Legal

Privacy Policy

Last updated: 13 September 2026  •  Effective date: 13 September 2026

This Privacy Policy explains how Layakati Fitness ("Layakati", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you use the Layakati Fitness mobile application and related websites and services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.

1. Who We Are

Layakati Fitness is an AI-powered fitness companion offering personalised workouts, meal and nutrition tracking, wellness content, community features, and expert coaching. For privacy questions, contact privacy@layakati.com.

2. Information We Collect

We collect the following categories of information to provide and improve the Service:

Account & Identity

Email address, phone number, first and last name, password (stored hashed), authentication tokens, and sign-in provider identifiers. Purpose: create and secure your account, authenticate you, communicate with you.

Profile & Fitness

Date of birth, gender, height, weight and target weight, fitness goals, activity level, workout preferences, training schedule, and profile photo. Purpose: generate personalised workout and nutrition plans.

Health & Sensitive Data (provided voluntarily during onboarding)

Medical conditions, diabetes status, medications, injuries, allergies, pregnancy status, sleep quality and schedule, stress levels, emotional wellbeing, and (optionally) menstrual cycle information. Purpose: tailor recommendations safely and support wellness features.

Activity & Logs

Workout logs, meal logs, water intake, sleep logs, weight history, scanned food products and barcodes, streaks, points, and challenge progress. Purpose: track your progress and power gamification features.

Photos & Media

Meal photos and nutrition-label images you capture, profile images, and transformation-story images. Purpose: nutrition recognition and features you choose to use.

Community Content

Posts, comments, stories, reactions, replies, chat messages, and friendships. Purpose: enable community and social features.

Device & Usage

Device type, operating system, app version, language/locale, time zone, IP address, and diagnostic/crash data. Purpose: operate, secure, and improve the Service.

Notifications

Push notification tokens and your notification preferences. Purpose: send reminders and updates you have opted into.

Providing health and sensitive data is optional and based on your explicit consent given during onboarding. You can skip or later update most of these fields, though some features may not work without them.

3. How We Use Your Information

• To create, maintain, and secure your account.
• To generate personalised workout, nutrition, and wellness plans.
• To provide expert coaching, community, and messaging features.
• To manage your subscription tier and access to premium features.
• To send reminders, service updates, and notifications you have enabled.
• To analyse usage, diagnose issues, and improve the Service.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal information, and we do not use your health or sensitive data for advertising.

4. Legal Bases for Processing (GDPR)

Where the EU/UK GDPR applies, we rely on: your consent (for health and sensitive data and optional features), performance of a contract (to deliver the Service), legitimate interests (to secure and improve the Service), and legal obligation (to comply with applicable law). You may withdraw consent at any time.

5. Third-Party Services

We use trusted service providers to operate the Service. These may process data on our behalf under contractual safeguards:

• Authentication & messaging: Firebase (Google) for authentication and OneSignal for push notifications.
• Nutrition data: OpenFoodFacts and AI vision providers used to recognise food and nutrition labels from images you capture.
• Infrastructure & analytics: cloud hosting and diagnostics/crash-reporting providers.

Each provider processes data according to its own privacy policy. We share only the data necessary for the relevant function.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymise your personal data within 30 days, except where we must retain certain records for legitimate reasons such as security, fraud prevention, tax, accounting, or other legal obligations. See our Data Deletion page for details.

7. Your Rights and Choices

• Access, correction, and portability: request a copy of your data or ask us to correct it.
• Deletion: delete your account and associated data in-app (Profile → Settings → Delete Account) or via our Data Deletion page.
• Consent withdrawal: withdraw consent for optional data processing at any time.
• Marketing and notifications: opt out in the app settings or your device settings.
• Regional rights: depending on your location (e.g., GDPR, CCPA/CPRA), you may have additional rights, including to object to or restrict processing and not to be discriminated against for exercising your rights.

To exercise any right, contact privacy@layakati.com.

8. Security

We use industry-standard measures to protect your data, including encryption in transit, hashed passwords, secure token storage, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your information may be processed and stored in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

10. Children's Privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. We will post the updated version and revise the "Last updated" date. Material changes will be communicated within the app or by other appropriate means.

12. Contact Us

Layakati Fitness
Email: privacy@layakati.com
Support: support@layakati.com