SahaFit Privacy Policy

Last updated: 21 October 2026

This policy explains what data SahaFit processes, why, who it is shared with, how long it is kept and what your rights are. It applies to the saha-fit.com website and to the SahaFit apps for Android and iPhone, which display the same service.

1. Who is responsible for your data

SahaFit is published by Software4u LLC, a company registered in the United States, which is the controller of your data. Address: 30 N Gould St, Ste R, Sheridan, WY 82801, USA. For any question or request: contact@saha-fit.com.

2. Who SahaFit is for

SahaFit is reserved for people aged 18 and over. We do not knowingly collect data about minors: if you think a minor has created an account, write to us and we will delete it.

3. What we do not do

• We do not sell your data or rent it to anyone.
• There is no advertising in SahaFit, no ad tracking and no audience measurement tool from another company.
• The apps do not use your phone's advertising ID.

4. The data we process, and why

Your account

• What we keep: first name, last name, email address, password (stored only in encrypted, irreversible form), account type (athlete or coach) and language. If you sign in with Google: your Google ID, your name and the address of your Google profile picture. If you sign in with Apple: your Apple ID, the email address Apple sends us (your real address, or a relay address if you choose to hide it) and the name you agree to share. We also keep a token provided by Apple, used only to remove SahaFit's access to your Apple account when you delete your account.
• Why: to create your account, sign you in, and send you the emails the service needs (address verification, forgotten password, subscription confirmation). The SahaFit team is notified of each new sign-up (name and email).
• Legal basis: performance of the contract (the Terms of Use).

Your account security

• What we keep: for each sign-in, the IP address and the type of browser or device, for the duration of the session.
• Why: to protect your account and limit abusive sign-in attempts.
• Legal basis: our legitimate interest in securing the service.

Your fitness profile and your health data

• Fitness profile (optional): level, goals, disciplines, desired training frequency and duration.
• Health data (optional, with your explicit consent): sex, year of birth, height and weight. They are used to estimate your calories and your heart rate zones and to personalize the AI Coach. They are only stored if you check the consent box in your profile. If you withdraw this consent, they are erased, along with the weight recorded with your runs.
• Legal basis: your explicit consent, which you can withdraw at any time.

Your workouts and your programs

• What we keep: your workouts (exercises, sets, reps, loads, duration, feeling, comments), the programs you follow or create, your progress.
• Why: to give you your history, your statistics and the next steps of your programs on all your devices.
• Legal basis: performance of the contract.

The titles of the programs you publish are visible to members who open their link.

Your runs and your location

• When: only during a run that you start yourself (Premium feature). In the mobile apps, your location keeps being recorded while the screen is locked during the run, and your phone shows it the whole time (a "Run in progress" notification on Android, the location indicator on iPhone). It is never tracked outside a run.
• What we keep: the precise GPS track of the run (positions, altitude, speed, accuracy, time), the distance, the pace, the number of steps counted by your phone, the estimated calories, and the title, note and feeling you add. The run is recorded on your device during the effort, even without a network connection, then in your account.
• What you control: you can delete one run or all your runs at any time. Your track is not shared with anyone, unless you choose to share it yourself (the map is only added to the share if you turn it on).
• Legal basis: performance of the contract, for the feature you use.

Pulse measurement with the camera

The camera image is analyzed only on your phone: no photo or video is sent or kept. The measurement result and the values entered in the calculators (BMI, calories, 1RM, heart rate zones) stay on your device.

The AI Coach (optional)

• What is sent: your messages, and a summary of your profile and your activity (first name, age, sex, height, weight, level, goals, workouts, runs, programs followed and your coach's name), and the country of your connection. This information is sent to our artificial intelligence provider to write the replies, then to analyze each exchange.
• What we keep: your conversations, and a short follow-up memory (summary, reported injuries or pain, motivation), until you clear your history or delete your account.
• Alerts: the analysis may create an alert (pain, injury, low motivation, diet slip, session feedback, frustration, distress, technical problem) with a summary and a short excerpt of your words. The SahaFit team sees all alerts. Your coach sees them too, except distress and technical problem alerts, but only if you have accepted their invitation to follow their program and they have an active coach plan. Important alerts may be sent to them by email or notification. Alerts already created are kept until your account is deleted.
• The country of your connection: our host (Vercel) gives it at the time of each request. It is used only for the emergency numbers of that country: the AI Coach shows them, and the country is sent with each message to our artificial intelligence provider so the coach can give them to you in its replies. SahaFit does not store it.
• Legal basis: your explicit consent, given before your first message.

The AI Coach is not a doctor: its answers do not replace medical advice.

AI Chef (photos of your fridge)

• What is sent: 1 to 3 photos, downsized on your phone (which removes their metadata, including location), then the ingredients, your goal, your diet and the number of servings. This information is sent to our artificial intelligence provider to recognize the ingredients and put the dishes together.
• What we keep: neither the photos nor the ingredients. We only count the number of analyses, for the free plan limit.
• Legal basis: performance of the contract, for the feature you use.

Reporting AI content

If you report an answer from the AI Coach or AI Chef, we receive by email the reported content, the reason you give, your ID and your email address, so we can review it.

