Last updated: August 3, 2026

Privacy Policy

StrideAI is built around the idea that a fitness app shouldn't know more about you than it needs to. This page describes exactly what we collect, why, and what we don't.

What we collect

1. An anonymous device identifier

The first time you open StrideAI, we generate a hashed identifier from your iPhone's Vendor ID (IDFV). This ID is a 64-character string — it identifies your installation, not you. You can see your own ID in Settings → About → Anonymous ID.

We use it to: associate AI requests with your installation, enforce per-device rate limits, and match support requests to logs. We do not use IDFA (the advertising identifier), so the App Tracking Transparency prompt does not appear.

2. Your workout profile

Goal, fitness level, equipment, age, sex, height, and weight that you provide in onboarding. This stays primarily on your device. A snapshot is sent with each AI workout request so the model can tailor exercises to you.

3. AI prompts and responses

When you tap Generate workout or Generate insight, your request goes to our backend on Render, which calls Google Gemini and returns a structured plan. We store these requests and responses to:

• Improve the AI prompts over time (we look at aggregates, not individual users)
• Investigate bugs when a workout looks wrong
• Cache identical requests to reduce API costs

You can request deletion of all your stored requests by emailing privacy@fitnessaiapp.com with your Anonymous ID.

4. Crash and performance data

We use Firebase Crashlytics to receive automatic reports if the app crashes, and Firebase Analytics for aggregated usage events (which screen was opened, did onboarding complete, etc.). Both are linked only to the Anonymous ID — never to your name, email, or other identifiable info.

Firebase Analytics is disabled in Debug builds (only enabled in production releases).

5. Install attribution (AppsFlyer)

Starting with version 1.0.3, StrideAI uses AppsFlyer to measure where new users come from — e.g. organic App Store search, our own marketing site, or an ad on another network. This helps us decide where to spend our limited marketing budget.

What AppsFlyer sees: install event timestamp, App Store campaign attribution, your iOS version, and — if you grant tracking permission via the iOS App Tracking Transparency prompt — your IDFA (the Apple-issued advertising identifier). It does not see your name, email, AI prompts, workout history, or any in-app content.

If you tap "Don't Allow" on the tracking prompt (or never resolve it), AppsFlyer operates in limited mode: SKAdNetwork and aggregated non-personal data only. Install attribution still partially works, but without IDFA.

You can change your choice anytime: iOS Settings → Privacy & Security → Tracking → StrideAI. Their privacy policy: appsflyer.com/legal.

The website & quiz

This website (including the in-browser workout quiz) is separate from the iOS app. The quiz runs entirely in your browser: your answers and the sample workout are computed and stored locally (in localStorage), and nothing from the quiz is sent to our backend.

We assign a random, anonymous website identifier (a UUID in localStorage) so the quiz can remember your answers on this device. It is not your IDFV, is not linked to the app, and never leaves your browser — clearing your browser or using a private window removes it. Your quiz answers and the generated workout are not sent to any analytics provider or to our backend.

The website does use two standard measurement tools that set cookies and report aggregate traffic: Google Analytics (page views, referrer, approximate location) and the Meta (Facebook) Pixel (page views, to measure our ad campaigns). Neither receives your quiz answers, workout, email, or name. On the quiz page you can turn them off with the Decline button in the cookie banner (it also clears their cookies), or use any tracker/ad blocker. AppsFlyer runs only inside the iOS app, not on the website.

What we don't collect

• No location
• No contacts, calendar, or photos
• No camera or microphone
• No Facebook SDK, no AdMob, no third-party ad networks in the iOS app

Amazon Associates

StrideAI participates in the Amazon Associates Program. When an AI-generated workout suggests gear, you may see a Recommended gear section with links to Amazon. As an Amazon Associate, StrideAI earns from qualifying purchases.

The links open in Safari, not in the app. Once you tap a link, your subsequent purchase is between you and Amazon — Amazon's own privacy policy applies, not ours. We don't know what you bought; Amazon shares a small commission with our account. No extra cost to you, and no obligation to buy anything.

Third parties

StrideAI uses these services in production:

• Render — hosts our backend API. Sees your X-Device-Token header but no other identifiable info.
• Google Cloud (Firestore, Firebase) — stores AI requests, hosts the landing page, receives crash reports.
• Google Gemini API — generates the workouts. Sees your workout profile snapshot per request.
• AppsFlyer — install attribution for the iOS app (see section 5 above).
• Google Analytics — aggregate website traffic on the quiz page. Sees page views, not your quiz answers.
• Meta (Facebook) Pixel — measures our ad campaigns from the website. Sees page views, not your quiz answers.
• Amazon — only if you tap a product link.

Your rights

Email privacy@fitnessaiapp.com with your Anonymous ID to:

• Receive a copy of all data we've stored about your installation
• Request deletion of all your data from our backend
• Ask questions about anything on this page

For App Store distribution, we comply with Apple's App Privacy disclosures (Device ID, Crash Data, Product Interaction).

Changes

We'll update this page when we change what we collect. The "Last updated" date at the top reflects the most recent change. Major changes will be flagged inside the app the next time you open it.

Contact

Privacy questions: privacy@fitnessaiapp.com
General contact: hello@fitnessaiapp.com