Privacy Policy

1. Who we are

MomFit is made by MomPlan, a sole proprietorship (eenmanszaak) registered with the Dutch Chamber of Commerce (KvK) under number 99587513, in the Netherlands. MomPlan is the controller for the personal data described here. You can reach us at support@momfit.life. Our registered address is available from the Chamber of Commerce register, or from us by email.

This policy covers the MomFit app for iPhone, the MomFit app for Apple Watch, its widgets and this website (momfit.life). MomPlan, our family planner, has its own privacy policy at https://momplan.life/privacy.

2. The short version

• We use your data to run MomFit for you. We never sell it and never use it for advertising.
• MomFit has no advertising or analytics trackers, and does not track you across other apps or websites.
• Your progress photos are stored in the EU, can only be opened by you, are never shown to friends and are never sent to an AI.
• Some features send information to AI providers to work: the coach, calorie estimates from a meal photo and recipe import. Section 6 says exactly what goes where.
• Apple Health, location, friends and the MomPlan link are all optional.
• You can delete your account and your MomFit data yourself in the app.

3. What we collect

What we have depends on what you use. We collect:

• Account: your name, email address and how you sign in (Apple, Google or email and password). Passwords are handled by Firebase Authentication and never seen by us. If you use Sign in with Apple, you can choose to share a private relay address.
• About you and your goals: your answers in the app, such as your goal, birth year, height, weight, goal weight, sex, the sports you do and your notes about them, your level, the days and times you can train, your pace, your step goal, a weekly weight goal and a race goal.
• Body and health: your weight over time, body measurements (such as body fat percentage, muscle mass, waist, hips, chest, arm and thigh), and the Apple Health data you allow us to read (section 4).
• Food: what you eat and drink (foods, portions, calories, macros, fibre, sugar, salt and barcodes), your eating style, diet, the foods you avoid, like or dislike, your eating window, your meal plans, food plans, recipes and shopping lists.
• Training and habits: your training plans, the trainings you do and how they felt, your own exercises, your habits and streaks, and meditation sessions.
• Journal and photos: journal entries (date, how you feel, weight, a note) and the photos you add: progress photos, journal photos, recipe photos and photos of your own exercises.
• Routes: the route of a walk, run or ride while you record it (section 8).
• Coach: your messages to the coach and the notes the coach saves about you (section 6).
• Friends and community: your friends, invite code, what you share with them, cheers and nudges, challenges, groups, plans you share, and reports you make (section 7).
• Subscription: whether you have MomFit Plus, which plan, when it renews or ends, and whether it was refunded. Apple handles the payment; we never see your card details.
• Device: a push notification token, your app language, app version and platform.
• Usage counts: how many coach messages, meal photos, recipe imports and recipe pictures you have used, so free and Plus limits work. These counts hold no content.
• Support: the emails you send us.

We get this data from you, when you fill it in, add it or record it in the app; from Apple Health and your location, only if you allow it; and from Apple and RevenueCat for your subscription.

Some data never leaves your phone: your chat history with the coach, your food favourites and recents, your own food items, coach reminders, Apple Health workouts and heart rate, meditation history and downloads.

4. Apple Health

Connecting Apple Health is optional. If you allow it, MomFit can read: steps, active energy, exercise minutes, flights climbed, weight, height, body fat percentage, waist, water, walking, running, cycling and swimming distance, sleep, mindful minutes, date of birth, workouts, workout routes, heart rate and resting heart rate. You choose which of these to allow in the Health permission screen.

MomFit can write to Apple Health: workouts, walks, runs and rides, active energy, distances, mindful minutes, weight, water, body fat percentage and waist. The Apple Watch app also saves the route of a workout you record on the watch.

Most Health data is only used on your phone. These parts leave it: your weight (stored in your account), your daily steps, calories burned and distance (shared with friends if you turn sharing on, section 7), and your recent steps and sleep hours (sent to the coach when you use it, section 6).

Data from Apple Health is never used for advertising, marketing or data mining, never sold, and never shared with anyone for those purposes. It is only used to run MomFit for you, as described above. MomFit does not store your health data in iCloud. You can change or withdraw access at any time in the Settings app on your iPhone, under Privacy & Security → Health → MomFit.

5. Why we use your data, and on what basis

• To provide MomFit (performance of our contract with you): your account, plans, food and training logs, syncing between your devices, friends, the Apple Watch app, reminders and your subscription.
• Health data (your explicit consent, Article 9(2)(a) GDPR): weight, body measurements, Apple Health data, food logs, progress photos and the health-related answers you give. You give this consent in the app, on its own screen, before the first health question. You can withdraw it at any time under More → Health data consent; because MomFit cannot make your plan without this data, withdrawing deletes your account and MomFit data. You can also stop Apple Health access at any time. Withdrawing does not affect what we did before.
• Safety and fair use (our legitimate interest): usage limits, preventing misuse, checking names of groups and plans that others can see, handling reports, and securing our systems.
• Legal obligations: keeping records we are required to keep, and answering lawful requests.

