Privacy Policy

RoundFit is a personal nutrition and health intelligence app built to help you understand your body through data. RoundFit is operated by the RoundFit team.

If you have any questions about this policy, contact us at privacy@roundfit.com.

Data you give us directly

• Name, email address, and password when you create an account
• Physical stats including age, biological sex, height, and weight
• Health goals and activity level
• Menstrual cycle data including period start dates, cycle length, and life stage — if you choose to provide it
• Food logs including meal names, calories, and macronutrients
• Morning check-in responses including sleep quality, energy level, and workout details
• Weight logs you choose to record
• Any notes or manual entries you add

Data we collect automatically from your device

• Steps, active calories burned, and distance from Apple HealthKit or Google Health Connect — if you grant permission
• Sleep duration and quality from Apple HealthKit or Google Health Connect — if you grant permission
• Resting heart rate and heart rate variability, if available from your connected devices
• App usage data including screens visited and features used

Data from third-party services

• Food and nutrition data from Edamam and Open Food Facts when you search for or log food
• Subscription and payment status from RevenueCat — we never see or store your payment card details

We collect your data for one reason — to give you accurate, personalised nutrition and health guidance. Specifically, we use your data to:

• Calculate your daily calorie and macro targets based on your body and goals
• Adjust your targets daily based on your activity, sleep, and recovery
• Adjust your targets based on your menstrual cycle phase if you are a woman
• Generate personalised daily insights about your nutrition and health patterns
• Identify patterns in your data over time — for example the connection between your sleep quality and calorie intake
• Power our AI-generated insights for premium subscribers using Anthropic's Claude API
• Send you notifications you have opted into, such as morning check-in reminders
• Process your subscription and manage your account

Premium subscribers receive personalised insights generated by Anthropic's Claude AI. To generate these insights we send a summary of your recent health and nutrition data to Anthropic's API. This includes:

• Your last 7 days of food logs
• Your last 7 days of check-in responses
• Your current cycle phase if you are a female user
• Any confirmed patterns we have detected in your data
• Your calorie and macro targets

We do not send your name, email, or any directly identifying information to Anthropic. The data is used only to generate your insight and is not used to train AI models. Anthropic's data handling practices are governed by their privacy policy at anthropic.com/privacy.

We collect health data including menstrual cycle information, sleep data, heart rate, and body metrics. This is sensitive data and we treat it as such.

• We never sell your health data to anyone.
• We never share your health data with advertisers.
• We never use your health data to make inferences unrelated to the health guidance you asked for.
• Menstrual cycle data is used only to adjust your nutrition targets and generate cycle-specific insights.
• You can delete all of your data at any time from the profile screen.

We share your data only with the following third parties, and only to the extent necessary to operate the app.

We do not sell your data. We do not share your data with advertisers. We do not share your data with data brokers.

Data obtained from Apple HealthKit is used only to provide and improve health and fitness features within RoundFit. We do not use HealthKit data for advertising, market research, or any purpose unrelated to health and fitness. We do not share HealthKit data with third parties except as required to provide the service, and never for advertising purposes. This is required by Apple and we comply fully.

We keep your data for as long as your account is active. If you delete your account, all of your personal data is permanently deleted from our servers within 30 days. This includes all food logs, health data, check-ins, cycle logs, insights, and patterns.

If you stop using the app but do not delete your account, your data is retained indefinitely so it is available when you return.

Depending on where you live, you have the following rights.

All users

• Access your data — view all your data in the app at any time.
• Delete your data — delete your account from profile settings and all data is permanently removed.
• Export your data — contact us at privacy@roundfit.com and we will send you a copy of your data within 30 days.
• Correct your data — update any of your personal information from the profile screen at any time.

European users (GDPR)

• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to lodge a complaint with your supervisory authority

California users (CCPA)

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed and to whom
• Right to opt out of the sale of personal information — we do not sell personal information
• Right to non-discrimination for exercising your rights

To exercise any of these rights, contact us at privacy@roundfit.com.

We take reasonable technical and organisational measures to protect your data including:

• All data is encrypted in transit using TLS
• All data is encrypted at rest in our database
• Authentication is handled by Supabase, which implements industry-standard security practices
• API access requires authentication on every request
• Row level security ensures users can only access their own data
• We never store payment card details

No system is completely secure. If you discover a security vulnerability please contact us immediately at security@roundfit.com.

RoundFit is not intended for users under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has created an account, please contact us at privacy@roundfit.com and we will delete the account immediately.

We may update this policy from time to time. If we make significant changes we will notify you via email or an in-app notification before the changes take effect. The date at the top of this policy shows when it was last updated. Continued use of the app after changes take effect means you accept the updated policy.

If you have any questions about this privacy policy or how we handle your data, contact us: