Privacy Policy

Your privacy is important to us. This policy explains how Qwota collects, uses, and protects your information.

Last updated: June 2026

1. Information We Collect

Personal Information

When you create an account or use Qwota, we may collect:

  • Name and email address (via Sign in with Apple)
  • Profile information you provide (age, height, weight, fitness goals)
  • Health and fitness data you log (workouts, meals, weight entries)

You do not need to create an account to use Qwota. By default you use the app as an anonymous guest, and we do not collect your name or email. Signing in with Apple is optional — only if you choose it do we receive your name and email.

Health Data

With your explicit permission, Qwota may access the following data from Apple HealthKit:

  • Weight and body composition measurements
  • Workout and exercise data
  • Step count and activity data
  • Sleep analysis data
  • Heart rate data

HealthKit access is read-only: Qwota reads this data only when you explicitly enable the feature, and never writes anything back to Apple Health. HealthKit data is never sold or shared with third parties for advertising purposes.

Automatically Collected Information

We do not use any advertising or behavioral-analytics SDKs, and we do not track you across other apps or websites. The only information collected automatically is:

  • Anonymous crash reports and error logs (via Firebase Crashlytics), used only to find and fix bugs

2. How We Use Your Information

We use the information we collect to:

  • Provide and personalize the Qwota app experience
  • Calculate your nutrition targets and calorie needs
  • Generate AI-powered coaching insights and recommendations
  • Sync your data across your devices via iCloud
  • Improve our app and develop new features
  • Send important service updates and notifications
  • Respond to your support requests

3. Data Storage and Security

iCloud Sync

Your fitness and nutrition data is stored locally on your device and synced securely via Apple's iCloud (CloudKit). This means:

  • Your data is encrypted in transit and at rest
  • Only you can access your data through your Apple ID
  • Data syncs automatically across your Apple devices

Cloud Services (Firebase & AI)

Your detailed logs stay on your device and sync through your private iCloud (above). Some features additionally use Google Firebase and an AI provider:

  • Authentication (Firebase Auth): creates an anonymous identifier so your data can sync — no email required.
  • AI Coach & food analysis: when you use these, a summary of your recent training and nutrition is sent to our backend (Firebase Functions) and to our AI provider, Google Gemini, to generate guidance, then the result is returned to you. We send only what the feature needs.
  • Cloud database (Firebase Firestore): stores that coaching context so the AI can use it.
  • Push notifications (Firebase Cloud Messaging): used only to deliver reminders and updates you've turned on.

Firebase and Google process this data as our service providers under industry-standard security and data-protection terms.

Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (TLS/SSL)
  • Secure authentication via Sign in with Apple
  • Regular security reviews and updates
  • Limited employee access to user data

4. Third-Party Services

Qwota integrates with the following third-party services:

Food Databases

  • USDA FoodData Central: We query this database to provide nutrition information. Your search queries are sent to their servers.
  • Open Food Facts: Used for barcode lookups. Barcode data is sent to retrieve product information.

Exercise Library

  • Wger API: Provides exercise information and workout data. Search queries are sent to retrieve exercise details.

Subscriptions (RevenueCat)

We use RevenueCat to manage and validate subscriptions. It receives your App Store purchase/receipt information and an anonymous app-user identifier so we can unlock the right features. It does not receive your name, email, or payment-card details.

5. In-App Purchases and Payments

Qwota offers optional subscription plans (Monthly Pro, Yearly Pro) and a one-time purchase (Lifetime Pro) to unlock premium features.

  • Payment Processing: All payments are processed securely by Apple through the App Store. We do not collect, store, or have access to your payment card numbers, bank account details, or other financial information.
  • Purchase History: We receive confirmation of your purchase status (subscription type and validity) to enable premium features. This validation is handled through RevenueCat (see Third-Party Services); we never receive your payment-card or bank details.
  • Subscription Management: You can manage or cancel your subscriptions at any time through your Apple ID settings. Refund requests are handled by Apple.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. You can delete your data at any time:

  • Delete individual entries within the app
  • Delete your entire account through Settings
  • Contact us to request complete data deletion

When you delete your account, all your data is permanently removed from our servers within 30 days.

7. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate data
  • Deletion: Request deletion of your data
  • Portability: Export your data in a standard format
  • Objection: Object to certain processing of your data

You can exercise the most important rights yourself, anytime, right in the app: Settings → Reset All Data wipes your data, and Settings → Delete Account removes your account and data (completed within 30 days). For anything else, contact us below.

Legal Basis (EU / UK / GDPR)

If you are in the EU or UK, we process your data on these bases: to provide the app and features you ask for (performance of a contract); with your consent for optional features such as Apple Health access and AI coaching, which you can withdraw at any time; and our legitimate interest in keeping the app reliable (for example, anonymous crash diagnostics). Because you can use Qwota anonymously, the personal data tied to you is minimal by design.

8. Children's Privacy

Qwota is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

  • Posting the new policy on this page
  • Updating the "Last updated" date
  • Sending an in-app notification for material changes

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@qwota.app