, at the moment you use those features.
Why we hold it
To run the app: to show your diary on every device you sign in on, to calculate your adaptive calorie target from your intake and weight trend, and to keep your account secure. We do not sell your data and we do not run advertising.
Who it goes to
- Our own server, hosted on Railway, which stores your account and diary.
- Open Food Facts, when you scan a barcode — the barcode is looked up against their public database.
- An AI provider (OpenAI or Google Gemini), when the build is configured with a key and you use meal-photo or natural-language parsing. The image or text you submit is sent for interpretation and the result is returned to you for confirmation.
- Resend, our email provider, for verification and password-reset messages.
- Google, only if you choose to sign in with Google.
What stays on your device
Pending log entries are queued locally so the app works without a connection, and your session tokens are held in the device keystore. Camera, microphone and motion permissions are requested only when you use the feature that needs them.
Retention and deletion
Your diary is kept while your account exists. Account deletion is not self-service in the current build — ask us and we will delete the account and its diary.
Children
Aham.Fit is not intended for anyone under 16.
Contact
A contact address will be published here once inbound email for the domain is set up.