Bayou Fitness Privacy Policy

1. Information We Collect

Bayou Fitness collects the limited information needed to run your account, support the features you choose to use, improve Bayou Fitness's training and nutrition systems, and respond when you contact us. Some information stays on your device, and some information is processed by Bayou Fitness servers when you use server-powered features.

Account Information

Bayou Fitness requires an account for normal app use. When you create or access an account, we collect:

• Your email address;
• Your Firebase user account identifier;
• Your sign-in provider and authentication information needed to operate your account;
• Security and service metadata, such as sign-in timestamps, Firebase user-agent information that can include device, operating-system, app, SDK, and platform details, and IP addresses processed by our authentication and backend providers;
• Information provided through Sign in with Apple, such as email address and full name, depending on what you choose to share with Apple.

The display name and profile photo you choose inside the app are stored locally unless you submit them to support or another server-powered feature. Firebase Authentication may retain a name supplied through Sign in with Apple, or a name or profile image already associated with your Firebase account. Bayou Fitness does not collect phone numbers, public usernames, public profiles, contact lists, or address-book information.

Workout and Fitness Data

Bayou Fitness processes workout and fitness information you enter or generate in the app, including:

• Exercises completed, sets, repetitions, weights, durations, distances, pacing, calories, heart-rate summaries, and exertion ratings;
• Training programs, routines, schedules, templates, and planned workouts;
• Custom exercises and exercise substitutions.

Your detailed workout history stays on your device by default. If you turn on Program Analytics, Bayou Fitness may collect the routine and selected onboarding fields described below. Other workout information leaves your device only when you choose a server-powered feature, contact support, or share it with another app or service.

Program Analytics

Program Analytics is optional and stays off unless you choose to share it. When enabled, it helps Bayou Fitness understand how people choose, set up, and follow routines so we can improve program templates, setup, and training guidance for you and other users.

When you choose to share Program Analytics, the current app may send:

• The built-in Bayou routine template associated with a routine, or whether the routine is custom;
• A routine-instance identifier and whether that routine is currently being followed;
• Selected onboarding answers about prior fitness-app experience and pain points, import choice, program status, experience level, and setup choice;

The current app does not send exercise names, sets, repetitions, logged weights or resistance, workout-session details, Apple Health data, heart-rate measurements, body metrics, nutrition data, precise location, workout notes, or workout media through Program Analytics.

Program Analytics is sent through an authenticated request and stored under an analytics identifier associated with your account. That association allows Bayou Fitness to apply your sharing choice and honor deletion requests; this data is not described as anonymous.

Program Analytics does not include your display name, email address, or profile information. This data is never sold or used for advertising.

You can turn Program Analytics on or off at any time in Profile > Data Management > Program Analytics. Turning it off stops future collection, clears unsent analytics from your device, and requests deletion of Program Analytics you previously shared from Firebase. If you are offline, the request syncs when you reconnect.

Nutrition Data

Bayou Fitness stores nutrition information you enter locally in the app, such as:

• Food journal entries;
• Calories or macronutrients;
• Saved foods, meals, or ingredients;
• Nutrition goals;
• Meal descriptions or other food-related text you enter;
• Meal photos you choose to save.

If you use automatic calorie and macro estimation, the meal text and/or photo you submit is sent to Bayou Fitness's cloud systems and intelligence provider to generate the estimate. Bayou Fitness does not store that submitted content in its cloud database, but the intelligence provider may retain API inputs and outputs for the period described in Section 9. Nutrition information is for general fitness and tracking purposes only and is not medical or dietary advice.

Apple Health / HealthKit Data

Bayou Fitness integrates with Apple Health through HealthKit. HealthKit access is optional. The app can function without HealthKit access, although some features may be limited.

With your permission, Bayou Fitness can read the following types of HealthKit data:

• Heart rate;
• Active energy;
• Step count;
• Walking, running, cycling, swimming, wheelchair, snow-sport, paddle-sport, rowing, and skating distance;
• Workouts;
• Resting heart rate;
• Workout effort score.

With your permission, Bayou Fitness can write the following data to Apple Health:

• Workouts;
• Heart-rate samples recorded during workouts.

You control HealthKit permissions through Apple Health and iOS Settings. You may revoke Bayou Fitness's HealthKit access at any time.

Body metrics and health-related information added through local app settings, such as body weight, body fat percentage, lean body mass, and related progress metrics, stay on your device and are not sent to Bayou Fitness servers.

