Privacy Policy

Last updated: June 5, 2026

IndexFit ("IndexFit," "we," "us," or "our") builds a fitness app that turns your strength training and running into a fantasy sport. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using IndexFit, you agree to the practices described here.

1. Information we collect

We collect the following categories of information:

Account information

When you sign in with Sign in with Apple, we receive a unique identifier and, if you choose to share it, your name and email address (or Apple's private relay email). You may also add a profile name, bio, and avatar.

Fitness & activity data

The workouts, exercises, sets, reps, weights, runs, distances, splits, and personal records you log, plus health metrics you choose to sync from Apple Health (see the next section).

Social & competitive data

League memberships, group memberships, messages you send in group or direct chats, badges, fantasy points, and leaderboard standings.

Imported content

If you use the social-import feature, the links or content you submit (for example a TikTok or Instagram workout) so that we can convert it into a structured routine.

Subscription & purchase data

Your subscription status and entitlements. Payments are processed by Apple; we do not receive or store your full payment card details.

Device & usage data

Basic technical information such as app version, device type, operating system, crash and diagnostic logs, and how you interact with features, used to keep the app working and to improve it.

2. Apple Health & HealthKit

IndexFit can read health and fitness data from Apple Health (HealthKit) only after you grant explicit permission. Depending on what you authorize, this may include workouts, heart rate, active and resting energy, steps, distance, sleep, and resting heart rate.

• We use HealthKit data only to calculate your scores and fantasy points, display your stats, and power features you have chosen to use.
• We never use HealthKit data for advertising or marketing, and we never sell it.
• We do not share HealthKit data with third parties except as needed to provide the app's cloud sync and scoring functionality, and never for advertising.
• You can revoke IndexFit's access to Apple Health at any time in the iOS Settings → Privacy & Security → Health menu.

Our use and transfer of information received from HealthKit adhere to the Apple Developer Program License Agreement and App Store Review Guidelines, including the HealthKit requirements.

3. How we use information

• To provide core features: logging workouts, scoring, fantasy leagues, groups, and messaging.
• To calculate fantasy points, detect personal records, and maintain leaderboards.
• To sync your data across your devices and back it up securely.
• To operate AI features you choose to use (see below).
• To manage subscriptions, free trials, and feature access.
• To send service-related communications and, with your permission, push notifications.
• To maintain security, prevent abuse, debug issues, and improve the app.

4. AI features

IndexFit offers optional AI features, including an AI coach/assistant, AI routine building, and AI-powered import of workouts from social posts. When you use these features, the relevant prompt and workout context are sent to our AI processing providers to generate a response. We do not use the content of your AI conversations to train third-party models, and AI requests are not used for advertising. If you do not use these features, no data is sent to AI providers.

5. How information is shared

We share information only in the following ways:

• With other users: Your profile, badges, fantasy points, and standings are visible to members of leagues and groups you join. Messages you send are visible to their recipients.
• With service providers: Trusted vendors who process data on our behalf (see below).
• For legal reasons: If required by law, regulation, legal process, or to protect the rights, safety, and property of IndexFit or others.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

We do not sell your personal information.

6. Service providers

We rely on the following categories of providers to operate IndexFit:

• Cloud database & authentication — to store your account and app data and manage sign-in.
• Subscription management — to manage in-app purchases and entitlements (payments are handled by Apple).
• AI processing — to power the optional AI coach, routine builder, and social import.
• Email & notifications — to deliver transactional emails and push notifications.

These providers are bound by contractual obligations to protect your data and use it only to provide their services to us.

7. Data retention

We keep your information for as long as your account is active or as needed to provide the app. You can delete your account at any time from within the app or by contacting us, after which we will delete or anonymize your personal data within a reasonable period, except where we must retain it to comply with legal obligations or resolve disputes.

8. Your rights & choices

• Access & portability: Request a copy of your personal data.
• Correction: Update your profile information in the app.
• Deletion: Delete your account and associated data in-app or by request.
• Health access: Revoke Apple Health permissions in iOS Settings at any time.
• Notifications: Disable push notifications in iOS Settings.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any right, contact us at contact@indexfit.app.

9. Security

We use industry-standard safeguards, including encryption in transit, access controls, and authenticated APIs, to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children's privacy

IndexFit is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us so we can remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app. Your continued use of IndexFit after changes take effect constitutes acceptance.

12. Contact us

Questions about this Privacy Policy or your data? Reach us at contact@indexfit.app or visit our Support page.