Privacy policy

Last updated: 5 November 2026

1. Who we are

WahidFit is a workout and nutrition tracker for the web, iPhone and Android. It is provided by WahidFit LLC, a limited liability company in the United States ("we", "us"). For privacy questions or requests, email support@wahidfit.app.

2. What we collect

• Account: your email, first name and password (stored securely, never in plain text).
• Your answers: goal, experience, days per week, session length, height, sex, birth year, and areas to focus on or avoid. Optional ones can be left blank.
• Training and body data: plans, workouts, sets, weights, reps, notes, body weight, measurements, and the gyms you use.
• Injuries: injuries you log and your check-ins, used to swap or pause exercises. Not shown to friends. A coach can see them only if you turn on that switch for that coach.
• Food and water: what you log, your food goals, diet preferences and allergies.
• Photos (optional): progress photos you add, photos of your own exercises, and meal photos if you use the photo estimate.
• Coach links (optional, Pro): if you make a link for a coach, we keep the link's settings (a name you give it, when it ends, how many times it was opened) and a one-way fingerprint of its code. Whoever has the link can see your first name, your last 90 days of workouts (exercises, weights, reps) and, only if you tick it, your body weight. Never notes, food, photos, email or friends. You can turn a link off any time; it also stops by itself after at most 90 days.
• Coach accounts (optional): you can invite another WahidFit user as your coach, or give them a one-time code. We keep the invite (who, when, whether it was accepted) and the choices you made with separate switches: whether they can see your workouts, your food log, your body weight, your injuries, your progress photos and your weekly check-ins, whether they can log workouts for you, and whether they can set your food targets. You can change each switch, or remove the coach, at any time. Once a coach is connected, they can always see your active plan and your units; what else they see depends on your switches. A coach can send you notes and you can reply, can start a multi-week training block on your plan if you allow logging, and can keep private notes about you that you cannot see. Coach notes and replies are kept until the pair ends or you delete your account. Workouts a coach logs for you are marked as theirs and you can delete them. A coach can stop coaching you. Coaches are other WahidFit users, not our staff.
• Weekly check-ins (optional): if you send one, we keep your sleep, soreness and mood scores and any note you write. They are shown only to a connected coach you have turned the check-ins switch on for (from the day they connected), and to nobody else. If you block someone, any coaching connection with them ends.
• WahidFit Bot and meal-photo estimates (optional, third-party AI): if you use them, your question or meal photo goes through our server to an AI service (Groq, with Cloudflare Workers AI as a backup) that writes the answer. For the bot we add a short summary of your training so the answer fits you: your plan, recent top sets, weekly sets per muscle, body weight trend, today's food totals, current injuries and the workout you are in. It never includes your name, email address or phone number. We do not store the conversation or the photo, only how many questions you have used today. The AI service processes what it receives to produce the answer. The app asks you before the first use, and everything else works without it.
• Voice (optional): if you tap the microphone in the WahidFit Bot, your phone's speech recognition (Apple's on iPhone, your browser's on the web) turns what you say into text, which is then sent as your question like a typed one. WahidFit never records, stores or receives your audio. The iPhone app asks for microphone and speech recognition permission the first time, and you can turn either off in iOS Settings.
• Apple Watch motion data (optional, off by default): if you turn on "Record motion" on the watch, each set's wrist movement is saved as a file on your watch and sent only to your own phone. It is not uploaded to WahidFit.
• Friends: your @username, friend code, connections, comments and high-fives, and the challenges and team goals you join, with the cheers you give and get.
• Phone number (optional): only used to match someone who types your exact number, if you allow it.
• Friend notifications (optional, iPhone app): if you turn them on, Apple's push token for your phone is stored with your account so we can tell you about a friend request, a comment, a high-five, a cheer, or something from a coach (a note, an invite, a workout logged for you). If you are a coach, the same token is used for a weekly summary of how your clients are doing (who trained, who has gone quiet, whose check-in is worth reading), which you can turn off. The token is removed when you turn them off or sign out.
• Reminders: the reminders you set and your time zone. On the website, a notification address for each device where you turn them on. In the phone apps, reminders are scheduled on your phone itself.
• Apple Health (optional, iPhone app): only if you connect it, and only the types you tick (for example steps, workouts, heart rate, sleep, body weight). You can also let WahidFit save your weigh-ins, and your finished workouts if you turn that on, to it. See section 5.
• Location (optional): only when you ask for it. If you tap "Find gyms near me" or use your location in Explore, your phone's location is used once to look up places nearby. Trail searches send an area rounded to about a kilometre to the public Overpass service. The rounded search area and public trail results are remembered only on this phone for one day, not in your account. When the Run hub shows weather, the rounded area (about 1 km) of your last trail search is sent to Open-Meteo (open-meteo.com), with no account or ID and nothing else. As with any website request, Open-Meteo also sees your device's IP address. Background maps load tiles from OpenFreeMap: like any website, its tile server sees your IP address and which map area you view, which may reveal roughly where you are. Nothing else is sent to OpenFreeMap: no account ID, name, email or recorded route. If you choose the Satellite or Hybrid map, aerial photos load from Esri's World Imagery service instead: its server likewise sees your IP address and which map area you view, and nothing else (no account ID, name, email or recorded route). If you record a run, walk, hike or ride in the Run hub, the app follows your location while you record. In the native iPhone and Android apps, recording can continue with the screen off; your route still stays only on this phone until you save it. When you save the activity, the app keeps the route (the line you moved along, with its length and climb) in your account, visible only to you. You can delete a workout, and its route goes with it. See section 4.
• Purchases (iPhone app): if you buy WahidFit Pro, whether your subscription is active, which plan it is and when it ends. Apple takes the payment; we never see your card or billing details.
• Feedback: messages you send us.
• Usage and errors: which screens are opened, simple counts (for example that you finished sign-up, logged a first workout, opened the app on a day, opened the Pro screen or used a coach code), and error messages. They are tied to your account and never include your workouts, meals, weight, photos or health data. A few events carry one small detail, such as the goal you picked during sign-up or a food you report as wrong. They are kept for 90 days to keep the app working and to see where people get stuck, and are used only by us. No third-party analytics. You can switch usage counts off in You > Settings > Privacy and data.
• On your device: a workout in progress, your settings and a copy of recent data so the app works offline.