Bayou Gold Intelligence Inputs and Outputs

Bayou Gold Intelligence includes cloud-based features that parse or estimate information from user-submitted content, such as:

• Workout text parsing;
• Workout image parsing;
• Program parsing;
• Workout-history import parsing;
• Nutrition text parsing;
• Meal photo estimation;
• Nutrition repair or cleanup.

When you use Bayou Gold Intelligence, the content required for that request is sent through Cloudflare to xAI to return the requested result. Bayou Fitness asks xAI not to store a response for later retrieval, but that request setting is not the same as xAI Zero Data Retention. Unless Zero Data Retention is enabled and verified, xAI states that API inputs and outputs are retained by default for 30 days for abuse or misuse auditing. Its terms permit limited longer retention when required by law or reasonably necessary for safety, security, compliance, moderation, abuse prevention, or investigations.

Bayou Fitness does not use your Bayou Gold Intelligence inputs or outputs to train models, and xAI states that it does not train on API inputs or outputs without explicit permission. Bayou Fitness records limited operational metadata, such as user ID, request type, request status, latency, model/provider, input size, token counts, and error code. This metadata is used to enforce usage limits and to operate, secure, debug, and monitor Bayou Gold Intelligence.

Photos, Camera, and Media

Bayou Fitness may request camera or photo library access when you choose to use features involving images, such as:

• Meal photos;
• Workout or program parsing from images;
• Workout share images or GIFs.

Images you choose to save are stored in local app files unless you submit an image to Bayou Gold Intelligence or share it externally. Images submitted to Bayou Gold Intelligence are sent off-device for processing.

Microphone and Speech Recognition

Bayou Fitness can use microphone and speech-recognition permissions for dictation features you start in the app. Speech content is processed by Apple's speech-recognition systems and used to fill in the text or workout content you requested.

Heart-Rate Monitors and Bluetooth

Bayou Fitness may use Bluetooth to connect to external heart-rate monitors. The app may store a saved peripheral UUID locally so it can reconnect to the device.

Outdoor Workout Location and Distance

Bayou Fitness can process distance, pace, duration, and related metrics that you enter or import for activities such as running, cycling, walking, and swimming. When you start a supported outdoor workout and grant location permission, Bayou Fitness uses precise location while that workout is active, including when the app is in the background, to calculate distance and pace and create a compact route sketch.

Accepted location updates are converted on your device into meter offsets from a temporary origin. Bayou Fitness stores that origin-free route sketch with your local workout history so the app can display the path shape, but it does not store the latitude, longitude, or geographic origin used to create it. Bayou Fitness does not send precise location or the local route sketch to Bayou Fitness servers or Program Analytics, or use either for advertising. The route sketch may leave your device when you direct the app to include the corresponding workout in an export or share it through another app or service.

Website and Support Information

If you contact us for support, we collect the information you provide, such as your email address, message content, screenshots, diagnostic details, or other information needed to respond.

The Bayou Fitness website collects basic information needed to operate the website. Bayou Fitness uses Cloudflare to host and protect the website and may process request, device, network, and security metadata for those purposes. The website saves your light or dark theme selection in your browser's local storage. Bayou Fitness does not use website advertising pixels or targeted-advertising cookies.

If you join the launch waitlist, Bayou Fitness collects your email address to send approval and launch updates. Cloudflare Turnstile processes security information to prevent abuse. Bayou Fitness does not create an app account from a waitlist submission.

2. How We Use Information

Bayou Fitness uses information to:

• Create, authenticate, and manage your account;
• Provide workout tracking, nutrition tracking, progress tracking, exports, and related local app features;
• Calculate distance and pace and create a local route sketch during supported outdoor workouts when you grant location access;
• Read from and write to Apple Health when you grant permission;
• Process user-submitted text or images through Bayou Gold Intelligence when you choose to use those features;
• Generate workout, nutrition, and progress insights;
• Use optional Program Analytics to understand routine choices, following status, and onboarding patterns, improve program setup, and prioritize improvements;
• Improve Bayou Fitness's training experience and routine library using optional Program Analytics and non-content operational metadata;
• Store app preferences and local app data on your device;
• Manage the launch waitlist and send approval and launch updates;
• Provide customer support;
• Secure, debug, maintain, and improve the app;
• Monitor Bayou Gold Intelligence reliability, latency, usage, and errors;
• Comply with legal obligations and enforce our terms and policies.

We do not use health, fitness, workout, nutrition, body metric, or Apple Health data for third-party advertising. We do not sell your health or fitness data.

3. How Information Is Stored

Bayou Fitness stores app data locally on your device using local app storage, UserDefaults, App Group UserDefaults, local files, and Apple Watch local storage. Local-only data includes items such as workout notes, origin-free route sketches, Share Workout images and GIFs, body metrics, and locally chosen profile photos and display names.