If you are a coach, or a coach's student

• A coach who sends you a program sends you an invitation: you are only enrolled in their program if you accept it. Once you accept, they see your name, your email and the programs of theirs that you follow, and may receive your AI Coach alerts as described above. They do not see your workouts, your runs, your location or your weight.
• If you are a coach: your name appears on your programs, your logo (if you add one) is kept and attached to the programs you send, and the email addresses you invite are kept until they respond.

Your subscriptions

• On saha-fit.com and in the Android app: payment is handled by Stripe. You enter your card details with Stripe, never with us. We keep your Stripe customer ID, your plan, its status and its dates.
• In the iPhone app: payment is handled by Apple's App Store, and the subscription is tracked by RevenueCat, with your SahaFit ID. We receive your plan, its status and its dates, never your payment method.
• Legal basis: performance of the contract and our accounting obligations.

Notifications (optional)

If you turn on notifications, we store your device token (Google's Firebase Cloud Messaging, in the Android app) or your browser subscription (on the website), to send you alerts. Nothing is created until you turn them on, and you can turn them off at any time.

Your messages to support

When you write to us through the contact or feedback form, we receive your message, your rating if you give one and your email address, so we can reply to you.

Service statistics

• Anonymous totals: on the website, SahaFit counts visits to the home page and where they come from, workouts started and finished without an account, and how many times a locked offer or the offers page is viewed. Sign-ups are counted the same way when the account is created, with the sign-up method and, on the website, the link the visitor came from. Only a total per day is kept, with no cookie, no identifier and nothing that ties it to your account. The apps do not send these totals.
• Totals from account data: the SahaFit team also computes totals from account data (sign-ups, workouts, subscriptions), to see what works and improve the service.
• Legal basis: our legitimate interest in improving the service.

Third-party content

• Exercise videos: they are played with the YouTube player in privacy-enhanced mode (youtube-nocookie.com). When you start a video, Google receives your IP address and playback information.
• Run maps: the base maps come from OpenStreetMap servers, which receive your IP address and the area of the map displayed.
• Fonts: some are loaded from Google Fonts, which receives your IP address.

5. Who receives your data

We only share your data with the providers the service needs. They act on our behalf and according to our instructions:

• Vercel: hosting of the website and the app.
• Neon: database.
• GitHub (Microsoft): makes a copy of the database on its servers every week, checks that it can be restored and keeps it encrypted; each copy is erased within 30 days.
• Our artificial intelligence provider (AI Coach, AI Chef): depending on the service in use at the time of your request, Anthropic, OpenAI, Google (Gemini), Mistral AI (European Union) or OpenRouter, which passes the request on to the provider of the chosen model.
• Stripe: payments on the website and in the Android app.
• Google: sign-in with Google, notifications (Firebase Cloud Messaging), YouTube videos, fonts, team email.
• Apple: App Store (payments in the iPhone app) and Sign in with Apple.
• RevenueCat: tracking of subscriptions and purchases made in an app store.
• OpenStreetMap: base maps for runs.
• Our email host (mail.saha-fit.com): sending emails.

Your data may also be seen by your coach, if you have accepted their invitation (see above), and disclosed to the authorities if the law requires us to do so.

Transfers outside the European Union: several of these providers are located in the United States, as is Software4u LLC. These transfers are covered by appropriate safeguards, in particular the standard contractual clauses adopted by the European Commission.

6. How long we keep your data

• Your account and everything linked to it (profile, workouts, runs, programs, AI Coach conversations): as long as your account exists. You can delete a workout, a run, the AI Coach history or your health data at any time.
• Sign-in sessions: for the duration of the session.
• AI Chef photos: they are not kept.
• Invoices: at our payment provider, for the period required by law.
• Technical backups: they are erased automatically within 30 days.

When you delete your account, everything linked to it is erased immediately: profile, workouts, runs, programs, AI Coach conversations and alerts, feedback messages, settings and notifications. A subscription taken on the website or in the Android app is canceled automatically. A subscription taken in an app store is canceled in that store. If you use Sign in with Apple, we also remove SahaFit's access to your Apple account.

7. Security

Exchanges with SahaFit are encrypted (HTTPS). Passwords are never stored in plain text. Access to data is restricted to the people and providers who need it to run the service.

8. Your rights

At any time, you can:

• access your data and get a copy of it, in a machine-readable format (portability);
• correct it;
• erase it, by deleting your account yourself (Profile → "Delete my account") or by following the Delete your account page;
• withdraw your consent (health data, AI Coach, notifications), without affecting what was done before;
• object to processing or request its restriction;
• give instructions on what happens to your data after your death.

To exercise these rights, write to contact@saha-fit.com from your account's email address. We reply within one month. You can also lodge a complaint with the data protection authority of your country, in France the CNIL (cnil.fr).

9. Cookies and storage on your device

SahaFit only uses cookies that are necessary for the service: your sign-in session and the language you have chosen. There are no advertising cookies and no audience measurement cookies. The website and the apps also keep information in your device's storage, to work without a network connection and remember your settings: workouts and runs in progress, calculator values, display preferences.

10. Changes

We may change this policy, for example when a feature changes. The date at the top of the page shows the latest version. If there is a significant change, we will let you know by email or in the app.

11. Contact

For any question about your data: contact@saha-fit.com.