This policy explains how AbsMaxx (“we”, “us”) handles information when you use our iOS app and website at absmaxx.app. AbsMaxx is designed without user accounts — most of your data stays on your device.
Who we are
AbsMaxx is a fitness app that provides AI visual estimates of abdominal muscle zones, training plans, workout logging, and nutrition tracking. For privacy enquiries, contact us at privacy@absmaxx.app.
What we collect and where it lives
Stored on your device only
- Onboarding answers (goals, experience, preferences)
- Scan results and scan history
- Training plans, workout logs, and custom routines
- Food diary entries and recent products
- App settings and subscription state cached locally
This data is stored in encrypted on-device storage on your iPhone. We do not operate a user database and cannot access your diary, workouts, or scan history remotely.
Sent to our servers when you use certain features
- Body photo (AI scan): If you consent, your photo is sent once over HTTPS to our analysis service. It is processed by an AI model to produce zone scores. The photo is held only in memory for the duration of the request and is not stored on any server.
- Six-pack preview (optional): If you use the preview feature, your scan photo is sent to a separate image-generation service (via our infrastructure). The result is returned to your device. Images are not persisted on our servers.
- Training plan generation: Your onboarding answers and scan scores (not your photo) may be sent to generate a personalised programme.
- Food lookup: When you scan or search a product, a barcode or search term is sent to our food lookup service. We cache public nutrition data. We do not log or store which client looked up which barcode.
- Subscription check: When you use paid AI features, your RevenueCat app user identifier is sent so we can verify an active subscription. We do not receive your Apple ID or payment card details — Apple and RevenueCat handle billing.
Technical logs
Our analysis service writes one structured log line per request containing: HTTP status, latency, image size in bytes, and a daily-rotating pseudonymous hash of your IP address. We never log image content, photo metadata values, or AI model payloads.
International transfers
AI processing may involve transfers outside the UK/EEA, including to the United States, where our AI and image-generation providers operate. We rely on appropriate safeguards (such as Standard Contractual Clauses) where required. Details of sub-processors are available on request.
Apple Watch, widget, and App Clip
- The Apple Watch app and home screen widget read workout and nutrition summaries shared via Apple's App Group on your device. This data does not pass through our servers.
- The App Clip demo at /try runs locally with no photo upload and no network calls.
Third-party services
- Apple App Store / RevenueCat — subscription purchases and entitlement management
- Cloudflare — hosting for this website and our API infrastructure
- AI providers — photo analysis and optional image preview generation (see above)
- Open Food Facts — open nutrition database for food lookup (ODbL licence; attribution shown in the app)
Legal bases (UK GDPR)
- Consent — uploading a body photo for AI analysis (you may decline and still use the app with estimates)
- Contract — providing the app and subscription features you purchase
- Legitimate interests — securing our API, preventing abuse, and improving reliability (minimal technical logs only)
Health and fitness data
Ab scores, body photos, and related inputs may constitute health-related data. We treat them carefully: photos are not stored on servers, and you can delete all on-device data from Profile in the app. AbsMaxx scores are AI visual estimates for fitness motivation — not medical advice and must not be used for diagnosis or treatment decisions.
Retention
- On-device data — until you delete it in the app or uninstall
- Server-side photos — not retained (processed in memory only)
- Technical logs — retained only as long as needed for security and operations, typically up to 30 days
- Cached food product data — public nutrition facts, retained in our cache to improve performance
Your rights
Under UK data protection law you may have rights to access, rectify, erase, restrict, object, and port data — and to withdraw consent where processing is consent-based. Because most data is on your device, deleting app data in Profile or uninstalling the app fulfils most erasure requests without contacting us. For other requests, email privacy@absmaxx.app.
You may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Children
AbsMaxx is not directed at children under 16. We do not knowingly collect personal data from children.
Changes
We may update this policy. The “Last updated” date at the top will change. Material changes will be communicated in the app where appropriate.
Website
This website serves product information, legal pages, and Apple's App Site Association file. We do not use advertising trackers on this site.