Your data should work for you.

This Privacy Policy describes how APYX collects, uses, stores, and shares information when you use the APYX iOS app, Apple Watch app, widgets, and related online services.

By using APYX, you agree to this Policy. If you do not agree, do not use the Service.

APYX is a personal health and fitness application that helps you understand activity, recovery, sleep, nutrition, goals, and related insights—optionally with AI features when you subscribe and sign in.

3.1 Information you provide

• Account details: email address, password, and display name (when you create an account).
• Profile: age, weight, height, activity level, daily goals (steps, calories, water), and optional personal notes (for example, your “why”).
• Content you create: food and water logs, notes, habits/goals, coach messages, and optional coach “memories.”
• Photos: meal photos you choose to capture for the AI Food Scanner (camera access is requested only for this purpose).
• Support communications: if you email us, we receive whatever you send.

3.2 Health and fitness data (Apple Health / HealthKit)

With your permission, APYX may read categories such as:

• Activity (steps, distance, flights, exercise time, stand time, workouts, activity rings)
• Energy (active and basal calories)
• Heart and vitals (heart rate, resting heart rate, HRV, VO₂ Max, respiratory rate, blood oxygen, related athlete metrics when available)
• Sleep analysis and related sleep signals
• Body measurements (weight, height, BMI, body fat)
• Nutrition and hydration (dietary energy, water, protein, carbohydrates, fat)

With your permission, APYX may write nutrition-related samples you log in the app (calories, water, and macros) back to Apple Health so your log stays consistent across apps.

You control Health access in iOS Settings → Health → Data Access & Devices → APYX. If you deny or revoke access, related features will be limited or unavailable.

Apple HealthKit rules: We use HealthKit data to provide health, fitness, and coaching features in APYX. We do not use HealthKit data for advertising, data brokers, or unrelated marketing profiles.

3.3 Information collected automatically

• App preferences: language, theme, coach memory on/off, and similar settings stored on device.
• Device-local caches: e.g. AI insight cache, widget snapshot data shared with the APYX widget extension via an App Group.
• Authentication tokens: session tokens stored securely on device (Keychain) so you stay signed in.
• Subscription status: whether you have APYX Pro via Apple In-App Purchase and/or a server-side entitlement linked to your account.
• Technical diagnostics (limited): when a request fails, the app may surface or log error messages needed to operate the Service. We do not operate a separate advertising analytics SDK in the app as of this Policy.

3.4 Notifications

If you allow notifications, APYX may schedule local reminders (for example, habits or goals). These are delivered by Apple on your device and are not used to track you across other companies’ apps.

We use information to:

• Display your dashboard, activity, sleep, nutrition, goals, habits, notes, and health scores
• Personalize coaching and insights using your latest authorized data
• Sync optional account features (profile, subscription entitlement, health snapshots, coach history)
• Provide Pro AI features: daily/insight text, AI Coach chat, and food scanning
• Process subscriptions and unlock Pro features
• Maintain security, prevent abuse, and fix bugs
• Comply with law and Apple platform requirements
• Respond to your support or deletion requests

We do not sell your personal information.

5.1 On your device

Much of your APYX content (profile, logs, habits, notes, local coach threads, preferences) is stored on your iPhone using on-device storage (including SwiftData / local databases) and, for widgets, an App Group container.

5.2 On our servers (when you sign in)

If you create an account and sign in, we may store and process:

• Account credentials and profile fields needed for authentication
• Subscription / Pro entitlement records
• Health snapshots derived from authorized HealthKit metrics (for example steps, resting heart rate, HRV, sleep duration, active energy, VO₂ Max) for sync and AI context
• AI Coach conversation data and optional saved memories
• Requests needed to run AI features (see Section 6)

Server infrastructure currently includes cloud services such as Supabase (authentication and database / edge functions) and our application backend.

5.3 Security

We use industry-standard measures appropriate to the Service, including encrypted transport (HTTPS), authenticated API access, and on-device Keychain storage for session secrets. No method of transmission or storage is 100% secure.

APYX Pro AI features (insights, coach, food scanner) run through our servers. Your device does not ship a production OpenAI API key in the app binary for normal use.

When you use these features, we may send to our processors:

• Insights: a structured summary of recent metrics and limited profile context (for example first name, age, goals), plus language preference
• AI Coach: your message, recent conversation context, optional memories, and a current health context snapshot so replies reflect today’s stats
• Food Scanner: the meal image (or text description / revision prompt) and instructions needed to estimate nutrition

These processors may include OpenAI (or a comparable AI provider) acting as a service provider to generate responses. Do not submit information in chat or photos that you are not comfortable processing for this purpose.

AI outputs can be imperfect. They are for informational and motivational use only and are not medical advice.

Subscriptions are purchased through Apple In-App Purchase (StoreKit). Apple processes payment information under Apple’s privacy policy. We receive subscription status / entitlement signals needed to unlock Pro. Website- or admin-granted Pro entitlements may also be stored in our subscriptions records linked to your account.

We share information only as needed to operate the Service:

We do not sell HealthKit data. We do not share HealthKit data with third parties for advertising or data-brokerage.

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of personal data, and to withdraw consent.

In APYX you can:

• Revoke Health access in iOS Settings → Health
• Disable camera access in iOS Settings → APYX
• Turn off coach memory in AI Coach privacy settings
• Sign out of your account
• Delete your account in Settings / Account (Danger Zone): this requests deletion of your server account and associated server data, then wipes local APYX data on that device

Account deletion is designed to remove server-side user data associated with your auth user (including profile, subscription records, health snapshots, and coach data cascading from your account), subject to limited residual copies in backups for a short period and any data we must retain by law.

To exercise additional rights, contact apyxfitness@gmail.com.

APYX is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will take appropriate steps to delete it.

Our servers and processors may be located outside your country of residence (including the United States or other regions where our cloud providers operate). Where required, we rely on appropriate safeguards for cross-border transfers.

• On-device data remains until you delete it, uninstall the app, or use account deletion / local wipe.
• Account and server data are retained while your account is active and deleted when you delete your account (subject to backup cycles and legal holds).
• AI request logs retained by processors are governed by those processors’ policies and our configuration with them.

The Service may link to third-party sites (for example privacy or terms pages). Their practices are governed by their own policies.

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date. Continued use of the Service after changes means you accept the updated Policy, except where local law requires additional consent.

Questions about privacy or this Policy: apyxfitness@gmail.com

APYX provides informational fitness and wellness tools. It is not a medical device and does not provide diagnosis, treatment, or emergency services. Always consult a qualified healthcare professional for medical concerns.