We collect your location only while you record an activity or tap a find-places button, as described above. We do not collect your contacts or advertising ID, and background location is used only during a recording you start in the native app, including when the screen is off. The apps ask for the camera only when you scan a barcode or take a photo, and for your photo library only when you pick a picture.

3. How we use it

Only to run WahidFit: build and adapt your plan, show your history and progress, work out your targets, send the reminders you ask for, let you share with friends if you choose, keep the service secure, and reply to you. Health-related information is never used for advertising or data mining.

4. Who can see it

• Only you see your answers, injuries, food, photos, measurements and body weight, except what you choose to share with a coach through the switches described above.
• Friends see your first name, a summary of each workout, and weekly cardio distance and time totals (never GPS routes), only if you turn sharing on (it is off by default). Your @username can be found in search unless you turn that off.
• Your coach, if you connected one, sees what is described under Coach accounts and Weekly check-ins above, and only that. People in a challenge or team goal you joined see your name and your count of workout days in it, and your cheers, nothing else.
• The WahidFit team can see your first name, email, sign-up and last sign-in dates, workout count, and any feedback you send. We cannot see your workout details, food, photos, injuries or health answers.
• Service providers that host and run the app handle data for us under our instructions and for no other purpose. Barcode and food searches send only the barcode or search words to a public food database (Open Food Facts), and exercise pictures are loaded from a public image host; those services can see your device's IP address and the picture or barcode requested, nothing from your account. If you tap "Find gyms near me" or "Find trails near me", your phone's location, rounded to about a kilometre, is sent to a public OpenStreetMap-based service (Photon, run by komoot, or the Overpass service) to list places or trails nearby. We never receive it, and it is not saved with your account. If you buy WahidFit Pro, Apple processes the payment and RevenueCat (a subscription service) keeps track of it for us; RevenueCat receives your WahidFit account ID and the purchase records from Apple, not your name or email. If you use the optional meal photo estimate, the photo is sent over an encrypted connection to an AI provider we use for this (Cloudflare, Inc. through its Workers AI service, Groq, Inc., or Anthropic, PBC) only to make the estimate. We do not keep the photo, and we choose and configure these providers so that photos are not used to train AI models. The same applies to the optional "Ask WahidFit" helper: your question, with a short summary of your training or food numbers, goes to the same kind of provider to produce an answer. Your progress photos are never sent to any AI service. The app asks you first, and these features have a daily limit per person.
• Reports and blocks. If you report a comment, profile or feedback post, we keep the report (who reported what, the reason and any note) so we can review it, and we may share it with the person it concerns only as needed to act on it. If you block someone, we keep that so you stop seeing each other's content. Both are deleted with your account.
• Anyone else only if the law requires it or to protect someone's safety.

