Privacy Policy

Effective October 19, 2026 · Last updated: October 23, 2026 · Version 2026-10-19

1. Who we are

EchoFit is operated by Alra Intelligence LLC, a limited liability company formed in Wyoming, whose postal address is 30 N Gould St, Ste N, Sheridan, WY 82801, USA ("EchoFit", "we", "us"). We decide how and why your personal data is used, so we are responsible for it (the "controller" in data protection law).

Questions about privacy: privacy@echofit.app.

2. What this policy covers

This policy covers the EchoFit app on iPhone and Apple Watch, the web app and website at echofit.app, our emails, and the coach portal. It does not cover other companies' sites or services, even when we link to them.

If you connect with a coach on EchoFit, the coach sees what section 6 describes and must handle it under our Coach Terms.

3. The data we collect

We collect data in five ways:

• What you give us: your account details, profile, the workouts you log, your questionnaire answers, messages, photos and what you write to us.
• What your device sends: app version, device and browser type, notification tokens, crash reports, and your IP address when you connect.
• What we calculate: insights from your training, such as recovery, training load and your Digital Twin scores.
• What your coach adds: programmes, notes, check-ins, nutrition targets and injury notes, if you connect with a coach.
• What other services tell us: Google or Apple when you sign in with them; Apple, RevenueCat or Stripe when you buy a plan; and, in the iPhone app on iOS 26 or later, the age range Apple shares with your permission (section 12).

You can use EchoFit as a guest without an account. A guest's training stays on the device; nothing is synced to our database until you create an account.

The table below lists every category, why we use it, the legal basis, who can see it and how long we keep it. It is generated from the same inventory our App Store privacy answers use.

A few things in more detail

Profile photo (optional): a picture you take or choose as your avatar. It is shown to the friends and coach you connect with, and to anyone who has the picture's link. You can remove it at any time, and it is deleted with your account.

Messages: the direct messages you send to friends or to your coach are stored so both of you can read the conversation.

Apple Health: the iPhone app does not read from or write to Apple Health. On Apple Watch, if you allow it, EchoFit saves your session to Apple Health as a workout and reads your heart rate and active energy during the session to show them on the Watch. Those readings stay on your Watch and in Apple Health; EchoFit's servers never receive them. Health data is never used for advertising or shared with advertisers.

Voice logs — English: your speech is turned into text by your device's speech recognition (Apple's on iPhone; on the web, your browser's built-in service, which may itself send the audio to the browser's maker — for example, Google for Chrome). EchoFit's servers never receive this audio, only the resulting text.

Voice logs — Arabic: when the app is set to Arabic and you have allowed AI features (section 5), the recording is sent through our server to OpenAI (Whisper) to be transcribed; without that, your device's own speech recognition is used. We do not store the recording; only the resulting text is kept.

The health check: the questionnaire's seven health questions are answered on your device. We keep only the outcome — whether medical clearance was advised, and when. Your answers are never stored.

How you use EchoFit: a few product facts are tied to your account so we can tell whether EchoFit is working for you: the day you opened the app, whether you saw the upgrade screen and why, whether you started or completed a purchase, what you shared and where, the first time you used a feature, and — for notifications — how you answered the permission prompt, which type of notification you opened and from where, which notification switches you changed, and how many reminders your device scheduled. These are short labels only — never free text, never a message's content, never your training numbers.

What we don't collect: your precise location, your contacts, an advertising identifier, or your card number (you enter it on Stripe's or Apple's own page).

4. Health data

We treat these as health data: your health check outcome, injuries and areas to protect, pregnancy or postpartum notes, body weight, sleep and stress answers, check-in answers, nutrition targets and ticks, and progress photos. The law in many places gives this data extra protection (for example GDPR article 9, the Saudi and UAE personal data protection laws, and the Washington, Nevada and Connecticut consumer health data laws).

