Privacy Policy

Your privacy is important to us. This policy explains how Qwota collects, uses, and protects your information.

Last updated: December 2024

1. Information We Collect

Personal Information

When you create an account or use Qwota, we may collect:

  • Name and email address (via Sign in with Apple)
  • Profile information you provide (age, height, weight, fitness goals)
  • Health and fitness data you log (workouts, meals, weight entries)

Health Data

With your explicit permission, Qwota may access the following data from Apple HealthKit:

  • Weight and body composition measurements
  • Workout and exercise data
  • Step count and activity data
  • Sleep analysis data
  • Heart rate data

HealthKit data is only accessed when you explicitly enable this feature. This data is never sold or shared with third parties for advertising purposes.

Automatically Collected Information

We automatically collect certain information when you use the app:

  • Device information (model, operating system version)
  • App usage analytics (features used, session duration)
  • Crash reports and error logs

2. How We Use Your Information

We use the information we collect to:

  • Provide and personalize the Qwota app experience
  • Calculate your nutrition targets and calorie needs
  • Generate AI-powered coaching insights and recommendations
  • Sync your data across your devices via iCloud
  • Improve our app and develop new features
  • Send important service updates and notifications
  • Respond to your support requests

3. Data Storage and Security

iCloud Sync

Your fitness and nutrition data is stored locally on your device and synced securely via Apple's iCloud (CloudKit). This means:

  • Your data is encrypted in transit and at rest
  • Only you can access your data through your Apple ID
  • Data syncs automatically across your Apple devices

Firebase Services

For AI Coach features, we use Firebase for authentication and to process AI requests. Firebase services comply with industry-standard security practices and GDPR requirements.

Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (TLS/SSL)
  • Secure authentication via Sign in with Apple
  • Regular security reviews and updates
  • Limited employee access to user data

4. Third-Party Services

Qwota integrates with the following third-party services:

Food Databases

  • USDA FoodData Central: We query this database to provide nutrition information. Your search queries are sent to their servers.
  • Open Food Facts: Used for barcode lookups. Barcode data is sent to retrieve product information.

Exercise Library

  • Wger API: Provides exercise information and workout data. Search queries are sent to retrieve exercise details.

Analytics

We may use analytics services to understand app usage and improve our product. These services collect anonymized, aggregated data and do not track individual users across apps or websites.

5. In-App Purchases and Payments

Qwota offers optional subscription plans (Monthly Pro, Yearly Pro) and a one-time purchase (Lifetime Pro) to unlock premium features.

  • Payment Processing: All payments are processed securely by Apple through the App Store. We do not collect, store, or have access to your payment card numbers, bank account details, or other financial information.
  • Purchase History: We receive confirmation of your purchase status from Apple to verify your subscription and enable premium features. This includes the type of subscription and its validity period.
  • Subscription Management: You can manage or cancel your subscriptions at any time through your Apple ID settings. Refund requests are handled by Apple.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. You can delete your data at any time:

  • Delete individual entries within the app
  • Delete your entire account through Settings
  • Contact us to request complete data deletion

When you delete your account, all your data is permanently removed from our servers within 30 days.

7. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate data
  • Deletion: Request deletion of your data
  • Portability: Export your data in a standard format
  • Objection: Object to certain processing of your data

To exercise these rights, please contact us using the information below.

8. Children's Privacy

Qwota is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

  • Posting the new policy on this page
  • Updating the "Last updated" date
  • Sending an in-app notification for material changes

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@qwota.app