Tofan Workout (“we”, “our”, or “us”) operates the Tofan Workout mobile application. This Privacy Policy explains how we collect, use, and protect your information.
1. Information We Collect
Account Information
Username
Password (securely hashed)
Email address
Phone number
Profile Information
First name (optional)
Last name (optional)
Age
Gender
Weight
Height
Media Data
Images selected or captured by the user for AI meal analysis (optional)
Health Data (Apple Health)
With your explicit permission, we access the following data types through Apple HealthKit:
Steps and distance
Active and resting energy (calories)
Heart rate
Workout sessions and duration
Body weight and height
Health data is used solely to power in-app fitness tracking and progress features. It is never used for advertising, and we do not share it with third parties for marketing purposes, in accordance with Apple's HealthKit guidelines.
2. How We Use Your Data
Provide workout and fitness features
Sync and display fitness activity from Apple Health
Analyze meal images for nutrition estimation
Maintain user accounts
Contact you regarding account, security, or service updates (email / phone number)
Improve app performance
3. Data Storage
Your data is stored securely using Firebase services provided by Google. Access is restricted using Firebase security rules. Health data obtained via Apple HealthKit is processed on-device and in our secure backend only as needed to provide app features.
4. Permissions Used
Activity Recognition
Camera
Storage / Media Access
Foreground Service
Boot Completed
Internet Access
Notifications
Vibration
Apple HealthKit (read/write, with user permission)
5. Data Deletion
Users can request account deletion directly inside the app at any time.
All user profile data is permanently removed from Firebase
All fitness and activity data is deleted
All related media data is removed
Health data synced from Apple Health is deleted from our systems (data stored in the Apple Health app itself is managed separately by the user through iOS Settings)
Deletion is permanent and cannot be undone.
6. Data Sharing
We do not sell or rent personal data, including health data. Data is only processed within Firebase infrastructure or when required by law.
7. Children's Privacy
This app is not intended for children under 13. We do not knowingly collect data from children under 13.
8. Your Rights
Access your data
Request deletion
Revoke Apple Health permissions at any time via iOS Settings