Privacy Policy

AirFit ("we", "us") provides two things: software that personal trainers and gyms use to deliver workout programs, meal plans and scheduling to their clients, and AirFit Coach, an automated coaching subscription that adults can buy directly from us without a trainer. This policy explains what we collect, why, and what you can do about it.

Who controls your data

• If you are a trainer or gym, you are the controller of your clients' data and we process it on your behalf.
• If you are a client of a trainer or gym, your trainer or gym decides what is stored about you; contact them first for access or deletion requests, and contact us if you can't reach them.
• If you use AirFit Coach without a trainer, AirFit is the controller of your data and the seller of your subscription. Contact us directly. If you later choose to be matched with a trainer, the data you approve for sharing is also controlled by that trainer from the moment you accept the introduction.
• If you only use our free tools, blog or public pages, AirFit is the controller of the little we collect there.

What we collect

• Account data: name, email address, password hash, time zone, and an optional phone number.
• Training data: programs, workouts, exercise prescriptions, logged sets and personal records, workout completions, meal plans, daily protocols and the questionnaire behind them, nutrition notes and any files uploaded to them, custom foods and food favorites, scheduled sessions, and check-in and form responses.
• Body data you choose to record: body weight and measurements, and progress photos. This is health-related information. We collect it only when you or your trainer enter it, and use it only to show you and your coach your progress.
• Nutrition profile, if you or your trainer set one up: date of birth, sex, height and weight, activity level, goal and pace, dietary pattern, allergies and restrictions, foods you like, dislike or won't eat, meal structure, cooking and budget habits, usual alcohol intake, whether you take a GLP-1 medication or have another condition that should shape the plan, and your answers to a short health screening (pregnancy, eating-disorder history, diabetes, kidney or liver disease, cancer treatment, recent bariatric surgery). The screening answers and medication status are health-related information. We ask for them only with your explicit consent, use them only to decide whether an automated meal plan is appropriate and to set its targets, and you can skip anything you'd rather not answer — we plan more conservatively instead. Your profile is one record, shared between AirFit Coach and the trainer you're working with, if you have one, because it describes you rather than any one coaching relationship.
• AirFit Coach data: your coaching profile (goals, experience, schedule, training location and equipment, preferences, movements to avoid, and any limitations you describe in your own words), the acknowledgments you give during setup, weekly check-in answers, your conversation with AirFit Coach, program proposals and your decisions on them, and records of any message our safety checks flagged. We don't ask for medical records; anything you volunteer about limitations is used only to scope your program.
• Payment data: payments are processed by Stripe. We never see or store full card numbers. We keep Stripe's customer, subscription and purchase identifiers, plus plan, status, amount and invoice records, so we can show you what you've bought and keep your access in step with your billing.
• Gym data: gym name, subdomain, logo, colors and membership roles.
• Enquiry data: if you contact a trainer or gym through their public AirFit page, what you submit goes to them and we store it on their behalf.
• Free-tool data: if you ask for calculator results or a template pack by email, we use your address to send it. We add you to our marketing list only if you tick the box that says so.
• Technical data: IP address, browser user agent and session records, used to keep accounts secure.

How we use it

• To operate the service and show you your own data.
• To run AirFit Coach: build and adjust your program and, if you ask for one, your meal plan, answer your messages, and run your weekly check-ins, as described in the next section.
• To bill subscriptions and purchases, and to keep your access matched to what Stripe tells us about their status.
• To send transactional email — account verification, password resets, invitations, program assignments, check-in and session reminders, and billing notices. These are service messages and are not optional while your account is active.
• To send product updates, only if you opted in. You can unsubscribe from any marketing email, and that never affects transactional mail.
• To detect and prevent abuse, and to keep AirFit Coach within its safety scope.
• To understand how the product is used, through aggregate analytics that exclude the content of your training data and conversations.

We do not sell your data or share it with advertisers.

