Privacy Policy

1. Introduction

Ai1Health ("we," "our," or "us") is committed to protecting your privacy and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered health and fitness application (the "Service"). We follow strict security protocols to protect your health information.

2. Information We Collect

3. How We Use Your Information

We use your information to:

• Provide AI Coaching: Generate personalized meal plans, workout programs, and health recommendations
• Track Progress: Monitor your fitness journey and provide insights
• Improve Service: Enhance our AI algorithms and user experience
• Safety & Support: Ensure appropriate use and provide customer support
• Communications: Send important updates, security alerts, and feature announcements
• Compliance: Meet legal and regulatory requirements

4. Health Data Safeguards

We implement the following safeguards to protect your health information:

• Encryption: All PHI is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict authentication and role-based access controls
• Audit Logs: Comprehensive logging of all PHI access and modifications
• Vendor Agreements: Third-party services that process your data are bound by contractual data-protection terms
• Minimum Necessary: We only access the minimum PHI necessary to provide services
• Breach Notification: We will notify you within 60 days of any data breach affecting your PHI

5. Information Sharing

We do NOT sell your health information. We only share information in these limited circumstances:

• With Your Consent: When you explicitly authorize sharing (e.g., with accountability partners, or when you accept AI data sharing)
• Service Providers: Partners who help operate our service (AI providers, hosting, payment processing) — see Section 5A below for details
• Legal Requirements: When required by law, court order, or to protect safety
• Business Transfers: In the event of a merger or acquisition (with continued privacy protections)

5A. Third-Party AI Services

When you accept AI data sharing (via the in-app consent prompt), the following data is sent to third-party AI services to power AI features:

5B. Opt-Out of AI Data Sharing

You can decline AI data sharing at any time from the in-app consent banner (shown on first use of an AI feature) or from Profile → Privacy. Declining disables all AI-powered features including:

• Food photo scanning and nutrition label scanning
• AI Health Assistant (conversational coaching)
• Proactive health insights and wellbeing analysis
• AI-generated meal and workout plan adaptations
• Guided meditation session generation (text-to-speech)
• Predictive health outcomes and progress report AI summaries

Declining does not affect your ability to use other app features such as manual food logging, workout tracking, water logging, goal setting, community features, or wearable data sync. Your current AI consent status is stored on our servers as part of your account record.

6. Your Privacy Rights (including AI Opt-Out)

You have the following rights regarding your data:

• Access: View all your personal and health data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to legal requirements)
• Export: Download your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to certain processing activities
• Revoke Consent: Withdraw consent for data processing

To exercise these rights, visit your Privacy Dashboard or contact us at privacy@allin1health.app

7. Data Retention

We retain your health data for as long as your account is active. After account deletion, we retain data for 90 days (for recovery purposes) before permanent deletion. Some data may be retained longer if required by law or for legitimate business purposes (e.g., audit logs for 7 years).

8. Security Measures

We implement industry-leading security measures:

• Data encrypted in transit (HTTPS/TLS) and stored securely on our hosting platform
• Multi-factor authentication options
• Regular security audits and penetration testing
• Intrusion detection and prevention systems
• Secure data centers with physical access controls
• Employee security training and background checks
• Incident response procedures

9. International Users (GDPR Compliance)

If you're in the European Economic Area (EEA), you have additional rights under GDPR. We process your data based on your consent, contractual necessity, or legitimate interests. You can lodge a complaint with your local data protection authority if you believe we've violated your rights.

10. California Privacy Rights (CCPA)

California residents have additional rights including the right to know what information we collect, the right to delete, and the right to opt-out of sale (we don't sell data). Contact us to exercise these rights.

11. Children's Privacy

Our Service is not intended for users under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.

12. Cookies and Tracking

We use essential cookies for authentication and security. Optional cookies may be used for analytics (with your consent). You can manage cookie preferences in your browser or app settings.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us: