Privacy Policy

RX Fitness Lab is a fitness platform operated by RX Fitness Lab, based in Morocco. We provide a mobile fitness application and a website covering training programs, nutrition tracking, and supplements.

For any question about this policy, contact us at support@rxfitnesslab.com.

When you create an account and use our services, we collect:

• —Email address — used to create and secure your account.
• —Full name — displayed in your profile.
• —Fitness data — workouts, weight, body measurements, goals, training history, and meal logs you enter yourself.
• —Food photos — images you capture in the app for calorie estimation (see Camera section below).
• —Subscription and payment information — plan type, billing status, and payment provider references (we do not store full card numbers).

The app requests camera access solely for the food photo calorie estimation feature. When you capture a photo, it is sent to the Claude AI API (Anthropic) to estimate calories and macros. Photos are processed in real time and immediately discarded after the response is returned. We do not store your food photos on our servers.

You can revoke camera access at any time in your device settings.

On Android, with your explicit permission, the app reads step count and heart rate data from Android Health Connect. This data is used only to display your daily step count on the Home dashboard and your step and heart rate history and trends on the Progress screen.

We do not write or modify any data in Health Connect, and we do not read any other Health Connect data types beyond steps and heart rate.

You can revoke Health Connect access at any time from Health Connect's app permissions settings on your device.

We rely on a small number of infrastructure providers to run the service:

• —Supabase — hosts our database and handles authentication. Data is encrypted at rest and in transit.
• —Claude AI API (Anthropic) — used for real-time food photo calorie estimation. Photos are not retained.
• —Expo — app infrastructure, over-the-air updates, and push notifications.

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

You have the right to:

• —Access the personal data we hold about you.
• —Correct any inaccurate or outdated data.
• —Delete your account directly in the app (Settings → Delete account). This immediately deactivates your account and signs you out — it can no longer be accessed or logged into. If you'd like your underlying data fully erased rather than deactivated, email us and we'll process that request.

To exercise any of these rights, email us at support@rxfitnesslab.com.

We keep your account data for as long as your account remains active. Deleting your account in the app deactivates it immediately and blocks any further access, though some data may be retained afterward for record-keeping purposes. Email us if you'd like that data permanently erased instead.

We may update this policy from time to time. The effective date at the top of this page will always reflect the latest version.