MomFit makes suggestions automatically, such as a training plan or a calorie target, but it never takes decisions about you that have legal or similarly significant effects. You always decide what you do with a suggestion.

6. AI features

Some features use AI models from Anthropic (Claude), Google (Gemini) and OpenAI. They work as our processors: they process the data only to answer the request, do not use it to train their models, and keep it only for a limited time to detect abuse. The coach always tells you it is an AI. Before the first use, MomFit asks your permission to send this data to them; nothing is sent without it, and you can turn it off any time in More → MomFit's AI.

• The coach: when you send a message, it goes to Anthropic, with Google as a backup. To give a useful answer, it includes your earlier messages in the chat, your name, goals, sports, training days, food preferences, this week's trainings and habits, your plans, today's food and calories, your latest weight and how it changed over 30 days, and your steps and sleep from the last week if Apple Health is connected. Your height, birth year and sex are not sent. Your chat is stored only on your phone (the last 60 messages). The coach can save short notes about you, such as what you like or your routine; you can see and delete them in the app under the coach's memory.
• Calories from a photo: the photo of your meal, and an optional note, go to Anthropic, with Google as a backup, to estimate what is on the plate. The photo is not stored, by us or in your account; only the food entry is saved.
• Recipe import: a link, text or photo you import goes to our server, which reads the recipe. Websites are fetched by our server; if that fails, Google looks the page up. Links from TikTok, Instagram and Facebook are read through RapidAPI. Recipe photos are read by OpenAI, and the recipe is worked out by Anthropic, Google or OpenAI. Nothing you import is stored by us except the recipe you save.
• Recipe ideas and pictures: when you ask for a recipe idea, your wish and food preferences go to Anthropic or Google. When MomFit makes a picture for a recipe, only its title and ingredients go to OpenAI.
• Shared names and plans: names of groups, and the text of plans you share with others, are checked by Anthropic or Google so nothing offensive is shown to other moms.

Your progress photos, journal photos and journal notes are never sent to an AI.

7. Friends, community and sharing

MomFit works fine without friends. When you add a friend with an invite code, you each see:

• Your name.
• Trainings you finish: the sport, title, minutes and distance. Switch this off under "Share my trainings".
• Your daily steps, calories burned, distance and step goal, for the last 40 days. Switch this off under "Share my steps and kcal".
• Moments such as reaching your step goal, a streak or a won challenge, and cheers and nudges you send each other.
• Your name and steps in their widgets.

Friends never see your weight, body measurements, photos, food, calories eaten, routes or journal.

• Community leaderboard (optional): if you join, all MomFit users can see your display name, colour, steps, calories burned and distance for the day, week or month.
• Challenges: members of a challenge see each other's names and daily progress. Only in a "within your calories" challenge do they see, per finished day, whether you stayed within your calorie target: a yes or no, never what you ate.
• Groups: only members see a group's leaderboard (names, steps, calories burned and distance) and its plans. Others can only see the name and size of an open group.
• Shared plans: a plan you share with friends, or publicly, shows your name and the plan. Recipe photos are left out. Other moms can report a plan; after reports, it can be hidden.

8. Location and routes

MomFit only uses your location while you record a walk, run or ride, or ask for route ideas. It asks for "while using the app" access only. While a recording runs, it keeps going in the background, with the location indicator showing, and it stops when you stop.

The route of a recording is stored on your phone and in your account (simplified to at most 600 points), so you can see it again on another device. A route can show where you started, which may be your home. Friends see only the sport, minutes and distance, never the route.

Route ideas and maps use Apple Maps, which receives the locations needed to plan and draw a route.

9. Photos

Progress photos, journal photos, recipe photos and photos of your own exercises are stored in your account in Google Cloud Storage in the Netherlands (europe-west4). Only you can open them: there are no public links. You can lock your journal and progress photos in the app with a code and Face ID; this lock works inside the app.

MomFit saves every photo as a new image file, so location and camera details from the original photo are not kept.

Recipe photos are only shared if you share that recipe with your family in MomPlan (section 10).

10. Working with MomPlan

If you also use MomPlan, you can sign in with the same account. MomFit then reads which MomPlan family you belong to. Both links below are off until you switch them on:

• Trainings in the family calendar: your planned MomFit trainings for the next two weeks are added to your family's MomPlan calendar (title, sport, date, time and duration), where your family members can see them. To plan around your week, MomFit reads your family's calendar; other members' private events are left out.
• Meals in the family meal plan: MomFit meals you choose are added to your family's MomPlan meal plan. A recipe you add there is saved in MomPlan with its photo, stored in MomPlan's storage in the United States, where anyone with the link to that photo can open it.