• We ask first. Before you first tell the app about an injury, answer the health check or set a pregnancy or postpartum stage, it asks for your explicit consent, in plain words, with a clear "Not now". You can withdraw it in Settings → Data → Privacy. Your injury and health answers, your body weight, sleep and stress, and the injury and life-stage notes you added yourself, are then deleted from your device and your account. Your plan stops adjusting for any injury note, including one your coach added, and no health answer or note goes to an AI. Notes your coach added stay in their record of your coaching, where they can still see them; ask your coach to clear them, or end the coaching connection.
• Progress photos have their own switch: a photo goes to a coach only after you turn photos on for that coach and confirm you are 18 or older.
• Body weight, sleep and stress are covered by the same consent. Without it the app does not collect them and your plan uses standard values instead; withdrawing it deletes them, including your weigh-ins, from your device and your account. Your body weight reaches a coach only if you also turn it on for that coach.
• We use it only to coach you — to choose and adapt your training safely — and to show it to a coach you have connected with when the consent screen says so.
• We never sell it, never use it for advertising, and never use it to make decisions about insurance, credit, employment or housing.

Our Consumer Health Data Privacy Policy lists every category of consumer health data, where it comes from, who receives it, and how to exercise your rights.

5. AI features

EchoFit's AI features run on Google Gemini, and Arabic voice logs are transcribed by OpenAI. Before the first time a feature sends your data to one of them, the app asks you — "Turn on" or "Not now", with what is sent and to whom one tap away. With "Not now" those features stay off and the app does not ask again on its own; everything else works. You can change your answer in Settings → Data → Privacy.

Identifiers are removed first. Before anything leaves for Google, our server removes your name, email and phone number, your human coach's and your friends' names (they become "your coach" and "a friend"), web links, @handles, account ids and birth dates, and turns other dates into relative ones ("3 days ago"). Your training numbers, body weight and health flags (with your health yes) stay — they are what the coach answers from. Each request carries a random reference, never your account id. A voice recording cannot be edited this way: OpenAI receives the Arabic recording itself, and the text it returns is cleaned the same way before any AI reads it.

• Google Gemini — the AI coach and workout reading. Every plan uses the same model, Google's Gemini. When you talk to the coach, Google receives your message, the recent conversation (up to six earlier messages) and a summary of your training: your goal, experience, bodyweight (only if you have allowed health answers), active programme, recent sessions and best lifts. If you have allowed health answers, any health flags on your account — an area to protect, movements to avoid, a pregnancy or postpartum stage and its short note — are included so the coach keeps you safe. If you have a human coach on EchoFit, the note they wrote for the AI is included. The "explain this metric" buttons and the daily brief send the numbers they explain. When you log a workout by voice or text, Google receives the text to read the exercise, sets, reps and weight. If your human coach uses the coach portal's AI programme draft, Google receives your goal, schedule and equipment — never your name. Your training age, weak points, top exercises and logged volume are added only if you have allowed AI features, and your injuries, sleep, stress and health flags only if you have also allowed health answers. Google never receives your email or your audio. Google processes these requests under the Gemini API terms.
• Google Gemini — Perfect Sync (Elite). When you tap Perfect Sync, Google receives your active programme's name, its days and exercises, the unit you train in (kg or lbs), and a summary of your last 60 days of training for up to 12 of your most-trained exercises: for each week, your top set (weight × reps) and how many sets you did. It sends back suggested sets, reps and starting weights, which you review before anything changes. Google never receives your name, your email or your audio. Processed under the same Gemini API terms.
• OpenAI (Whisper). Transcribes Arabic voice logs. It receives the audio recording only — not your email or your name. OpenAI does not use API data to train its models, and for transcription it keeps neither the recording nor an abuse-monitoring log once it returns the text (OpenAI's API data controls).
• Other AI models. EchoFit does not currently send your coaching conversations to Anthropic (Claude) or to OpenAI's chat models (GPT). If that ever changes, this page will say so first.
• Our own staff tools. When our staff use our internal AI assistant, it receives their question and the admin page they are looking at, which can include account details. It runs on the same Gemini API.

