Privacy Policy
Ascent Physique · Last updated: 22 August 2026
How Ascent Physique handles your data
By default, your data stays on your device. Ascent Physique has no account or login. Your profile name, workouts, nutrition logs, body-weight history, goals, and progress photos are stored locally on your device. Core fitness history is not sent to us unless you choose to use an online feature that needs it, as described below. Barcode lookups and subscription verification use only the limited information described in their own sections.
AI-powered features (optional)
Some optional features use AI to interpret your input. Only when you enable and use one of them, the relevant data is sent over an encrypted (HTTPS) connection to Google Cloud Functions, which forwards it to Google's Gemini API to generate a result and return it to your device:
| Feature | What is sent |
|---|---|
| Photo meal scan | The food photo you take |
| Describe a meal in words | The meal description you type |
| Log a workout by typing it | The workout description you type (e.g. "bench 3x8 at 80kg") and your weight-unit preference (kg/lbs) |
| Coach reports (weekly / monthly / program) | Summary training & nutrition figures — e.g. sessions completed, lifts and total volume, personal records, body-weight change, average calories/protein vs. your goals |
| "What's next" plan suggestion | The same kind of summary figures, plus the list of available plans |
Each AI request also carries two pseudonymous credentials needed to run the service: an anonymous RevenueCat app user identifier, used to verify Premium access and apply a per-user daily limit, and a Firebase App Check token, an app-install integrity credential backed by Apple's App Attest. The app has no account or login, and we do not send your name, email, or contact details.
Our backend uses the RevenueCat identifier transiently for the subscription check and stores only a keyed, one-way derived identifier with limited entitlement and quota information. It does not store the raw RevenueCat identifier, App Check token, or verified Firebase app ID. Because the stable anonymous identifier accompanies AI content, we conservatively disclose that content and identifier as linked to a user for App Store privacy purposes, even though they are not linked to a name, email, account profile, or real-world identity. They are not used for advertising or tracking.
Google states that API prompts and responses on this service are not used to train its models.
Barcode lookups
A barcode lookup sends the barcode number to Open Food Facts. The request also includes ordinary connection metadata such as the device IP address and this app's User-Agent, which identifies Ascent Physique and our support address — not you. We do not send your name, email address, account information or RevenueCat identifier to Open Food Facts. If you then log the product, that entry is saved in your nutrition history on this device.
Photos
Progress photos and any food photos you attach are stored on your device. A food photo is transmitted only if you use the photo meal-scan feature, and only to produce that estimate.
The app does not upload progress photos to us or intentionally sync them to iCloud. Their storage directory is marked as excluded from iCloud Backup. Progress photos are also not included in the current Backup & Data export, so keep a separate copy if you want to preserve them when changing devices.
Purchases and subscriptions
Subscriptions are purchased through and billed by Apple; we never receive or see your payment details. We use RevenueCat to validate subscription status. RevenueCat receives an anonymous app-generated identifier and Apple transaction data, but no name, email, or fitness data because the app has no account system. See RevenueCat's privacy policy.
Apple Health
Ascent Physique can optionally sync with Apple Health, reading weigh-ins and writing finished workouts and weigh-ins only after you grant the relevant iOS Health permissions. Data already written to Apple Health stays there under Apple's control. Deleting the app or using delete all data inside the app does not remove records previously saved to Apple Health; those records are managed in the iOS Health app.
Enabling Apple Health sync does not by itself send Health data to our servers. If you separately enable and use AI features, summary body-weight figures sent for AI processing may include weigh-ins imported from Apple Health, as described under "AI-powered features". We do not send raw HealthKit records or their source identifiers.
Service providers
- Google — Firebase App Check verifies app integrity, Cloud Functions processes AI requests and limited operational records, and the Gemini API generates AI results. See Google's Firebase privacy and security information, Google Cloud Privacy Notice, and Gemini API terms.
- Open Food Facts — barcode → nutrition lookup. Privacy policy
- RevenueCat — validates subscription status. Privacy policy
We share data with these providers only to deliver the features described in this policy, and only the data those features need. Each is engaged under terms that require them to protect the data in a manner consistent with this policy — including using it solely to provide the service to us, keeping it confidential and secure, and not selling it or using it for their own advertising. We do not authorise any provider to use your data for its own unrelated purposes.
Data retention
We do not operate user accounts. Our application backend does not write the content of AI requests or responses to its database or application logs. Google handles the request while providing App Check, Cloud Functions, and Gemini under the terms linked above.
Two further categories are worth naming plainly. The Firebase SDK bundled in the app reports limited technical diagnostics to Google — device model, operating system, app bundle identifier and developer platform — which Google uses to measure platform and version adoption. It is not linked to you, is not used for advertising, and we run no behavioural analytics. Separately, our backend runs on Google Cloud, whose standard infrastructure request logs record ordinary connection metadata such as the calling IP address, retained for up to 30 days; we do not use those logs to build a profile of you, and our own application logs never contain AI request or response content.
For subscription checks, abuse prevention, and daily AI limits, our backend keeps a small pseudonymous operational record containing a keyed identifier, cached Premium status, check time, and request count. These user-linked operational records expire automatically within 90 days. We also retain count-only daily reliability and security totals for up to 13 months; those aggregate totals contain no user or device identifier.
Your choices
AI features are off until you turn them on. The first time you use one, the app names the providers involved and asks for your permission; nothing is sent unless you agree. You can withdraw that permission at any time in the app's settings by turning AI features off, which stops further AI requests immediately and clears AI results cached on your device. If we materially change what is sent or who receives it, we ask again rather than relying on your earlier agreement.
The entire core app works without AI features. You can delete all data the app has stored at any time with the app's delete all data option in settings; because your data lives on your device, deleting the app also removes it.
Deleting app data wipes the app's local data from your device, subject to the Apple Health and exported-backup exceptions described here. It does not remotely delete the small pseudonymous operational records described above: because the app has no account with which to authenticate ownership, those records cannot be deleted remotely on demand and instead expire automatically within 90 days.
The app can export a backup as an unencrypted file containing your workout history, nutrition and water logs, body-weight and goal entries, achievements, saved meals and custom exercises, and your app preferences. It does not contain your progress photo files. Once exported, you are responsible for storing and sharing that file securely.
Website — free guide signup
If you request the free guide on our website, the email address you enter is collected through Kit (our email provider) and used to share the guide and occasional updates about the app. It is never sold or shared beyond that, and every email includes an unsubscribe option. The app itself never collects your email — this applies to the website form only.
Children
Ascent Physique is not directed to anyone under 18. We do not knowingly collect personal information from under-18s. If you believe a minor has provided us with personal information, contact us and we will delete it.