Privacy Policy for FitCoach AI Last updated: October 13, 2025 This Privacy Policy describes how Planetease (“FitCoach AI”, “Company”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal information when you use the FitCoach AI mobile application and related services (collectively, the “Service”). It also explains the choices you have with respect to your data and how the law protects you. By creating an account or otherwise using the Service, you agree to the practices described in this Privacy Policy. Contact Information Data Controller: Planetease Email: info@planetease.com Country of residence: Turkey Definitions • Account – a unique profile created for you to access the Service. • Application – the FitCoach AI mobile application. • Personal Data – any information relating to an identified or identifiable individual. • Service Providers – third parties that process Personal Data on our behalf (e.g., analytics, hosting, subscription management). • Usage Data – data collected automatically when you interact with the Service (e.g., device information, logs). • You – the individual user or the organization on whose behalf an individual accesses the Service. Information We Collect The categories of Personal Data we collect depend on how you use the Service: • Identity and Contact Data – email address, display name, and account identifiers. • Profile Data – information you choose to provide during onboarding such as age, height, weight, fitness goals, nutrition preferences, and equipment availability. • Subscription and Transaction Data – subscription status, product identifiers, renewal dates, and receipts supplied by Apple or Google. All billing transactions are handled by Apple App Store or Google Play; we do not store full payment-card data. • Body Photo Data (optional) – images you upload for premium photo-analysis features. These assets are processed only to deliver the feature and are not used for unrelated purposes. • Usage Data – device model, operating system, IP address, app version, pages or screens visited, session duration, and diagnostic events. • Support Correspondence – messages you send to us (for example, when you request help or exercise your privacy rights). How We Use Personal Data We process Personal Data for the following purposes: • Provide, personalize, and maintain the Service, including generating nutrition and training plans. • Manage your Account, including authentication, onboarding, and profile completion. • Fulfill subscription and contractual obligations, including premium feature access and receipts reconciliation. • Communicate with you about important updates, security alerts, and customer support requests. • Send optional product news, offers, or onboarding tips (you may opt out at any time). • Analyze usage trends, improve performance, and enhance user experience. • Detect, prevent, and address technical issues, misuse, or fraud. • Comply with legal obligations and enforce our agreements. • Support business transitions (e.g., merger or acquisition) where legally permitted. Legal Bases for Processing Depending on your location, we rely on one or more of the following legal bases: performance of a contract (to deliver the Service), legitimate interests (to secure and improve the Service), compliance with legal obligations, and your consent (for optional features such as marketing communications or photo uploads). Sharing Personal Data We do not sell Personal Data. We share it only with: • Hosting & Database Providers – Supabase (PostgreSQL, authentication, file storage) to store account and plan data. • Subscription Management – RevenueCat to manage App Store / Play Store subscriptions and entitlements. • Analytics and Diagnostics – services that help us measure performance and stability (e.g., Expo, platform diagnostics). • Authentication Providers – Apple, Google, and similar partners when you choose their sign-in methods. • Payment Platforms – Apple App Store and Google Play to process in-app subscriptions. • Professional Advisors – legal, accounting, or compliance professionals if needed. • Authorities or Third Parties – when required by law, to protect rights, investigate fraud, or respond to lawful requests. If we participate in a merger or asset sale, Personal Data may be transferred subject to this Privacy Policy. Retention We keep Personal Data only as long as necessary for the purposes described above or as required by law. Usage Data is typically retained for a shorter period unless needed to improve security or functionality. If you delete your account, we remove or anonymize associated Personal Data unless we must retain it to comply with legal or contractual obligations. International Transfers Your data may be processed in countries other than the one where you reside. When we transfer Personal Data internationally, we take reasonable steps to ensure it receives appropriate safeguards consistent with applicable privacy laws. Your Choices and Rights Depending on your jurisdiction, you may have the right to: • Access, correct, or update your Personal Data. • Delete your Personal Data and account (available in Settings → Account → Delete Account). • Object to or restrict certain processing activities. • Opt out of marketing communications. • Withdraw consent where processing is based on consent. To exercise your rights, contact us at info@planetease.com. We may ask you to verify your identity before fulfilling certain requests. You can also manage many settings directly within the app. Account Deletion You can initiate deletion from Settings → Account → Delete Account. Deletion removes your profile, plans, and optional body photos from our systems. Some data may be retained if we are legally required to keep it (e.g., unresolved obligations or dispute documentation). Security We implement commercially reasonable safeguards to protect Personal Data, including encryption in transit, access controls, and monitoring. However, no method of electronic transmission or storage is completely secure; we cannot guarantee absolute security. Children’s Privacy The Service is not intended for children under 13, and we do not knowingly collect Personal Data from them. If you believe a child has provided Personal Data without parental consent, contact us and we will delete it. Links to Third-Party Sites The Service may contain links to external websites or services. We are not responsible for their privacy practices. Please review the privacy policies of any third-party sites you visit. Changes to this Policy We may update this Privacy Policy to reflect changes to our practices or for legal reasons. We will post the revised policy with a new “Last updated” date and, when appropriate, provide additional notice. Continued use of the Service after updates constitutes acceptance of the revised policy. Contact Us If you have questions or concerns about this Privacy Policy or our data practices, please email us at info@planetease.com.