Google Firebase Authentication stores account and authentication data. Google Cloud Firestore and Cloud Functions store or process account preferences, Program Analytics you choose to share, account-deletion state, AI usage limits, and the operational metadata described above. RevenueCat processes subscription and entitlement information associated with your Firebase account identifier.

Cloudflare Pages hosts the Bayou Fitness website. A Cloudflare Worker transiently relays Bayou Gold Intelligence content to xAI and returns the result. The Worker does not persist submitted content or generated output in a Cloudflare application datastore. For Bayou Gold Intelligence, Firebase stores only the operational usage and diagnostic metadata described above.

A separate Cloudflare Worker validates launch-waitlist submissions, and Cloudflare D1 stores the normalized email address, waitlist status, disclosure version, and timestamps. Bayou Fitness stores HMAC-derived identifiers for deduplication and rate limiting instead of raw IP addresses or network ranges.

Network requests use HTTPS. Service providers encrypt stored data according to their own security practices. We do not claim end-to-end encryption for Bayou Fitness data.

4. When We Share Information

We may disclose information in the following limited circumstances:

Service Providers

We use the following providers to operate Bayou Fitness:

• Google Firebase and Google Cloud for authentication, verification and password-reset emails, backend functions, database storage, security, and operational logging;
• Cloudflare Pages and Workers for website hosting, request routing, security, and Worker logs and traces;
• xAI (X.AI LLC) for Bayou Gold Intelligence processing;
• RevenueCat for subscription status, entitlement management, and purchase-related support;
• Apple for Sign in with Apple, in-app purchases, HealthKit, speech recognition, and other platform services you choose to use;

These providers process information for us so we can provide and secure the app. Bayou Fitness requires them to provide the same or equivalent protection for personal information as described in this Policy and required by applicable platform rules and law.

Bayou Gold Intelligence Processing

When you choose to use Bayou Gold Intelligence, the specific text, images, and related request information you submit is sent to intelligence service providers to generate the requested result.

Apple and HealthKit

When you grant HealthKit permission, Bayou Fitness may read from or write to Apple Health as described in this Privacy Policy and in Apple's permission prompts. You can manage these permissions through Apple Health or iOS Settings.

User-Directed Sharing

If you use the iOS share sheet or other sharing features, you choose where to send workout receipts, images, GIFs, exports, or other content. Information shared this way is handled by the destination app or service you choose.

Legal, Safety, and Business Transfers

We may disclose information if we believe it is reasonably necessary to comply with law, legal process, or enforceable government requests; protect the rights, safety, and security of Bayou Fitness, users, or others; investigate fraud, abuse, or security issues; or as part of a merger, acquisition, financing, reorganization, or sale of assets.

5. Advertising, Tracking, and Sale of Data

Bayou Fitness does not show ads, use third-party ad networks, access the IDFA, use App Tracking Transparency for tracking, use targeted-advertising pixels, or sell personal information.

Bayou Fitness does not sell health, fitness, workout, nutrition, body metric, or Apple Health data. Bayou Fitness does not use that data for third-party advertising.

This is a core Bayou Fitness privacy philosophy. In the unfortunate situation that this ever changes, Bayou Fitness will explicitly notify users well in advance, update this Privacy Policy, and obtain any permissions required by law or platform rules before the change applies.

6. Payments and Premium Features

Bayou Fitness does not process payment card information directly. Paid and premium features are processed through Apple's in-app purchase system, and RevenueCat helps Bayou Fitness manage subscription status and entitlements. Apple processes payment information. Bayou Fitness and RevenueCat receive information such as subscription status, product purchased, renewal state, trial eligibility, cancellation status, transaction identifiers, and Apple receipt and purchase history. RevenueCat also processes your Firebase account identifier; device, operating-system, app-version, and locale information; and first-seen and last-seen timestamps. We use this information to provide premium features, validate purchases, prevent fraud, support purchase and restore issues, and understand subscription performance. RevenueCat does not receive your payment-card details.

Deleting your Bayou Fitness account does not cancel an Apple subscription; subscription renewal must be managed through Apple.

7. Your Choices and Controls

Account and Profile

You can manage account access in the app.

Workout, Nutrition, and Body Data

You can access, edit, and delete workouts and food entries in the app. You can export available workout, progress, and body metric data as JSON, CSV, or PDF.

Apple Health

You can grant or revoke Apple Health permissions through Apple Health or iOS Settings. Deleting your Bayou Fitness account or erasing Bayou Fitness app data does not delete workout records already written to Apple Health; you can manage those records in Apple Health.