Automated coaching and AI features

AirFit Coach generates programs, program revisions, check-in responses and conversation replies automatically, using a large language model. Nobody at AirFit reviews an individual response before you see it. To produce it, we send the model provider the information it needs for your request: your coaching profile, structured facts derived from your logged workouts, body metrics and check-ins, your messages, and the list of exercises it is allowed to use. We do not send progress photos to any model. We keep the conversation you can see, structured snapshots of the facts used, and technical metadata; we do not store the fully assembled prompts.

The AI meal planner works the same way. Our software computes your calorie and macronutrient targets and removes every food that conflicts with your allergies, restrictions and dislikes before anything is sent. The model provider then receives your nutrition profile (goal, dietary pattern, restrictions, allergies, food preferences, kitchen and budget details, and whether a GLP-1 medication should shape the plan), your targets, and the list of foods it may use, and returns a draft that our software fits to your targets and checks again. Your health-screening answers are used only to decide whether automated planning is appropriate; they are not sent to the model provider. We do not send progress photos or body-measurement history for meal planning.

Daily protocols work the same way again. The model provider receives your protocol questionnaire (what you want to work on, your wake and bed times, how many minutes you have, your experience, the activity kinds you asked us to leave out, and anything you typed in the free-text boxes) plus the constraints we derive from your health-screening answers — for example that stretching must stay gentle. It returns a set of habit blocks. Every clock time is worked out by our software from your own wake and bed times, never by the model. We do not send your workout history, meal plan, progress photos or body-measurement history for protocol generation.

Trainers can also use AI drafting features in their own workspace. When they do, computed summaries of a client's progress — or, for a meal plan, the client's nutrition profile and targets as described above — are sent to the model provider to draft something the trainer reviews, edits and publishes before it reaches anyone.

Trainers and gyms can also add their own files to move an existing business onto AirFit: client lists, intake forms, workout programs and meal plans. A client list in a spreadsheet is read by our software; at most its column headings are sent to the model provider. Other files are sent to the model provider, which reads them into drafts that the trainer checks before anything is saved. Such a file can hold a client's name, contact details, or details of their training or diet, if the trainer's own document does. We delete each file within 30 days, and sooner once it is imported or removed. Nothing is sent to a client because a file was imported.

These requests currently go to Anthropic (Claude models) through Vercel AI Gateway, under business API terms that do not allow your data to be used to train their models. We may change providers; if we do, we will update this page.

AirFit Coach output is automated and can be wrong. It never changes your active program without your explicit approval, and you can ask to be matched with a human trainer at any time. Our safety checks may decline a request or point you to appropriate help instead of answering.

Payments

Stripe processes every payment on AirFit, and your card details are subject to Stripe's privacy policy. For trainer and gym plans and for AirFit Coach, AirFit is the seller. When a client buys a session package or coaching subscription from a trainer, the trainer is the seller, paid through their own Stripe account; AirFit stores the purchase record so both of you can see it.

Sharing with trainers

If you use AirFit Coach, nothing about you is shared with any trainer through that flow. If you ask to be matched, you'll see up to three trainers, and none of them sees any of your information until you choose one and approve a summary of exactly what will be shared. Once a coaching relationship is active, that trainer can see your training history under the same access rules that apply to any trainer–client relationship on AirFit; the consent screen says this before you accept.

If your trainer keeps records about you and you have no account

A trainer or gym can keep records in AirFit about a client who has no AirFit account: a name, an optional email address and phone number, the trainer's notes, and the training records the trainer enters for that person, such as programs, logged workouts, measurements, meal plans, sessions, form answers the trainer records, and payments the trainer took in person. The trainer or gym is the controller of those records and we process them on the trainer's behalf. We tell the trainer to get the person's agreement before the first record.

We send such a person no email unless the trainer gave us an email address for them. Then we send emails about booked sessions, each with a link that stops them, and an invitation to AirFit if the trainer chooses to send one. We send nothing else. A trainer can also add a second email address to a client's record, for example for a partner who trains with them. We ask that address to confirm before we send it copies of the client's emails, each copy has a link that stops them, and a client with an account can see and remove the address under More → Account settings.

