Effective October 14, 2026
This Privacy Policy describes how Cuodi Beltran, doing business as Ding! Fitness (“we,” “us”) collects, uses, and protects your information when you use the Ding! Fitness mobile and web application (the “App”).
We collect the information you enter into the App (account email, body metrics, food logs and logged activity) so the App can track your progress and personalize your targets. We do not sell your data, do not show ads, and do not use third-party analytics or advertising trackers. You can delete your account and all associated data from the Profile screen at any time. On iPhone, you may optionally connect Apple Health; we read that data only to display your numbers inside the App and never use it for advertising, marketing, or sale (see “Apple Health (HealthKit)” below).
Account information. Your email address and a hashed password (managed by Firebase Authentication; we never see your plain-text password).
Profile information. Your name, age, sex (used for calorie calculations), height, weight, body fat percentage (optional), activity level, fitness goal, and an optional profile picture.
Health and fitness data. Your weight history, InBody scans (if entered), nutrition logs (calories, protein, carbs, fat, fiber, water), logged activity (type, minutes, calories burned), and other metrics you choose to track. Accounts created before October 2026 may also hold workout plans from earlier versions of the App; they are deleted with your account.
Food images and descriptions. If you photograph or describe a meal for AI analysis, the image and text are sent to OpenAI’s API for nutritional estimation. When you name a restaurant, the dish name may also be sent to OpenAI’s web-search model to look up published nutrition information. We do not store these images on our servers after analysis completes. We ask for your permission in the App before the first AI request.
Chat messages and other AI features. Conversations with the in-app AI coach, meal suggestions, and other AI features are processed by Google’s Gemini API to generate responses. So the coach can answer about your day, each coach message includes a summary of what you have logged in the App (foods, calories and macros, targets, water, workouts you logged, and weight check-ins). Data read from Apple Health is never included.
On iPhone, you may optionally connect Apple Health. If you grant permission, the App reads the following data from HealthKit, on a read-only basis, to reduce manual logging: your daily active energy burned and step count (for the last 30 days, shown on your dashboard), your workouts for the current day (type, duration, and calories), and your most recent body-mass (weight) sample. The App never writes to Apple Health.
We use HealthKit data solely to provide App functionality: to display your daily energy balance, steps and calories burned, to show the day’s workouts, and to seed a weight check-in. Daily step counts are read on your device for display and are not stored in your account. In keeping with Apple’s requirements, we never use HealthKit data for advertising or marketing, never sell it, and never disclose it to third parties (including our AI providers). Only compact daily aggregates (for example, the day’s total active energy and a single weight reading) are stored in your own private account to show your history; we do not store raw HealthKit samples.
Connecting Apple Health is entirely optional and the App works fully without it. You can revoke access at any time in iOS under Settings → Health → Data Access & Devices → Ding! Fitness (or in the Health app under Sharing → Apps), or by tapping Disconnect on the Profile screen. Revoking access stops all further reading immediately.
We do not collect: your precise location (GPS), your contacts, your browsing history, device identifiers for advertising purposes, biometric identifiers (Face ID / Touch ID are handled by your device’s operating system and never reach us), or data from other apps on your device. The App contains no third-party advertising SDKs and no third-party analytics SDKs.
We use the information you provide solely to operate the App: storing your data so you can view it across sessions, calculating personalized calorie and macro targets, generating AI-powered nutrition and coaching responses, displaying progress over time, and providing customer support when you contact us.
Firebase (Google LLC) — provides authentication, database (Firestore), serverless functions, and hosting. Your data is stored on Google Cloud infrastructure in the United States and is governed additionally by Google’s privacy practices.
OpenAI API (OpenAI, L.L.C.) — processes the food photos and meal descriptions you submit for macro estimation. It receives no profile details and never receives your email address, password, or Apple Health data. OpenAI may retain API inputs for a limited period as described in its published API data-usage policies, and does not use API data to train its models by default.
USDA FoodData Central and Open Food Facts — public nutrition databases. When you scan a barcode or search for a food, our servers send only the barcode number or food name to these services. Nothing that identifies you is sent.
Google Gemini API (Google LLC) — processes the text prompts and AI coach conversations you submit for all other AI features. Google may retain API inputs as described in their published API usage and privacy policies. Do not submit images containing sensitive personal information you would not want analyzed by an AI service.
Apple, Inc. and Google LLC (App Stores) — if you download the App from the Apple App Store or Google Play, the store provider may collect installation, purchase, and crash data per their respective policies. We do not control what the store collects.
Data in transit between your device and our servers is encrypted using TLS. Data at rest on Google Cloud is encrypted using Google’s standard server-side encryption. Each user’s data is stored under their unique Firebase user ID, and our security rules prevent users from reading or modifying other users’ data. No system is perfectly secure, and we cannot guarantee absolute security; if we become aware of a breach affecting your data we will notify you and applicable authorities as required by law.
We retain your data for as long as your account is active. You can delete your account and all associated data at any time from the Profile screen in the App. After you request deletion, your data is permanently removed from our active systems within thirty (30) days. Backups containing residual data may persist for up to ninety (90) days before being overwritten in normal rotation. To request deletion by email, contact [email protected].
Ding! Fitness is for adults. You must be at least eighteen (18) years old to use it, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us information, please contact [email protected] and we will delete the account promptly.
Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information, restrict or object to certain processing, and withdraw consent where processing is based on consent. Residents of California (CCPA/CPRA), the European Economic Area, the United Kingdom (GDPR/UK GDPR), and similar jurisdictions are entitled to these rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise any right, email [email protected]. We will respond within the time required by applicable law.
The App is operated from the United States and all data is stored on Google Cloud infrastructure in the United States. If you use the App from outside the U.S., you consent to the transfer and processing of your information in the United States, which may have different data-protection laws than your jurisdiction.
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. Material changes will be communicated in-app and the “Effective” date above will be updated. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
Questions about this Privacy Policy or your data? Email [email protected].