Program Analytics

Program Analytics starts off. You can choose whether to share it during onboarding or later in Profile > Data Management > Program Analytics. You can turn sharing off and request deletion of previously shared Program Analytics at any time.

Location

You can grant or revoke Bayou Fitness's location access and Precise Location setting through iOS Settings. If location access is unavailable, you can continue the workout and enter its distance manually.

Photos and Camera

You can grant or revoke camera and photo library permissions through iOS Settings.

Bayou Gold Intelligence

You control whether to submit text or images to Bayou Gold Intelligence. If you do not want specific content processed by cloud intelligence providers, do not submit that content to Bayou Gold Intelligence.

Marketing Communications

Bayou Fitness does not send marketing emails. Account-related emails, such as verification and password-reset emails, are sent as necessary to operate your account.

8. Account Deletion

Bayou Fitness provides an in-app account deletion flow. When server-side account deletion succeeds, Bayou Fitness deletes your RevenueCat customer record, Program Analytics stored in Firebase, the account-linked Firestore data under your user identifier, and your Firebase Authentication account. The app then signs you out and begins verified deletion of app-controlled local data on that installation, including app and widget data, and requests deletion of paired Apple Watch data. If local deletion is interrupted, the app records recovery state so it can retry. Account deletion does not cancel an Apple subscription or remove exports or content you previously shared with other apps or services.

If you use Sign in with Apple, the app requires fresh Apple authentication and requests revocation of Bayou Fitness's Sign in with Apple token before it sends the server-side deletion request.

Some information may be retained if necessary for security, legal compliance, fraud prevention, dispute resolution, or legitimate business records. Data stored in backups, logs, or service-provider systems may take the additional time described below to expire.

You may also contact help@bayou.fitness to request deletion or ask questions about your data.

9. Data Retention

Bayou Fitness keeps personal information for as long as needed to provide the app, comply with legal obligations, resolve disputes, maintain security, and enforce agreements.

• Firebase Authentication keeps logged IP addresses for a few weeks. After Bayou Fitness deletes an authentication account, Google states that other authentication information is removed from live and backup systems within 180 days.
• Account-deletion intent records expire after 24 hours, Bayou Gold Intelligence quota reservations after 2 days, per-request diagnostic records after 30 days, and daily usage and metric summaries after 31 days. Firestore normally deletes expired records within about 24 hours after their expiration time.
• Unless xAI Zero Data Retention is enabled and verified, xAI states that API inputs and outputs are retained by default for 30 days and may be kept longer in limited legal, safety, security, compliance, moderation, abuse-prevention, or investigation circumstances. xAI states that it does not train on this API content without explicit permission.
• Cloudflare Worker logs and traces may be retained for up to 7 days. Google Cloud application logs are generally retained for 30 days under default settings; required audit or security logs may be kept longer under provider settings or legal requirements.
• Launch-waitlist entries expire after one year unless they are removed sooner. Rate-limit records expire after one hour.
• Program Analytics is retained while sharing is enabled. Turning sharing off clears unsent analytics from your device and requests deletion of previously shared Program Analytics from Firebase; an offline request syncs when you reconnect.
• Local app data remains on your device until you delete it in the app, delete your account, or remove the app, subject to copies in device backups and exports or shares you create.
• Subscription and transaction records may be retained by Apple, RevenueCat, or Bayou Fitness as needed to provide entitlements, prevent fraud, resolve disputes, and meet legal obligations.
• Support emails may be retained as needed to respond to and manage support requests.

10. Security

We use reasonable technical and organizational measures designed to protect information. For example, network requests use HTTPS, and access to production systems should be limited to people and service providers who need access to operate the app.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

Bayou Fitness is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete it.

12. California Privacy Notice

This section provides additional information for California residents.

Categories of Personal Information We Collect

Depending on how you use Bayou Fitness, we collect:

• Identifiers, such as email address, account ID, and authentication identifiers;
• Customer records information, such as account information;
• Sensitive personal information, such as account-login information, precise location processed transiently on your device during supported outdoor workouts, origin-free route sketches stored locally, and health-related content you submit to Bayou Gold Intelligence or support;
• Commercial information, such as subscription status and premium-feature transaction information;
• Internet or electronic network activity information, such as request metadata and app-related service interactions;
• Fitness preferences and optional Program Analytics, which may include routine choices, following status, a routine-instance identifier, and selected onboarding answers when sharing is enabled;
• Audio, electronic, visual, or similar information, such as photos or dictated content you choose to submit;
• Intelligence-generated estimates, parsing results, or summaries based on content you choose to submit;
• User content, such as workout details, food logs, meal photos, and submitted prompts, when you choose to submit that content off-device.

