AT A GLANCE
4UFit uses account, fitness and permitted health information to provide your program. Selected photos and AI requests are processed on our servers and with service providers. Health, AI and photo permissions are separate choices; reading this notice does not grant them.
For health-information categories, sources, recipients and rights, read our separate Consumer Health Data Privacy Policy.
1. Who we are
4UFit is operated by FORUFIT LLC, based in Issaquah, Washington, United States. Contact us about privacy at info@forufit.com.
This notice covers information processed for the 4UFit app and our public website. It also explains the separate partnership application and document process. 4UFit is intended for adults aged 18 and over. If you believe a child has provided personal information, contact us so we can review it.
3. How we use information
- Sign you in, manage your account and verify program or trial access.
- Provide the workouts, meals, routines and coaching you request, using relevant profile, preference and permitted health information.
- Record activity, progress and feedback, and keep recommendations consistent with your account information.
- Deliver enabled reminders, provide customer support, diagnose failures and protect the service against misuse.
- Administer approved partnerships, referral attribution, commissions, documents and required payment or tax records.
- Handle data-rights requests and meet applicable legal obligations.
We do not sell personal or consumer health information. Health information, including information from Apple Health or Health Connect, is used for the requested health and fitness features and is not used for advertising profiles. Uploading a photo does not authorize us to publish it or use it in an advertisement.
4. AI, photos and voice
OpenAI processes relevant inputs for AI features. Depending on the feature you request, these can include your message and recent conversation, permitted program and health context, a selected body or meal image, or a recording for transcription. A spoken reply normally uses the device’s speech service; if the cloud fallback is used, the reply text is sent for speech generation.
Body-photo processing checks the suitability and consistency of submitted views and supports non-medical fitness personalization. Meal-photo processing estimates visible food, portions and nutrition. Photo checks also retain structured decisions and file/version metadata so a repeat check of the same inputs can reuse the result. These features do not authenticate your identity, diagnose a condition or provide an exact body-fat measurement.
Health, general AI, body-photo and meal-photo processing have separate permission scopes in the app. A permission for one purpose does not authorize every other purpose. AI responses and image estimates can be incomplete or incorrect; review important decisions with an appropriately qualified professional.
The app’s microphone creates a temporary recording. Speech is sent for cloud transcription after the required access checks; a cancelled or silent turn can be discarded locally. If you use your phone’s keyboard dictation instead, the keyboard or operating system handles speech recognition under its settings and 4UFit receives the text you enter.
This release does not continuously listen or provide wake-word activation. The app attempts to remove its temporary recording and playback files after use. The transcript and saved conversation have separate lifecycles, as do records handled by the relevant speech or AI provider.
5. Permissions and your choices
Open Profile → Policies and Account → Data and privacy → Manage Data Permissions to review and manage the published health, AI, body-photo and meal-photo permissions. You can also manage camera, microphone, notification and connected-health access in device settings.
Declining or withdrawing a permission can make its related feature unavailable. Withdrawal prevents new processing that depends on that permission; it does not reverse processing already completed. Turning off Apple Health or Health Connect access is separate from requesting deletion of information already imported into 4UFit.
Body- or meal-photo withdrawal also makes related files eligible for cleanup. Cleanup is a separate process, so a permission change or expired link should not be treated as confirmation that every copy has already been deleted.
6. Who receives information
Only the information relevant to a feature is used with its supporting services. The recipients depend on what you use:
- Supabase supports account sign-in, the app database, private files and server functions.
- OpenAI provides the requested AI image, text and speech processing described above.
- Apple, Google and RevenueCat support store checkout, purchase verification, purchase history and access reconciliation.
- Cloudflare Stream delivers exercise video and receives playback-request information. Expo and the device notification services deliver enabled notifications.
- Hostinger email delivers account and service emails and handles messages sent to our contact address.
- USDA FoodData Central or Open Food Facts can supply food or barcode lookup information.
- For supported partnership checks, ScrapeCreators can receive a submitted Instagram or TikTok handle or content link; the YouTube API can supply supported YouTube profile information. Public-profile checks do not prove account ownership or provide access to private messages.
