Privacy Policy

Effective November 3, 2026

Who we are

Zway Fitness ("Zfit", "we") makes a training app for iPhone. Questions about this policy: hello@zwayfitness.com.

This website

• Waitlist email. If you join the early-access list, we store your email address (hosted with Supabase) and use it to tell you about the launch and major updates. Nothing else. To be removed, reply to any of our emails or write to us.
• Confirmation emails are delivered by Resend, our email processor.
• No analytics, no ads, no tracking pixels. This site sets no advertising or analytics cookies.

The Zfit app

The app is built local-first: everything you log is stored in the app's database on your device, and the app requires no account. Data leaves the device only when you use one of these: food-database lookups (below), the four AI features described under AI features, or the iCloud backup described under iCloud backup. Nothing else is transmitted, and we store no copy of your training, nutrition, or health records on our servers.

• Apple Health. With your permission, Zfit reads sleep, heart-rate variability, heart rate, resting heart rate, steps, and active energy to compute your recovery score. This processing happens on your device. From version 1.0.5 the iPhone app also writes to Health: when you finish a strength workout or a run in the app, it saves that workout — its time, distance, route for a GPS run, and an estimated energy figure only when no watch or ring already logged energy for that time — so it counts toward your Activity rings. You can turn this off in Settings → Health data. Runs you track with the Apple Watch app are saved to Health by the watch. This writing happens on your device; nothing is sent to us. You control every category in iOS Settings and can revoke access at any time.
• Camera & photos. Used for barcode scanning, meal photos, and barbell photos. Barcodes are read on your device. A meal photo leaves your device only when you tap ANALYZE PLATE, and a barbell photo only when you tap READ — see AI features. Photos are re-encoded before sending, which strips location and camera metadata.
• Food-database lookups. When you search for a food by name or scan a barcode, the search text or barcode is sent over HTTPS to two public food databases — Open Food Facts and the USDA FoodData Central — to fetch the nutrition facts. They receive the query and your IP address, as any website you visit does; they do not receive your name, your logs, or any identifier from us, and we keep no copy of the query.
• Location. Used to trace your running route on the map during a run you start. Routes are stored on your device only.
• Shared programs. Sharing a program creates a text code containing only the program's structure (exercise names, sets, reps, schedule) — never your logs, health data, or identity.

AI features

Four features use AI processing. All four are things you actively choose to do — nothing is sent in the background, and the app is fully usable without any of them.

• IRIS, the AI coach. When you send IRIS a message, we send your question along with the training context needed to answer it: recent sessions, your program, your calorie and protein totals, today's calories and protein and your protein adherence over the last week, a summary of your training history (how often you train, your most-logged lifts, whether your volume is rising or falling, your training-load ratio), your last few messages in the thread, your unit preference, the two free-text answers you gave during The Scan (what a normal day of eating looks like, and anything else about your days), and today's recovery score and state. We deliberately withhold your Apple Health measurements — sleep duration, heart-rate variability and resting heart rate never leave your device, even though the score is partly derived from them — and we withhold the history of your recovery scores too. IRIS sees today's recovery, never its trend.
  When you ask IRIS to build a program (from version 1.0.5), we send your request in your words, your goal, training focus, experience, days per week and where you train, the names of the exercises in the app's library, and a summary of the last four weeks of training — which lifts you did, how many sessions and sets. No weights, no Health measurements; today's recovery score and state only. The program comes back as a draft that you review before it becomes active.
• Meal-photo analysis. When you analyse a meal photo, that photo is sent to estimate its calories and macros, and the estimate comes back to your device. Results are always an estimate, labelled as such. If you correct what the photo shows, the corrected food names are sent with it.
• Barbell-photo reading. When you photograph a loaded barbell to read the weight on it, that photo is sent and the plate count and bar weight come back to your device as an estimate for you to check. Nothing else is sent with it.
• AI meal plans. When you ask for a meal plan, we send your calorie and macro targets together with the dietary preferences you entered in Diet — eating style, allergies, dislikes and favourites — so the plan can respect them. Allergies are included on purpose: a plan that does not know about them is unsafe. Nothing else about you is sent; there is no name, account or identifier attached.

Processing runs on our server (Supabase) and through Anthropic's Claude API, which acts as our processor. We do not store your photos, messages, or training context — they are used to answer the request and not retained by us, and neither we nor Anthropic use them to train AI models. Your data is not sold or shared with anyone else, and no account or identifier is attached to these requests. To prevent abuse of these features we keep a request counter per network address for up to 48 hours; it holds a count and a timestamp, nothing about what was asked.