What you add to MomPlan is then also covered by MomPlan's privacy policy. Deleting your MomFit account removes your upcoming MomFit trainings and MomFit meals from MomPlan.

11. Who receives your data

We do not sell your personal data and do not share it for advertising. We use these services. The ones that process data for us (Google, the AI providers, RevenueCat and RapidAPI) are bound by a data processing agreement and must protect your data at least as well as this policy describes:

• Google (Firebase and Google Cloud): sign-in, database, file storage, server functions, push notifications and email for support.
• Anthropic, Google and OpenAI: AI features (section 6).
• RevenueCat: subscription status. It receives your account ID, never your name or email.
• Apple: the App Store, payments, Sign in with Apple, Apple Health, Apple Maps and the Apple Watch.
• Open Food Facts: when you scan a barcode or search for a food, the barcode or search words and your country go straight from your phone to the open Open Food Facts database, without your name or account.
• RapidAPI: only when you import a recipe from a TikTok, Instagram or Facebook link, to read that public post.
• Food Influencers United (anyToBasket): only when you send your shopping list to Albert Heijn or Jumbo: the items on the list are sent, without your name, email or account. Any order is between you and the supermarket.

We may also share data when the law requires it, to protect the safety of our users, or as part of a sale or merger of our business, in which case this policy keeps applying.

12. Where your data is stored

Your MomFit account data, logs and photos are stored in the Netherlands (Google Cloud, europe-west4), and our MomFit server functions run there too.

Some providers process data outside the European Economic Area, mainly in the United States: Firebase sign-in and push notifications, subscription processing, RevenueCat, the AI providers, RapidAPI, and MomPlan's photo storage for recipes you share with your family. For these transfers we rely on the EU-US Data Privacy Framework where the provider is certified, and on the European Commission's Standard Contractual Clauses otherwise.

13. How long we keep it

• Your account and MomFit data: until you delete it or your account. Deleted data disappears from our backups within 7 days.
• Daily stats for friends: the last 40 days.
• Coach chat: only on your phone, the last 60 messages. Coach notes: until you delete them or your account.
• Meal photos for calorie estimates: not stored.
• Usage counts: kept after you delete your account, without any content, so free allowances cannot be used again and again.
• Server logs: up to 30 days.
• Support emails: as long as we need them to help you.

14. Deleting your account

In the app, open More (the last tab), scroll to the bottom and tap Delete account. This removes everything MomFit keeps about you: your profile, plans, logs, habits, journal, routes, coach notes and photos; your friendships, posts, daily stats and nudges; your community scores from every period; plans you shared, with their hearts, and your hearts on other plans; your place in challenges and groups (a friend takes over one you started); reports; basket links; and your notification tokens. If MomPlan does not use the same login, the login is deleted too; if it does, your MomPlan account stays. Deleting your login from MomPlan removes your MomFit data in the same way.

What stays: a count of how many coach messages, meal photos and imports you used, without any content (section 13), and what you added to your family in MomPlan, which belongs to MomPlan. Deleting your account does not cancel MomFit Plus; cancel it in your Apple Account settings.

More on https://momfit.life/delete-account.

15. Your rights

Under the GDPR you have the right to:

• access your data and get a copy of it
• have it corrected
• have it deleted
• restrict or object to how we use it
• receive it in a portable format
• withdraw your consent at any time

Email support@momfit.life and we answer within 30 days. We may ask you to confirm it is you, for example by writing from the email address of your account. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, https://autoriteitpersoonsgegevens.nl) or the authority in your own country.

16. Security

Your data is encrypted in transit and at rest. Access rules make sure only you can read your account data and photos, and friends only what is shared with them. Only the people who run MomFit can reach our systems, and only to help you or keep MomFit running. No system is perfectly secure; if something happens that puts your data at risk, we tell you and the authorities as the law requires.

17. Age

MomFit is for adults, aged 18 and over. The app asks your age and does not go on below 18. We do not knowingly collect data from anyone under 18. If you think a child has created an account, email us and we will delete it.

18. This website

momfit.life uses no cookies, no analytics and no advertising pixels. If you pick a language, that choice is stored in your browser only. Our hosting provider, Google Cloud, keeps standard server logs, including IP addresses, for up to 30 days for security.

19. Changes

When MomFit changes how it uses data, we update this policy and the date at the top. If a change matters to you, we also tell you in the app before it applies.

20. Contact

Questions about your privacy, or want to use your rights? Email support@momfit.life. We read and answer every message ourselves.