Authorized company staff use relevant records for support, security, partnership or document administration. Support staff can see your account contact information, program and access status, messages and replies to resolve your request. Influencer dashboards do not provide access to customer health records, body photos or payment-card details.
Information may also be disclosed when required by law or to handle a valid legal request. Information can be processed outside your country, where 4UFit and the relevant services operate. Hosting, logs, backup and provider retention practices are not identical across those services; this notice does not claim that they all keep no logs or operate in a single country.
These policy and support pages have no message-submission form or analytics script. Their hosting and image-delivery services still receive the technical information needed to serve them. A linked store or other external website has its own information-handling practices.
7. Retention and security
We determine retention by the purpose of the record, your account and feature use, your deletion or permission choices, and whether information is still needed for payment, security, dispute, tax or other legal obligations. There is no single retention period for every 4UFit record.
- Account, health, activity and conversations. Saved records support your account, program and history. They can remain until the relevant records or account are deleted, subject to the necessary records described below. A temporary session ending does not erase your saved history.
- Photos and assessments. Private photos, related assessments and consistency-check metadata follow the photo and progress lifecycle. Rejected or withdrawn photos can enter a cleanup queue. Becoming eligible for cleanup is different from completed removal; we do not promise that all photos disappear after a fixed number of hours.
- Exports. A download link is temporary. Link expiry does not by itself delete the stored export or its request audit.
- Support, purchase, partnership and legal records. Records needed to resolve an open matter, substantiate a transaction, prevent misuse or meet a legal obligation are handled separately from ordinary program history. Tax documents have their own retention and review requirements.
Deletion requests can require account verification and manual review. Records retained for a justified purpose are not automatically anonymous. Backup copies and records held by service providers follow their relevant deletion processes, subject to applicable law. If you need deletion of a particular record, identify its category in your request rather than assuming that uninstalling the app removes it.
We use account-based access controls, private storage and time-limited document links. Submitted partner documents are encrypted in their private archive. These measures reduce risk but cannot guarantee absolute security. Do not send passwords, sign-in codes, full card details, tax identifiers or body photos to the ordinary support mailbox.
8. Access, correction and deletion
Use the available profile controls to update your details, and contact us about records you cannot correct in the app. You can request access, a copy of your information or permanent account deletion through the app’s data-rights screen or by emailing info@forufit.com from your account email. You do not need to create a new account or reinstall the app to contact us.
Depending on the law that applies to you, rights can also include withdrawing consent, objecting to or restricting certain processing, receiving portable information, appealing a refusal and complaining to the relevant privacy authority. Our Consumer Health Data Privacy Policy explains the consumer-health request and appeal route.
We may ask for information reasonably needed to verify your request. If an in-app export does not include a separate business or document record you need, identify it in your request. Partner document copies are provided through the authenticated document area.
See the account-deletion guide for the app steps and email alternative. Opening a page or email link does not submit a request by itself. Signing out or uninstalling the app does not delete your account. Account deletion also does not cancel a separate store renewal or automatically refund a purchase.
9. Partnership and tax documents
Partnership applications, public-profile checks, content submissions and commercial records are separate from your personal fitness program. Their purpose is to review eligibility, administer the approved relationship, record content and agreement decisions, and calculate or support verified referral payments.
If required for your tax status and payout, a W-9 or other requested document can contain a legal name, address, tax identifier and certification. Submit it only through the designated document process. The archive is restricted to authorized document and tax administration; ordinary customer or influencer dashboards do not expose another person’s tax form.
Document notifications direct you to the authenticated document area rather than attaching a completed tax form to an ordinary email. Ending a partnership or deleting an app account does not automatically remove tax, agreement, commission or payment evidence that must be retained for a relevant obligation or unresolved matter.
10. Updates and contact
We update this notice when the described practices change. A new purpose requiring consent must be explained through the relevant choice; publishing revised text does not grant permission on your behalf.
FORUFIT LLC
Issaquah, Washington, United States
info@forufit.com
For other help, visit Support.