Privacy Policy

Data Controller

The data controller responsible for your personal data is Quantum Digital FZ-LLC, registered at Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, UAE.

Legal Basis for Processing

We process your personal data based on: (a) your consent when you create an account; (b) the necessity for the performance of a contract to provide our services; and (c) our legitimate interests in improving and securing the platform.

Data We Collect

We collect the following categories of personal data when you use our platform:

• Account information: email address, display name, and authentication credentials
• Profile data: age, gender, height, weight, body measurements, fitness goals, and experience level
• Activity data: workout logs, food logs, water intake, step counts, and weight history
• Photos: food images submitted for AI analysis (processed in real-time and not stored permanently on our servers)
• Technical data: browser type, device information, IP address, and usage analytics

How We Use Your Data

We process your personal data for the following purposes:

• To provide and personalize our fitness and nutrition tracking services
• To generate AI-powered workout plans and food analysis tailored to your profile
• To improve our platform, develop new features, and fix issues
• To communicate with you about service updates and changes
• To ensure platform security and prevent fraud

Data Storage and Security

Your data is stored securely using Supabase infrastructure with encryption at rest and in transit. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or destruction.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. When you delete your account, we will delete or anonymize your personal data within 30 days, unless retention is required by law.

Third-Party Services

We use the following third-party services to operate our platform:

• Supabase — for database hosting, authentication, and file storage
• Anthropic (Claude AI) — for generating workout plans and analyzing food photos. Data sent to this service is processed according to their privacy policy and is not used to train AI models
• OpenFoodFacts — for barcode-based nutrition data lookup (no personal data is sent)

Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share data only when required by law or to protect our legal rights.

International Data Transfers

Your data may be processed in countries outside your country of residence, including the United States (where our infrastructure providers operate). We ensure appropriate safeguards are in place for such transfers in compliance with GDPR.

Your Rights (GDPR)

Under the GDPR and other applicable regulations, you have the following rights:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate personal data
• Right to erasure — request deletion of your personal data ("right to be forgotten")
• Right to data portability — receive your data in a structured, commonly used format
• Right to restrict processing — request limitation of processing in certain circumstances
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent at any time without affecting prior processing

To exercise any of these rights, please contact us at legal@quantum-digital.tech. We will respond within 30 days.

Cookies

We use essential cookies for authentication and session management. These cookies are strictly necessary for the platform to function and cannot be disabled. We do not use advertising, tracking, or analytics cookies.

Children's Privacy

FlexiFit VIP is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

Automated Decision-Making

Our platform uses AI to generate workout plans and analyze food photos. These processes are tools to assist you and do not make decisions that produce legal or similarly significant effects on you. You can always disregard AI suggestions and consult a professional.

Security Breach Notification

In the event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay and within 72 hours of becoming aware of the breach.

Data Protection Contact

For any data protection inquiries or to exercise your rights, you may contact our data protection team at legal@quantum-digital.tech.

Consent Management

You may withdraw your consent for data processing at any time by contacting us or deleting your account. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Marketing Communications

We do not send marketing emails or promotional communications. All communications from FlexiFit VIP are service-related notifications only.

Data Processing Activities

We process your data through the following activities: user authentication and session management, AI-powered workout plan generation using your fitness profile, AI-powered food photo analysis for nutritional estimation, barcode scanning for nutrition lookup, body measurement and weight tracking, water and step tracking, and aggregated usage analytics to improve our services.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a new effective date. Your continued use of the platform after changes constitutes acceptance of the revised policy.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.