Sources

We collect information from you, your device, Apple Health when you grant permission, compatible heart-rate devices when you connect them, Bayou Gold Intelligence when you submit content, and service providers that help operate the app.

Purposes

We use information for the purposes described in this Privacy Policy, including account management, app functionality, HealthKit integration, intelligence processing at your request, understanding routine choices, following status, and onboarding patterns, improving program setup, product improvement, support, security, debugging, and legal compliance.

Sale and Sharing

Bayou Fitness does not sell personal information and does not share personal information for cross-context behavioral advertising.

California Rights

Depending on applicable law, California residents may have rights to know, access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising privacy rights.

To make a request, contact help@bayou.fitness. We may need to verify your identity before responding.

13. Consumer Health Data Privacy Notice

This section is intended to provide additional transparency for users in states with consumer health data privacy laws.

Categories of Consumer Health Data

Bayou Fitness processes consumer health data locally on your device. Bayou Fitness also collects or processes specific health-related content you submit to Bayou Gold Intelligence, automatic nutrition estimation, or support. When Program Analytics is enabled, Bayou Fitness may also collect routine choices, following status, a routine-instance identifier, and selected onboarding answers as described in Section 1. Depending on the feature you use, health-related content may include:

• Workout and exercise data you submit;
• Heart-rate data and related workout metrics you submit;
• Nutrition, calorie, macro, meal, and food journal data you submit;
• Body metrics you submit, such as body weight, body fat percentage, and lean body mass;
• Fitness goals, training programs, workout schedules, progress statistics, and related information you submit;
• HealthKit data you choose to share;
• Origin-free workout route sketches derived on your device from precise location, without stored latitude, longitude, or geographic origin;
• Photos, text, or other content you submit that relates to fitness, nutrition, or body metrics;
• Intelligence-generated estimates, parsing results, or summaries based on health, fitness, or nutrition content you submit.

Program Analytics does not collect Apple Health or HealthKit data, heart-rate measurements, body metrics, nutrition logs, precise location or local route sketches, workout duration, workout notes or comments, or workout media.

Sources of Consumer Health Data

We may process consumer health data locally or collect submitted consumer health data from:

• You, when you enter data in the app;
• Your device;
• Apple Health, when you grant permission;
• Compatible heart-rate devices you connect;
• Bayou Gold Intelligence when you submit content and receive generated outputs.

Purposes for Collection and Use

We process or use consumer health data to:

• Provide workout, nutrition, body metric, progress, and export features;
• Read from and write to Apple Health with your permission;
• Process Bayou Gold Intelligence features you choose to use;
• Store app preferences and local history on your device;
• Use optional Program Analytics to understand routine choices, following status, and onboarding patterns so Bayou Fitness can improve program templates and setup;
• Maintain, secure, debug, and improve app functionality;
• Provide customer support;
• Comply with legal obligations.

Sharing Consumer Health Data

We share consumer health data with service providers only when needed to provide the cloud features you request. When Program Analytics is enabled, Google Firebase and Google Cloud receive the selected analytics fields to authenticate, store, and process them for Bayou Fitness. When you use Bayou Gold Intelligence, Cloudflare and xAI process the content needed for that request. Bayou Fitness does not share Program Analytics with advertisers, data brokers, or other fitness companies. We also share data at your direction, such as when you export or share a workout receipt.

We do not sell consumer health data.

Consumer Health Data Rights

Depending on applicable law, you may have rights to confirm whether we collect, share, or sell consumer health data; access that data; withdraw consent; and request deletion of consumer health data. You can withdraw Program Analytics consent and request deletion in Profile > Data Management > Program Analytics. You can also make a request by contacting help@bayou.fitness.

This Consumer Health Data Privacy Notice is available through the Health Data link in the page navigation.

14. International Users

Bayou Fitness is operated from the United States. If you use Bayou Fitness from outside the United States, your information may be processed in the United States or other countries where we or our service providers operate.

Bayou Fitness applies this Privacy Policy to users of the Bayou Fitness app and website.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as appropriate, such as by updating the last updated date, posting the updated policy, or providing in-app notice.

If Bayou Fitness materially expands Program Analytics beyond the categories or purposes described here, we will provide additional notice and obtain consent when required.

16. Contact Us

For privacy questions or requests, contact:

Bayou Applied Engineering, LLC
Email: help@bayou.fitness