Don't want any of it? Don't use IRIS chat, the photo pane, or AI meal plans. Every other feature — logging, programs, recovery, runs — works entirely on your device, with the one exception above: searching or scanning a food contacts the public food databases. Quick-logging a food by typing its macros does not.

Group workouts (from version 1.0.4)

Group workouts are optional. If you host or join a squad room, you sign in with Apple once — we ask Apple for no email and no name — and Zfit creates an account for you on our backend (Supabase). What that account holds, and who sees it:

• The name you choose for your squad (up to 24 characters), shown to people in rooms you're in.
• Rooms you open or join: the room title, and for a shared session the list of lifts with their sets and reps.
• What you log inside a room: each set (exercise, weight, reps or hold time), when you start and finish, and any records you hit — shown to that room's members. Reactions are one of six emoji; there are no messages.
• Blocks and reports you make. Reports come to us, with a copy of the reported name or room title, so we can act on them.

Nothing else about your training leaves your phone for a room: not your history, personal records, bodyweight, recovery, sleep, nutrition or Apple Health data. Rooms close after a day or two and are erased 30 days after that. Delete your group account any time in Settings → Group workouts (or with Delete Account): the account and everything you posted in rooms is deleted from our servers, and your Sign in with Apple authorization is revoked.

Anonymous usage counts (from version 1.0.4)

To learn where new users get stuck and who Zfit is reaching, the app sends a short list of anonymous usage events to our server (Supabase). It is on by default and you can switch it off any time in Settings → Privacy → "Share anonymous usage"; switching it off also discards anything not yet sent. Exactly what is sent:

• A random install ID the app makes up on your phone. It is not your Apple ID, your Sign in with Apple identity, an advertising ID or any device identifier, and Delete Account replaces it with a new one.
• Which onboarding screens you reach, and once you finish The Scan: your age range (for example 25–34 — never your birth date), sex, goal, training focus, how many days a week you picked, and whether you use metric or imperial.
• That you opened the app on a given day since install (once a day at most), that you finished a workout (with a rough total such as "3–5"), that you logged a run and how (GPS, treadmill, watch), and when a paywall or the trial-ended screen was shown, a free trial started or a membership was bought (monthly or yearly).
• The app version.

Never sent: your name, email, birth date, weight, height, photos, anything you type, your workouts' weights or reps, nutrition, or any Apple Health measurement (sleep, HRV, heart rate) or recovery score. The server accepts only the fixed list above and rejects anything else. We don't store your IP address with these events, we don't link them to you or to any other data, we don't use them for advertising or share them with anyone, and we delete them after 400 days.

What we never do

• We never sell your personal data.
• We never show third-party ads.
• We never read Apple Health data for anything other than the features you see.
• We never send your Apple Health measurements to any third party, including our AI processor.
• We never use your data — photos, messages, or logs — to train AI models.

iCloud backup (from version 1.0.5)

Zfit saves a private copy of the app's data — workouts, food, programs, runs, honors and settings — to your own iCloud account, in the app's private CloudKit database. It is stored by Apple under your Apple ID; we have no access to it and cannot read it. It lets a reinstall or a new phone bring your history back: on a fresh install the app offers RESTORE. Your Apple Health data is not part of it (Health keeps its own copy). Turn it off in Settings → iCloud backup.

Deleting your data

In the app: Settings → Delete Account erases your profile, your Sign in with Apple identity, and every workout, meal, run, and recovery record on the device, and replaces the random install ID behind the anonymous usage counts with a new one, so the counts already sent can no longer be connected to the new account. It also deletes the iCloud backup. If you use group workouts, it also deletes your group account and everything you posted in rooms from our servers. Two things it cannot reach: workouts and runs the app or the watch saved into Apple Health stay there until you delete them in the Health app, and the device remembers that a free trial was already used. Waitlist: email us and we'll delete your address.

Future features

Account sync and coach/client tools are planned. Each will be opt-in, and this policy will be updated before any of them changes what we collect. If we ever propose including your Apple Health measurements in AI coaching, it will be an explicit choice you make, off by default — never a silent change.

Children

Zfit and this site are not directed at children under 13, and we don't knowingly collect their data.

Changes

We'll post any changes here with a new effective date. Material changes to app data handling will also be announced in the app.

Contact

hello@zwayfitness.com