Privacy

Privacy Policy

Effective date: July 19, 2026

This Privacy Policy explains how Fully TuFF ("we," "us," or "our") collects, uses, and protects your information when you use the Fully TuFF app or visit https://fullytuff.com. Fully TuFF is a workout logging and training app that runs primarily on your device. This policy covers both the app and the website.

Fully TuFF is currently in beta. Where a practice is specific to the beta, we say so.

Our approach

Fully TuFF is built to keep your data on your device by default. Your workouts live on your phone and sync through your own iCloud account. Data only leaves your device when you use a feature that needs it, such as the AI Coach, cloud photo recognition, or Cloud Backup, and this policy explains each of those cases. We do not sell your data, and we do not use it for third-party advertising.

Information we collect

Account information. If you sign in, which is required for Cloud Backup and the AI Coach, we collect the email address associated with your Apple or Google account. If you use Sign in with Apple's private relay, we only receive the relay address.

Workout content you create. Your workouts, exercises, notes, and any photos you add. This is stored on your device, synced to your private iCloud, and, if you turn on Cloud Backup, stored on our backend so you can restore it.

Profile details you enter. Optional information like your name, bodyweight, and training goals. These stay on your device.

Apple Health data, only if you connect it. If you grant access, the app reads your workouts, sleep, nutrition, body mass, resting heart rate, heart rate variability, active energy, and steps. This is read only. It is shown live in the app and is never written to iCloud or to our servers. It is only sent to the AI Coach if you separately turn on Share Health context, which is off by default.

Diagnostics. In released builds, we collect crash and error reports through Sentry to find and fix bugs. These are scrubbed of personal content and do not include your workout text, health values, or account details.

Anonymous usage analytics. We collect anonymous feature-usage events through PostHog to understand which parts of the app are used. These events are not linked to your identity. They carry no name, email, or account id, only a random per-install identifier, event names, and the app version, and they never include your workout content, notes, coach messages, or health data. Analytics is on by default, and you can turn it off in Settings under Privacy.

Website signup. If you join the beta through the website, we collect your first name (optional), email address, main training goal, and basic technical data such as browser type and approximate request metadata.

AI features and data sharing

When you use the AI Coach, plan generation, cloud workout parsing, or equipment and workout photo recognition, the app sends the information needed for that feature to our AI provider, currently Anthropic, to generate a response.

Depending on the feature, this can include your message to the Coach, recent training history, the Coach's on-device notes about you, a workout line to parse, or a photo you take or select. If you have turned on Share Health context, a summary of your recent workouts, sleep, nutrition, and recovery from Apple Health is included with your Coach questions.

These features only run after you have consented to AI processing in the app. For equipment recognition, the app uses on-device recognition where it can, and only sends a photo to the cloud when you allow it.

We use Anthropic's API under its commercial terms, which mean your data is not used to train Anthropic's models. We do not send Anthropic your name, email, or account identifier.

Please do not put medical records, government identifiers, passwords, or other sensitive information you do not need to track your training into coach messages, notes, or photos, since that content is sent to our AI provider.

The AI Coach's memory

The Coach remembers context about you, such as goals, preferences, and any injuries or allergies you mention, so it can give better suggestions. This memory is stored only on your device. It is not synced to iCloud or to our servers. You can view and clear it in the app.

How we use information

We use the information above to operate and improve Fully TuFF: to run the features you use, sync and back up your data when you ask us to, generate AI responses, fix crashes and bugs, understand which features are used, protect the service from abuse, and respond to your requests. Website signup information is used to manage beta access and communicate with you about the beta.

Service providers

We rely on a small number of providers that process data on our behalf, only as needed to operate Fully TuFF:

Apple, for Sign in with Apple, iCloud sync, HealthKit, and the App Store.
Anthropic, for the AI features described above.
Supabase, for account authentication, Cloud Backup storage, and backend functions.
Sentry, for crash and error diagnostics.
PostHog, for anonymous usage analytics.
Our website hosting and email providers.

Each provider handles data under its own terms. We do not share your data with advertisers, and we do not sell it.

Your choices and rights

AI features. You choose whether to enable AI processing. If you decline, the AI features simply do not run.
Health sharing. Share Health context is off by default. You control it in Settings, and you manage Apple Health permissions in Apple's Health app.
Analytics. You can turn anonymous analytics off in Settings under Privacy.
Cloud Backup. Backup is optional and only happens if you sign in and enable it.
Account deletion. You can delete your account and its data at any time in Settings. This removes your Cloud Backup, revokes your Apple sign-in token where applicable, and deletes your account.
Access, correction, deletion, and unsubscribe. You can ask us to access, correct, or delete the personal information we hold, or unsubscribe from beta emails, by contacting privacy@fullytuff.com.

Data retention

On-device data stays until you delete it or remove the app. Cloud Backup is kept until you delete your account or it is replaced by a newer backup. Anonymous analytics events are retained in aggregate and are not tied to you. Website signup information is kept for as long as needed to run the beta, comply with legal obligations, and resolve disputes.

Security

We use reasonable technical and organizational safeguards. Data in transit is encrypted over HTTPS, authentication tokens are stored in the device Keychain, and on-device data uses the system's file protection. No method of transmission or storage is completely secure.

Children's privacy

Fully TuFF is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us and we will take appropriate steps.

International users

Fully TuFF is operated from the United States, and the providers above may process data in the United States and other countries. By using the app, you understand your information may be processed there.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above, and for material changes we will give notice in the app or by email. Continuing to use Fully TuFF after an update means you accept the revised policy.

Contact

For privacy questions or requests, email privacy@fullytuff.com.

Fully TuFF, an independent app project based in Baltimore, Maryland