We never sell your personal information or share it for advertising.

5. Health information

A separate health data policy lists exactly what health information we collect, why, and who can see it.

Some of what you give us relates to your health or body. We collect it only so WahidFit can work, and only with your consent: you choose what to answer, and you can withdraw consent by deleting the data or your account. WahidFit gives general fitness information, not medical advice (see the terms).

When the app is open and Apple Health is connected, WahidFit reads the Health types you selected, including workouts, to show them on Today. You can also request an import of runs, walks, hikes and rides. These workout readings are never sent to the bot. The runs you choose to import (and routes when supported) are saved to your account like any run and are never sent to the bot.

Apple Health. If you connect Apple Health, WahidFit reads only the types you tick (such as steps, distance, active energy, workouts, heart rate, sleep, body weight) and shows them on your Today screen. Those readings stay on your phone: they are not uploaded to our servers. One exception is body weight: weights you choose to bring in from Health are stored with your account like weigh-ins you type in, so your charts work, and new weigh-ins are saved to Health. If you turn it on, finished workouts (type, start and end time) are saved to Health too. We write nothing else to Health. We never use Health data for advertising or marketing, never sell it or share it with data brokers or other third parties, and never store it in iCloud. You can stop syncing in the app at any time, and switch off access in the iPhone's Settings under Health.

6. Where it is stored

Your data is stored in the United States. If you use WahidFit from another country, it is transferred to and processed in the US.

7. How long we keep it

Your content stays until you delete it or your account. Usage and error records are kept for 90 days. Meal photos are not kept after the estimate. When you delete your account, everything tied to it is removed, including progress photos and photos of your own exercises. Feedback you sent is kept without your name or email, and copies in backups age out on their own schedule.

8. Your choices and rights

• Download your data: You tab → Download my data.
• Correct it by editing it in the app.
• Delete your account and data: You tab → Delete my account, or see how if you can't open the app.
• Control sharing: turn friend sharing, search and notifications off at any time.

Depending on where you live (for example the EU, UK, California or Washington), you may also have the right to access, correct, delete or move your data, to object to or restrict how it is used, to withdraw consent, and to complain to your regulator. We won't treat you worse for using these rights. Email us from your account address and we will reply within 30 days.

9. Security

Data is sent over encrypted connections and each account can reach only its own data. Progress photos and photos of your own exercises are kept in private folders. No system is perfectly secure, so use a strong, unique password. If a breach affects you, we will tell you as the law requires.

10. Sign in with Google, Apple or Facebook

You can create an account or sign in with Google (website and iPhone app), Apple (iPhone app) or Facebook (website, when offered). We only receive your email address and name from them (Apple may give you a private relay address instead of your real one), and use them only to create and recognise your account. We never post to your accounts there.

Google. If you choose "Continue with Google", we ask Google only for your email, name and basic profile, and use them only to create and recognise your account. We don't request access to your Gmail, contacts, Drive or calendar, and we don't share or sell Google user data. WahidFit's use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements. You can remove access at myaccount.google.com/permissions.

11. Children

WahidFit is for people 16 and over. We don't knowingly collect data from anyone younger. If you think a child has an account, email us and we will delete it.

12. Changes

If we change this policy in a way that matters, we will update the date above and tell you in the app or by email before it applies.