Syntra AI Privacy Policy

1. SERVICE PROVIDER

This Privacy Policy applies to the Syntra: AI Personal Trainer mobile application and related services operated by Ozcan Ozden (“Service Provider”, “we”, “us”, or “our”).

It explains what information we collect, how we collect and use it, who receives it, and your choices.

Privacy contact: ozden9865@gmail.com

2. INFORMATION WE COLLECT AND ITS PURPOSE

Account and profile information

When you register, sign in or complete your profile, you may provide your account identifier, name, email address, profile photo, age, height, weight, gender, fitness goals and activity level.

We use this information to operate your account and provide personalized fitness and nutrition estimates.

Fitness and wellness records

Information you enter or generate may include workouts, meals, water entries, fasting sessions, notes, saved plans and progress records.

We use these records to provide the requested features, display your history and synchronize your account.

Photos and camera input

You may select or capture images for meal analysis, profile photos or chat sharing.

Camera-based exercise posture analysis is performed on your device. Exercise camera frames are not sent to Google Gemini.

Meal-photo analysis sends the selected image to Google Gemini only after you grant the separate AI data-sharing permission explained below.

Location and motion

With the relevant device permissions, outdoor workout features use location, route, distance, speed and motion or step information to track your workout.

Location may continue to be used in the background during an active outdoor workout. Saved workout information may be synchronized to your account.

Location routes are not automatically included in AI requests.

Community content

Messages and images you submit to global or direct chats are processed to deliver them to the relevant participants.

Reports and blocking information are used for safety and moderation.

Subscriptions

Apple processes purchases and payments. The Application processes product identifiers, subscription status and expiration information to manage access.

We do not receive your payment card details.

Technical information

Our services and integrated SDKs may process IP addresses, device or app identifiers, operating system information, usage events, timestamps, diagnostics and crash reports.

We use this information for service operation, analytics, troubleshooting and security. Non-essential tracking that requires consent is used only after obtaining that consent.

3. THIRD-PARTY AI: GOOGLE GEMINI

Recipient and purpose

Google, including Google LLC and the relevant Google entity identified in the Gemini API terms, provides the third-party Gemini AI service.

Requests normally pass through our Supabase backend to Google Gemini. Depending on the Application configuration, the Google SDK may send requests directly to Google. The same AI sharing permission applies to both routes.

We use Gemini to generate fitness and nutrition responses, personal plans and estimated nutrition information.

AI assistant and planning data

The information sent includes:

• The message you submit.
• The fitness goal and muscle groups you select for planning.
• Additional details you enter.
• The response language.
• Instructions necessary to generate the AI response.

Personal or health information you include in your message is part of the content sent to Google.

Meal-photo analysis data

The information sent includes:

• A compressed JPEG copy of the meal photo you select.
• Nutrition analysis instructions.
• The response language.

People or personal information visible in the selected photo are included in the image sent to Google.

Information not automatically included

Account name, email address, profile measurements, location routes and payment details are not automatically added to these AI requests.

However, information you type into a message or include in a photo becomes part of the submitted content. Avoid including unnecessary sensitive information.

Separate, explicit permission

Before the first AI transfer, the Application identifies the recipient, explains both chat/planning and meal-photo sharing, and asks for your explicit permission.

Accepting general terms or this Privacy Policy alone does not authorize AI sharing.

Declining or dismissing the permission screen sends no AI request.

If you approve, your decision is saved for your signed-in account and covers subsequent use of the disclosed AI features. The Application does not ask again for every request.

You can withdraw permission under:

Profile → AI Data Permission → Revoke Permission

Withdrawal stops future AI sharing but does not undo processing that occurred before withdrawal.

A material change to the recipient, purpose or scope of the disclosure requires renewed permission.

AI sharing is optional. Declining it does not prevent use of other features that do not require the third-party AI service.

AI responses and nutrition results are estimates and general information, not medical advice.

4. THIRD-PARTY SERVICES AND DATA PROTECTION

We use the following services:

• Supabase: authentication, account storage, synchronization and backend services.
• Google Gemini: the AI processing explained above.
• Google Analytics for Firebase: analytics.
• Firebase Crashlytics: diagnostics and crash reporting.
• Apple: purchases and applicable platform services.

We require service providers receiving personal data to protect it at least to the same or an equivalent standard as this Privacy Policy, through applicable contractual terms and technical and organizational safeguards.

Personal data must not be transferred where the applicable provider terms do not meet that requirement.

Google’s treatment of Gemini inputs depends on the applicable service terms.

Under paid Gemini API terms, Google does not use prompts or responses to improve its models or products. Google may retain them for a limited period for abuse prevention and legal obligations.

Unpaid Gemini terms permit broader use of submitted content and warn against submitting sensitive, confidential or personal information.

We do not authorize sending personal or sensitive information under terms that prohibit such submissions. User permission does not waive these provider restrictions.

Provider privacy and processing information:

Google Gemini API terms:
https://ai.google.dev/gemini-api/terms

Google Privacy Policy:
https://policies.google.com/privacy

Supabase Privacy Policy:
https://supabase.com/privacy

Firebase privacy information:
https://firebase.google.com/support/privacy

Apple Privacy Policy:
https://www.apple.com/legal/privacy/

We do not sell personal data.

Information may also be disclosed when required by law or when necessary to protect rights and safety, investigate fraud or respond to lawful requests.

Chat content is shared with its intended participants as part of the feature you choose.

5. SECURITY AND INTERNATIONAL TRANSFERS

We use encrypted network connections and appropriate access controls and safeguards to protect information.

No method of transmission or storage is completely secure.

Service providers may process information outside your country, including outside the European Economic Area.

Where required, we use applicable safeguards such as adequacy decisions or Standard Contractual Clauses.

We notify affected users of data breaches where legally required.

6. RETENTION AND DELETION

User-provided account data is retained while you use the Application and for up to 12 months thereafter, unless you request deletion or a longer period is required by law.

Automatically collected information is retained for up to 24 months unless a longer legal retention period applies.

Truly anonymized information may be retained without a fixed period.

Provider-held technical or AI records are subject to the applicable provider terms and retention requirements described above.

Deleting your account or withdrawing permission does not guarantee immediate deletion of all provider logs or backups.

You may delete your account through the Application or request deletion at:

ozcannozdenn@gmail.com

After verifying your request, we delete information under our control except where retention is legally required or necessary for a permitted purpose.

Uninstalling stops further collection from the Application on that device. It does not itself delete your account or previously transmitted information.

7. YOUR RIGHTS AND CHOICES

You may request access, correction or deletion and exercise other rights available under applicable law.

Device settings let you control camera, photo, location, motion and notification permissions.

Separate AI sharing permission can be withdrawn in Profile settings.

California residents may exercise applicable rights to know, access, correct or delete personal information and opt out of any sale or sharing covered by California law, without discrimination.

Where processing relies on consent, withdrawal does not affect processing that occurred before withdrawal.

Contact ozcannozdenn@gmail.com to exercise your rights. We respond within applicable legal time limits.

8. CHILDREN

The Application is not intended for children under 16, or a higher minimum age required by applicable law or a feature’s provider terms.

We do not knowingly collect children’s personal information in violation of those requirements.

If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

9. CHANGES TO THIS POLICY

We may update this Privacy Policy.

Material changes are communicated through the Application or the published policy with an updated effective date.

Where required, we obtain renewed consent before applying a change.

Previous versions are available on request.

10. CONTACT

Service Provider: Ozcan Ozden
Application: Syntra: AI Personal Trainer
Email: ozden9865@gmail.com