App privacy notice

Scope and status

This notice covers the Pacewoven mobile app (previously named FitOS; some technical identifiers such as the Android package name still use that name). It does not cover this website, which has its own notice.

This is a draft written from the app’s code. It has not been approved by the owner or reviewed by a lawyer, and it does not establish legal compliance. The app is not publicly released.

Who is responsible

Operator: Legal operator name and address: owner to supply

Contact: pacewoven@gmail.com

Data kept on your phone

You can use the app as a guest. In that case the following stays on your phone:

• workouts in progress, finished workout history and personal bests
• your weekly availability blocks
• meals you log
• preferences such as theme, sound cues and haptics

It stays until you delete it in the app, clear the app’s storage or uninstall the app.

Data stored with an account

If you create an account, we process:

• your email address and password (handled by the authentication service; we do not read your password)
• profile details you enter to build routines: height, weight, age, sex, goal, experience, equipment, training days, session length, and food or cuisine preferences
• saved routines and training history: sessions, sets (reps, load), adaptation records and personal bests
• meal logs, where cloud storage for meals is enabled for your account

Purpose: to provide the app’s features and keep your data across devices. Providing these details is optional, but features that need them (such as building a routine from your profile) will not work without them.

The backend is a Supabase project. Access to your rows is restricted to your own account by row-level security. Hosting region and Supabase data-processing terms: owner to confirm

Status: some cloud storage (meal logs) is implemented but has not yet been verified against a live backend.

Optional device permissions

• Calendar (read only): used on your device to subtract busy time from your availability blocks. Calendar events are not sent to our servers or to the coach.
• Health Connect (Android): reads steps, sleep, heart rate, resting heart rate, active calories, exercise sessions and weight, and can write a finished workout. This data is used on your device. It is not sent to any language model or, as far as the code shows, to our server.
• Camera and photos: only when you choose to take or pick a meal photo. The photo stays on your device. The app does not currently upload or analyse photos.
• Notifications and exact alarms: for rest-timer alerts.

You can withdraw any permission in your phone’s settings. The related feature then stops working; the rest of the app continues.

Coach and AI processing

When you are signed in and message the coach, the app sends your message text, today’s weekday and your availability blocks (labels, type, start and length) to our server function, optionally with limited app context you have allowed (the app builds this from your saved data, such as profile details and logged meals, and never from Health Connect data). The function forwards this to a language model from an AI provider that the server is configured to use, and returns a reply that the app checks before offering you a change. Which AI provider the coach uses in production: owner to confirm and name here

Meal suggestions are generated by a separate server function that calls Groq with your calorie and macro targets and food preferences (cuisines, dietary restrictions, meals per day, cooking effort). Dietary restrictions can reveal medical information, such as an allergy.

Whatever you type to the coach is sent as written, so avoid typing anything you do not want processed by these providers.

We do not send Health Connect data, body measurements, injuries or workout history to a language model. The model does not choose exercises, sets, reps, rest or loads.

Our server records your user id, the function name and a timestamp to rate-limit use. It does not record request content for this purpose. Retention and training terms for the coach’s AI provider and for Groq, and whether our functions log content: owner to confirm

Technical and usage data

The app contains no analytics, advertising or crash-reporting SDK that we found in its code. Our backend and its providers may process technical data such as IP address and request metadata to operate and secure the service. Provider log retention: owner to confirm

Who receives data

• Supabase: authentication, database and server functions
• Groq: meal-suggestion text, as described above
• The coach’s AI provider: coach messages and allowed context. Provider name: owner to confirm

We have no statement to publish yet on sale or advertising use. Owner to confirm: no sale, no advertising, no data brokers

Retention

On-device data stays on the device until you remove it. Account data is kept while your account exists. Rate-limit records are pruned after about an hour the next time you use the coach. Retention periods for backups and logs: owner to supply

There is currently no in-app way to delete your account. See Account deletion.

Your choices

• Export your workout log as a CSV file from the Log screen.
• Use the app as a guest, or sign out.
• Turn permissions off in phone settings.
• To request access, correction or deletion, see Account deletion and contact us. Rights available by region: owner and legal reviewer to complete

We will not promise instant removal from backups or from providers’ systems; the deletion process will say what is removed and when once it exists.

Age

Pacewoven is intended for people aged 14 and over. Region-specific minimum ages and guardian consent: unresolved, and the current app build does not enforce an age check

Security

Account data is protected by access controls, including row-level security, and the AI endpoints require a signed-in account and are rate limited. No system is perfectly secure.

Changes and contact

We will update the version and date above when this changes. Contact: pacewoven@gmail.com