WeightCoach

Privacy Policy

Effective 24 June 2026. Last updated 24 June 2026.

This Privacy Policy explains how AI Lab Pty Ltd (“we”, “us”, “our”), operating WeightCoach (the “App”), collects, uses, and discloses information when you use the App and the related services accessible at https://weight.ai-lab.com.au (together, the “Service”). By using the Service you agree to the collection and use of information in accordance with this policy.

1. Information we collect

1.1 Account information

We use Firebase Authentication. When you sign in (for example with Sign in with Apple), we receive a unique user identifier and, where you grant it, a private relay email address. We do not receive your real Apple ID password.

1.2 Profile and health-related information you provide

During onboarding and ongoing use you may provide:

This information is stored under your user document in our Firestore database and is only accessible by your authenticated account and our backend services. We treat this information as health and fitness information and do not sell it.

1.3 Apple Health (optional, iOS only)

If you grant permission, the App reads sex, date of birth, height, and latest body weight from Apple Health to pre-fill onboarding. With your permission we also write your manual weight log entries back to Apple Health so they remain in sync. Apple Health data is processed on your device; we never receive raw HealthKit samples on our servers beyond the single weight value you choose to log.

1.4 Coach prompts and responses (third-party AI)

The AI coach is powered by OpenAI, a third-party AI provider. Before any of your data is shared with OpenAI, the App asks for your explicit permission and explains what will be sent. We do not send anything to OpenAI until you grant that permission, and you can withdraw it at any time from the App’s Settings — after which the coach can no longer generate new suggestions.

When you ask the AI coach for advice (after you have consented), the App sends to our backend, and our backend forwards to OpenAI as a structured prompt:

We do not send OpenAI your name, email address, or Apple ID. OpenAI generates a single piece of advice, and the backend stores the resulting headline, detail, category, and timestamp under your user document. Per OpenAI’s API terms, prompts and completions sent through the API are not used to train OpenAI’s models.

1.5 Subscription information

Subscriptions are purchased through Apple’s in-app purchase system. Apple notifies our backend when your subscription starts, renews, or lapses. We store only the resulting entitlement state (active or not, product identifier, expiry date). We do not see your payment card or Apple ID password.

1.6 Diagnostics and crash logs

We may collect basic crash reports and operational logs (device model, OS version, app version, error traces) via Apple’s built-in tools and Cloud Logging. These do not contain your weight data or health information.

2. How we use information

We do not use your health information for advertising, and we do not sell your personal information.

3. Service providers (sub-processors)

The Service relies on the following third parties:

4. International data transfers

Our backend runs in Google Cloud Platform’s us-central1 region. If you are using the Service from outside the United States, your information will be transferred to and processed in the United States. We rely on contractual and platform-level safeguards offered by our providers for these transfers.

5. Data retention

We retain your profile, weight logs, and coach messages for as long as your account is active. If you delete your account (see Section 7) we delete your user document and associated subcollections within 30 days, except where we are required to retain limited records to comply with legal, tax, or audit obligations.

6. Security

Data is encrypted in transit (TLS) and at rest by our cloud provider. Access to your user document is restricted by Firestore security rules that scope reads and writes to the authenticated owner. Subscription entitlement is written only by our server-side webhook, never by the client.

7. Your rights

Depending on where you live (including under the EU/UK GDPR, the California Consumer Privacy Act, and the Australian Privacy Principles), you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to withdraw consent or object to certain processing. To exercise any of these rights, email support@ai-lab.com.au. We will respond within the timeframe required by applicable law.

You can also delete your account from inside the App, which removes your data as described in Section 5.

8. Children

The Service is not directed to children under 13 (or 16 where required by local law) and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Effective” date above and, where appropriate, by an in-app notice. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

10. Contact

Questions or requests can be sent to support@ai-lab.com.au. Postal address: AI Lab Pty Ltd, Australia.