We do not use your data to train AI models. The AI coach is a computer program, not a person or a clinician: it can be wrong, and it does not give medical advice.

6. Who can see your data

Friends. When you and another member are friends, each of you can see the other's display name, profile photo, activity feed, badges and full training log. Using someone's referral code makes you friends with them. You can remove or block a friend at any time.

Your coach. Before you connect, the app shows exactly what the coach will see and can change, and you accept it (the text and its version are recorded). In short: your logged training, your training profile and questionnaire answers, check-in answers, nutrition ticks if they set targets, and a summary of what the app shows you. Body weight and progress photos only if you turn them on for that coach — and each time they open them is recorded. Your AI coach conversations are never shared. Leaving the coach ends all of this at once, and shared photos are deleted within 7 days. For your data, the coach acts on our behalf and only on our instructions, under our Coach Agreement (sections 5.9 and 5.10): they may use it only to coach you; they may not let anyone else access it or hand it to another person or service without our written consent; they must keep it secure and tell us within 24 hours of a breach; they must help us answer your requests to access, correct or delete it; they must let us check that they comply; and they must stop using it and delete any copies when you leave them.

People you message see the messages you send them.

Links you share. A shared workout travels inside the link itself; anyone you give the link to can open it. Profile photos are stored at an address that works for anyone who has it.

Authorised EchoFit staff. A small number of staff can view account data through an internal admin tool that requires multi-factor sign-in, only to give you support, keep EchoFit secure, look into reports and fix problems. Every change made through it is recorded. The admin tool does not show your direct messages, your AI coach conversations or the recordings table of your voice logs. People with direct database access do so only when needed to run or repair the service, or when the law requires it.

Service providers. These companies process data for us. Each one gets only what it needs for its job:

When the law requires it. We disclose data if a valid legal order requires it, or to protect someone's safety, and only what is needed. Where we may, we tell you first.

If EchoFit changes hands. If EchoFit is merged, acquired or sold, your data may move to the new owner, who must honour this policy. We will tell you before that happens.

We never sell your personal data, "share" it for cross-context behavioural advertising, or give it to data brokers.

7. Where your data is stored

Your account data is stored in the United States by Supabase on Amazon Web Services. Most of our service providers are in the United States; Plausible is in the European Union. EchoFit is offered in the United States, Saudi Arabia, the United Arab Emirates and Kuwait; if you use it from somewhere else, this policy still applies, along with the rights your local law gives you.

If you live outside the United States, your data is transferred to the United States because that is where the service runs: the transfer is needed to provide what you ask for, and for health data it rests on your explicit consent. Our providers are bound by contracts that require them to protect your data and use it only for us. Where the law requires a specific transfer safeguard (such as the European Commission's standard contractual clauses), we rely on it.

8. Notifications and email

Push notifications. We only send push notifications after you allow them. What you can receive, by the categories you control in Settings → App → Notifications:

• Messages — a direct message from a friend or your coach. You can turn off message previews so the lock screen shows only who wrote.
• Friends & challenges — friend requests and acceptances, reactions to your workouts, challenge invitations and results.
• Your coach — feedback, check-in requests and replies, a program assigned to you.
• Weekly progress — your weekly summary and new personal records.
• Trial & membership — for example, that your trial ends in two days.
• Comeback nudges & announcements — a nudge after time away and occasional product announcements. Off unless you turn it on.

To deliver them we store a device token (iPhone) or a browser push subscription (web), linked to your account, with the app version and when the device was last seen. The token is removed when you sign out on that device, when the push service tells us it is no longer valid, and when you delete your account. Quiet hours (on by default, 22:00–07:00 in your time zone) deliver messages and coach notifications silently and hold other non-urgent notifications until they end, and we cap how many notifications of most kinds you can receive in a day.

