Privacy Policy

Introduction

MAXD ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the MAXD mobile application ("App"). By using the App, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Device Information

We collect a unique device identifier to associate your profile, progress, and preferences with your device. This allows you to use the App without creating a traditional account with email or password.

Profile Information

When you set up your profile, we collect information you voluntarily provide, including:

Username (display name for community features)
Gender
Height and weight
Fitness level, goals, and workout preferences
Injury information (to personalize workout plans)

Photos and Images

When you use our AI-powered scanning features (face scan, body scan, and meal scan), your consent is obtained before any photo is transmitted. Photos are then sent to OpenAI's API for analysis. These images are:

Transmitted to OpenAI's API solely to generate personalized ratings, feedback, and recommendations
Not used by OpenAI to train or improve their AI models (OpenAI's API does not use API-submitted data for training per their API data usage policy)
Not retained by OpenAI beyond the time required to process your request
Not shared with any other third parties beyond OpenAI
Only collected after you explicitly consent within the App

Fitness and Health Data

We collect data related to your fitness journey, including:

Workout completion and exercise logs
Daily step counts (if you grant permission)
Nutrition and meal tracking data
Progress photos and scan results over time
Streak and achievement data
Weight history

Community Content

If you participate in our community features, we collect the content you post, including text and images shared in community posts.

Push Notification Tokens

If you opt in to push notifications, we collect your device's push notification token to send you reminders and updates.

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the App and its features
Generate personalized workout plans and fitness recommendations
Perform AI-powered analysis of body and meal scans
Track your fitness progress and streaks over time
Power community features and enable social interactions
Send push notifications (with your consent) for daily reminders and motivational messages
Manage your subscription and premium features
Detect and prevent fraud, abuse, or violations of our terms

Third-Party Services

We use the following third-party services that may process your data:

OpenAI

We use OpenAI's API to power our AI analysis features (face scan, body scan, and meal scan). When you initiate a scan, your photo and relevant profile data (such as gender, age, and fitness goals) are transmitted to OpenAI's API for analysis.

Important data protection commitments regarding OpenAI:

OpenAI does not use data submitted via the API to train or improve their AI models
Images are processed in memory and are not retained by OpenAI beyond the duration of the API request
Data is transmitted over encrypted HTTPS connections
You will always be asked to provide explicit consent before any photo is sent to OpenAI
You can withdraw consent at any time by not using the scan features

We require that third-party AI providers we use meet equivalent data protection standards and comply with applicable privacy laws. OpenAI's use of this data is further governed by their Privacy Policy and API Data Usage Policies.

RevenueCat

We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat processes purchase-related data in accordance with their Privacy Policy.

Expo Push Notifications

We use Expo's push notification service to deliver notifications to your device. Your push token is shared with Expo for this purpose. Expo's data practices are governed by their Privacy Policy.

Apple App Store

Subscription purchases are processed through Apple's App Store. Apple's handling of purchase data is subject to their Privacy Policy.

AI Data Sharing and Consent

MAXD uses artificial intelligence to provide personalized fitness analysis. Before any photo or biometric data is transmitted for AI analysis, we require your explicit, informed consent. This section describes how we handle your data in connection with AI features.

What Requires Your Consent

Face scans used to assess facial features and generate personalized recommendations
Body scans used to assess physique and generate transformation plans
Meal photos used to assess nutritional content

How We Obtain Consent

During onboarding and before each scan, you will see a clear disclosure explaining that your photo will be sent to OpenAI for analysis. You must tap "I Agree & Continue" to proceed. This consent is stored on your device. You may revoke consent at any time by simply not using the scan features.

What Happens to Your Photo

Your photo is transmitted securely to OpenAI's API over HTTPS
OpenAI processes the image and returns an analysis result
OpenAI does not store your photo after processing is complete
OpenAI does not use API-submitted images to train its AI models
We do not sell, rent, or share your photos with any other parties

Apple Guidelines Compliance

This consent mechanism is designed to comply with Apple App Store guidelines 5.1.1(i) and 5.1.2(i), which require that apps obtain permission before collecting or transmitting user data, including photos, to third-party services.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. Specifically:

Profile data: Retained until you request deletion
Scan results and fitness data: Retained to maintain your progress history
Uploaded photos: Stored on our servers for the duration of your use of the App; you may request deletion at any time
Community posts: Retained until deleted by you or removed by moderation

When you request data deletion, we will remove your data from our active systems within 30 days. Some data may be retained in backups for a limited period.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encrypted data transmission using HTTPS/TLS
Secure server infrastructure
Access controls limiting who can access user data
Regular security reviews

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data
Portability: Request a copy of your data in a portable format
Objection: Object to the processing of your data in certain circumstances
Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, please contact us at the email address provided below.

Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App and updating the "Last updated" date above. Your continued use of the App after any changes constitutes your acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to request data deletion, please contact us at:

Email: maxdx5am@gmail.com