Privacy Policy

Who Is Responsible

MaticFit is operated by Mubangizi Moses, who is the data controller for the personal data described here. Contact: hello@mosematic.com.

This policy applies to people in the European Economic Area and the United Kingdom, whose data is handled under the GDPR and the UK GDPR, as well as to users elsewhere.

What We Collect

• Account info (email, name) for authentication
• Workout data (exercises, sets, reps, weight)
• Body measurements and progress photos
• Nutrition logs, including photographs of meals you scan
• Health Connect data (steps, sleep, heart rate, weight, calories) — only when you grant permission

Health metrics, body measurements and progress photographs are special category data under Article 9. We process them only on your explicit consent, given when you create an account and again when you grant Health Connect permission. You can withdraw that consent at any time by revoking the permission or deleting your account, and withdrawal does not affect processing already carried out.

Health Connect

MaticFit uses Google Health Connect to read:

• Steps
• Sleep duration and quality
• Heart rate
• Weight
• Active calories burned

This data is used solely to personalise your fitness experience (readiness scores, recovery recommendations, AI coaching). We do not sell, share, or use your health data for advertising.

Why We Use It, and On What Basis

• Running your account and the app — to perform our contract with you (Article 6(1)(b)).
• Health, body and nutrition data — your explicit consent (Article 6(1)(a) and Article 9(2)(a)).
• Keeping the service secure and working — our legitimate interest in preventing abuse and diagnosing faults (Article 6(1)(f)).
• Billing for a Pro subscription — contract, and our legal obligation to keep tax records (Article 6(1)(b) and (c)).

We do not use your data for advertising or profiling for advertising.

AI Features and What Leaves Your Device

Some features send your content to a third-party model provider so it can be analysed. You are interacting with an AI system when you use them.

• Meal scan — the photograph of your meal is sent to Groq to estimate calories and macronutrients.
• Progress photo analysis — the photograph is sent to Groq, and to Google (Gemini) if the first request fails.
• AI coach — your message and relevant training history are sent to Groq to generate a reply.

Output from these features is an estimate produced by a model, not a measurement and not advice. Meal scan figures in particular are frequently inaccurate — see the Terms for what that means in practice.

Who Receives Your Data

We use the following processors, and no others:

• Supabase — database, authentication, and storage of progress photos
• Vercel — application hosting
• Groq — meal scan, progress photo analysis, AI coach
• Google — Gemini as the vision fallback, and Health Connect on your device

MaticFit runs no advertising pixels, no analytics trackers and no third-party marketing tags. Nothing is loaded before you consent, because there is nothing of that kind to load. We do not sell your personal data.

International Transfers

MaticFit is operated from Saudi Arabia and the processors above operate outside the EEA and the UK. Where your data is transferred out of the EEA or the UK, we rely on the European Commission's and the UK's standard contractual clauses in our agreements with those processors. You can ask us for details of the safeguards that apply.

How Long We Keep It

• Account, training, nutrition and health data — for as long as your account exists, and deleted when you delete it.
• Progress photographs — until you delete the photo or the account, whichever comes first.
• Photos sent for AI analysis — sent for processing and not retained by us beyond the resulting record. Retention by the model provider is governed by their terms.
• Billing records — kept for as long as tax law requires, typically six years.

Your Rights

If the GDPR or UK GDPR applies to you, you have the right to access your data, to have it corrected, to have it erased, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent at any time.

Exercise any of these by emailing hello@mosematic.com. We will respond within one month.

You also have the right to lodge a complaint with a data protection supervisory authority — in the EEA, the authority in the country where you live or work; in the UK, the Information Commissioner's Office at ico.org.uk. You do not have to contact us first.

Data Deletion

You can delete your account and all associated data at any time from the Profile page. Email hello@mosematic.com for manual deletion requests.

Age

MaticFit is not for children. You must be at least 16 to hold an account, and we do not knowingly collect data from anyone younger. If you believe a child has an account, email hello@mosematic.com and we will delete it.

Changes

When this policy changes materially we update the date at the top and record the new version against your account. The version you agreed to at sign-up stays recoverable.

Contact

Mubangizi Moses — hello@mosematic.com