How to turn them off: switch any category off in Settings → App → Notifications in EchoFit; or turn off notifications for EchoFit entirely in iOS Settings → Notifications → EchoFit, or in your browser's site settings on the web.

Reminders on your device. Training reminders and streak alerts are scheduled by the app on your own device, at the time and on the days you choose in Settings → App → Notifications. A reminder is skipped on a day you have already logged a workout, they slow down and then stop if you haven't opened the app for a while, and they are cancelled when you sign out. The rest timer can notify you when your rest ends while your phone is locked. These are created on your device; we do not send them.

Email. We send:

• Account emails — email confirmation, password resets, and the reminders of the date and amount before a web plan's first charge and before an annual plan renews. These are required to operate your account and are sent even if you unsubscribe from other email.
• Your weekly progress report (and a monthly report) built from your own training data.
• Trial and membership notices — for example, before your trial ends.
• Comeback emails when you haven't trained for a while — a short, limited series that stops after 90 days away — only if you said yes to “Product news and tips by email” (in Settings → Data → Privacy; it is off until you turn it on).

Your weekly progress report starts when you create an account; product news comes only if you turn it on in Settings → Data → Privacy (it is off until you do); and you can unsubscribe at any time. Every email other than account emails carries a one-click unsubscribe link (and the standard unsubscribe header your mail app shows), which takes effect immediately without signing in; you can also switch email off in Settings → App → Notifications. If an address bounces or a message is marked as spam, we stop emailing that address automatically. Emails are sent through Resend, which sends our email on our behalf (a processor, section 6).

Delivery records. For each notification and email we keep a short record: its type, the channel, and whether it was sent, held back and why (for example your settings or quiet hours), failed, delivered, opened, bounced or marked as spam. These records contain no message text. We use them to make delivery reliable and to respect your choices, keep them for 90 days, and then delete them. Your in-app notification inbox keeps your most recent notifications until you clear them.

When you delete your account we delete your device tokens and push subscriptions, your notification preferences, your notification inbox and your delivery records, along with the rest of your data.

9. How long we keep it

We keep your data while your account exists, so your training history is there when you come back. When you delete your account, we delete your data straight away, including your photos; copies our service providers hold for us expire under their own schedules. Some data is deleted sooner, on a fixed schedule:

Inactive accounts. We delete an account, and its data, after 24 months without a sign-in. Before we do, we email you 2 warnings, 30 days apart, and signing in once keeps your account. A person at EchoFit approves each deletion, so it can happen later than the date in the email — never earlier. Backup copies of your workouts are kept 30 more days, then deleted. This starts on November 18, 2026; until then, an inactive account is kept until you delete it.

Backups. Our database host keeps encrypted backups for up to 7 days. Deleted data disappears from backups when they expire.

One thing kept after deletion. If you started a free trial of a paid plan or held a subscription, we keep a one-way hash of your email address (not the address itself, and nothing else about you) so the same address cannot start a repeat free trial. It cannot be read back into your email and is never used to contact you.

Records the law requires. Stripe and Apple keep records of payments as tax and accounting law requires, under their own policies. If you are a coach, payment records are kept as tax law requires.

On another member's device. When you delete your account, the people you messaged keep their side of the conversation, but your name and message previews are removed from their notifications.

10. Security

• Everything travels over encrypted connections (HTTPS/TLS), and our database host encrypts stored data.
• Database access rules (row-level security) let each account reach only its own data and what others have chosen to share with it.
• Staff access to the admin tool requires multi-factor sign-in, and changes made through it are recorded.
• No security is perfect. If a breach affects your data, we will tell you and the authorities as the law requires.

Found a vulnerability? Please tell us at security@echofit.app — see how to report it.