If a trainer keeps records about you and you have no account, ask the trainer for a copy of the records or to delete them. If you can't reach the trainer, email privacy@airfit.ai and we will help. If you later accept an invitation to AirFit from that trainer, the records the trainer kept for you move into your account; the invitation screen says so before you accept.

The same applies when you have an AirFit account and a trainer invited you, and you did not accept yet. The trainer can keep such records about you until you accept or the trainer deletes them. Until you accept, the trainer cannot see or change anything in your own account.

Who processes data for us

• Apple — if you choose Sign in with Apple. We receive your Apple account identifier, the name you share, and your email address or Apple's private relay address. You can use Hide My Email.
• Vercel — application hosting, file storage, and the AI Gateway that carries AI requests.
• Neon — database hosting.
• Stripe — payments, subscriptions and billing portal.
• Anthropic — the language models behind AirFit Coach and trainer AI features.
• Resend — email delivery.
• Google — if you choose to sign in with Google, or view a map on a gym's public page. Google Analytics and Google Ads also measure our public website: the marketing pages, the sign-up pages, and the page you return to after checkout. They record the page address, the referrer, and an advertising click id. They do not run inside the client portal or the trainer app, so no workout, meal plan, client or enrollment identifier reaches Google. In the EEA, the UK and Switzerland both tags start with consent denied, so visits from there are modeled rather than measured.
• PostHog and Sentry — product analytics and error monitoring, where enabled. Product analytics help us understand feature use. When you sign in on the website, analytics associate your account identifier, name, and email address with your activity.

The AirFit mobile app does not use advertising identifiers or send your email address to advertising networks. AirFit website sessions opened through the app disable our Google advertising and measurement tags. Account, fitness, nutrition, and diagnostic data still support app features, product analytics, and error reporting. We do not use these mobile data for cross-company advertising tracking or sell them to data brokers.

Demo videos are embedded through youtube-nocookie.com, which does not set tracking cookies unless you press play. Food and nutrient data comes from USDA FoodData Central, a public-domain dataset we store a copy of; nothing about you is sent to USDA.

Retention

We keep your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days except where we're required to retain records by law. Trainers who end a client relationship keep the training history associated with it unless the client asks for deletion.

When an AirFit Coach enrollment ends — a human trainer takes over, or you leave AirFit Coach altogether — your programs, meal plans, protocols and workout history stay with your account and remain readable. Canceling the paid plan, or letting its trial lapse, does not end the enrollment on its own: you continue on Coach Free, and this clock does not start. Your AirFit Coach conversations, safety records, and the detailed content of check-ins and of program and meal-plan proposals are deleted 90 days after the enrollment ends, unless they are needed for an active dispute or we are legally required to keep them. Your nutrition profile stays with your account until you delete the account.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Two of these you can do yourself: in the app, under More → Privacy and your data, you can download an export of your account, including your training data, nutrition profile, meal plans, protocol questionnaire, every protocol version and the days you ticked off, and AirFit Coach history, and you can delete your account. Deleting your account cancels any AirFit Coach subscription first; if your account owns trainer or gym data, or has an active paid relationship with a human trainer, we'll ask you to resolve that with us or the trainer so nothing is lost. For anything else, email us and we'll respond within 30 days. Our account deletion page gives the steps and says what we keep after an account is deleted.

Security

Data is encrypted in transit. Passwords are hashed, never stored in plain text. Card details never touch our servers. Access between gyms, between trainers, and between AirFit Coach and any trainer is enforced on every request, not just in the interface.

Children

AirFit is not intended for children under 16. If a trainer works with minors, the trainer is responsible for obtaining parental consent. AirFit Coach and any paid purchase on AirFit are available only to adults 18 and older; we ask you to confirm this before you can subscribe.

Changes

We'll update this page when this policy changes and adjust the date at the top. Material changes will be emailed to account holders.

Contact

Questions about this policy: privacy@airfit.ai. Our Terms of Service cover the commercial side.