11. Your rights and choices

In the app, at any time:

• Export your data: Settings → Data → Export (CSV, or everything as JSON). Free on every plan.
• Correct your profile and training in the app, or ask us.
• Delete your account and its data: Settings → Account → Delete Account.
• Withdraw consent for AI features or health data: Settings → Data → Privacy.
• Turn off notifications and email: Settings → App → Notifications, or the unsubscribe link.

By email at privacy@echofit.app, you can ask us to give you a copy of your data, correct or delete it, move it to another service, restrict or object to how we use it, or tell you who received it. We answer within 30 days. To protect you, we may ask you to confirm the request from your account's email address. You can use an authorised agent where your law allows it. We will never treat you differently for using your rights.

If we say no. We will explain why. You can appeal by replying to our answer with "Appeal"; we will review it and reply in writing. If you are still not satisfied, you can complain to the data protection authority where you live — for example the Saudi Data and AI Authority (SDAIA) in Saudi Arabia, the UAE Data Office in the United Arab Emirates, or your state's attorney general in the United States.

California residents have the rights to know, delete and correct personal information, and to limit the use of sensitive personal information. We use sensitive personal information only to provide the service you ask for, and we do not sell or share personal information, so there is nothing to opt out of; we treat a Global Privacy Control signal as a confirmation of that choice. This policy is our notice at collection. Washington, Nevada and Connecticut residents: see our Consumer Health Data Privacy Policy.

12. Age limit and children

You must be at least 16 to use EchoFit (18 in Saudi Arabia, the United Arab Emirates, Kuwait, Qatar, Oman and Bahrain). We decide which age applies once, by where your phone is when you answer. We ask your age in whole years when you create your account, before any sign-in button works; it also fills in the age in your training profile (it sets your starting weights), where you can change it. In the iPhone app on iOS 26 or later, when you create your account we also ask Apple to share the age range you (or your parent or guardian) gave Apple — after you give your age. If Apple's range is under the minimum age, that answer stands; if your account was created without the question (for example by signing in with Google or Apple) and Apple's range settles it, we don't ask. On iOS 26.2 or later Apple also tells the app whether app-store age laws apply to you (today in Texas, Utah and Louisiana); where the law applies, you must be at least 18, by Apple's range or, if Apple doesn't share one, by the age you gave. On older iPhones, on the web and on Android the app cannot tell which US state you are in, so the ages above apply there. For the age check we keep only whether you meet the minimum age, whether that answer came from Apple or from you, and — if the answer was under the minimum age — a review mark for our owner (when it was made, the minimum age that applied and whether the answer was under 13) (and, on your device until your account is created, whether you are 18 or over) — never a birth year or the age range; the age you give stays in your profile, where you can change it. The answer belongs to your account, not your device. Every account that has not answered — including accounts created before we added the question — is asked each time the app opens until it does. If the answer is under 13, no account is created, or one created moments before is deleted. If it is 13 or over but under the minimum age, the account is created and marked for our owner's review: you keep using EchoFit meanwhile and nothing is deleted. Our owner then keeps the account open or closes it; a closed account can still download its data or delete itself, and nothing more is collected. An older account whose member answers under 13 is marked for the same review. The device keeps only a note that it said no, for 24 hours, so the question can't simply be tried again with another answer. The app enforces this today, and our servers will too from a date we will publish here: they will refuse to save member data for an account closed this way, and for an account created after that date that has not answered yet. Progress photos and the AI coach are for members aged 18 or older. If we learn that a child under 13 has given us personal data, we delete it. If you think that has happened, write to privacy@echofit.app.

13. Changes to this policy

When we change this policy we publish the new version here with a new date. If a change is material — for example a new kind of data, a new purpose or a new kind of recipient — we tell you in the app (and by email if you have an account) before it takes effect, and where the law requires your consent, we ask for it. Earlier versions are available on request.

14. Contact us

Privacy questions and requests: privacy@echofit.app
Post: Alra Intelligence LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA
Help with the app: support@echofit.app · echofit.app/support — we reply within 2 business days; privacy requests within 30 days.