Privacy policy

1. Who we are and what this policy covers

Bypass Inc. ("Fitoon", "we") operates the Fitoon iPhone app and the website fitoon.app. This policy explains what personal information we collect, why, who processes it on our behalf, where it goes, and the choices you have. It is written to meet Japan's Act on the Protection of Personal Information (APPI, 個人情報保護法) and Apple's App Store requirements. A Japanese version will be published before launch; [if the two differ, the Japanese version prevails].

Fitoon is a wellness and lifestyle app. It is not a medical device and does not provide medical care. See section 11.

2. Information we collect

We collect only what the features you use require. Items marked "sensitive" are health-related and are protected with the stricter handling described in section 9.

• Account: your email address and a password (stored only as a secure hash) or, if you choose Sign in with Apple or Sign in with Google, the identity token from Apple or Google and the email address it shares with us (which may be Apple's private relay address).
• Profile: display name, year of birth (to confirm you are 18 or older), body type chosen for the cartoon, height, activity level, dietary preferences and goal weight.
• Body data (sensitive): weights you log, scale photos you choose to send, body circumference estimates (waist, hip, thigh, chest, arms) and body-fat estimates produced by scans, and the shape parameters that drive your cartoon.
• Scan photos (sensitive): by default your front and side photos are processed on your iPhone and deleted immediately after the scan. Only if you turn on "Keep scan photos" in Settings are they uploaded, encrypted, to private storage under your account.
• Food, water and workout logs you tell Pochi about, including meal photos you send for analysis.
• Conversations with Pochi: text you type, transcripts of voice you dictate (speech is transcribed on your device), and Pochi's replies.
• Pochi's memory: facts, preferences and short summaries that Pochi derives from your conversations (for example a favourite breakfast or an upcoming trip), and a profile card that sums up your goals and how you like to be coached. They are stored with vector embeddings so Pochi can recall them later.
• Apple Health data (sensitive), only with your permission: weight, body fat, height, steps, active energy, exercise time, workouts, sleep and water. Steps and energy are synced as daily totals only.
• Cartoon and room: your avatar customization, closet items, coins, badges, streaks, friends and challenges.
• Purchases and usage: subscription status and receipts validated through Apple and RevenueCat, and the AI credits you use each month. We never see your card number.
• Device information: device model, iOS and app version, language, time zone, notification settings and push notification token, used to deliver notifications and keep the app working on your device.
• Support: messages you send to us and the email address you send them from.

3. How we use it

• To build and update your cartoon and estimate your measurements.
• To let Pochi log meals, weights and workouts, answer your questions, plan your day and send proactive reminders you have enabled.
• To calculate daily calorie and protein targets within the safety limits described in the Terms.
• To show progress in the Mirror, award coins and badges, and run friend challenges.
• To render transformation videos, cards and stickers on your device when you ask for them.
• To provide Plus and Pro subscriptions, meter AI credits, process referrals and prevent abuse.
• To keep the service secure, fix bugs and understand which features are used (aggregate statistics).
• To respond to support requests and to meet legal obligations.

We do not sell personal information, and we do not use it for third-party advertising. We do not build advertising profiles.

4. AI processing and transfers outside Japan (your consent)

Pochi is powered by large language models (LLMs) and vision models run by third-party providers. When you send a message, a meal photo or a scale photo, the content needed to answer (the message text, the photo, and relevant context such as your targets and recent logs) is sent to those providers to be processed. Some of these providers process data on servers outside Japan.

Under the APPI, transferring personal information to a third party in a foreign country requires your consent after we tell you about that country's rules and the provider's safeguards. You give this consent during onboarding, and you can withdraw it at any time in Settings by turning off AI features (Pochi will then be unavailable).

• Anthropic (United States): the large language model behind Pochi's chat, logging and coaching, and the vision model that reads meal and scale photos. [Describe the United States' personal-information regime and Anthropic's safeguards.]
• OpenAI (United States): text embeddings for Pochi's memory. The text of memories and conversation summaries, and the messages Pochi uses to search its memory, are sent to create embeddings. [Describe OpenAI's safeguards.]

Our contracts with these providers prohibit using your data to train their models and require it to be deleted after processing (zero data retention where the provider offers it). Scan photos used for the body scan are never sent to AI providers; segmentation and measurement run on your iPhone.

Our API runs on Cloudflare Workers, Cloudflare's global network, so your requests may be processed in the Cloudflare data center closest to you, including outside Japan. Your account data is stored in a PostgreSQL database hosted by Neon in [REGION — to be confirmed], and files such as meal photos and kept scan photos are stored, encrypted, in Cloudflare R2 [storage location to be confirmed].

5. Apple Health (HealthKit)

If you grant permission, Fitoon reads the Health data listed in section 2 and writes back weights, meals (energy, protein, fat, carbohydrates), waist circumference and body-fat estimates you create in Fitoon, marked with Fitoon as the source.

Health data is used only to provide the features you asked for. It is never used for advertising or marketing, never sold, never shared with third parties other than the processors that store your account data, and never disclosed to data brokers or used to make eligibility decisions. You can revoke access at any time in the iPhone Health app.

6. Who else processes your data

We use a small number of service providers (processors) who act on our instructions under contracts that protect your data:

• Apple: app distribution, Sign in with Apple, in-app purchases and delivery of push notifications to iPhone.
• Google: Firebase Cloud Messaging, which delivers our push notifications using your device's push token, and Sign in with Google if you choose it.
• RevenueCat (United States): subscription and trial management linked to your Fitoon account ID.
• Cloudflare: API hosting (Workers), background jobs and scheduled reminders (Queues and Cron Triggers), encrypted file storage (R2), account emails, content delivery and website hosting.
• Neon: hosting of the PostgreSQL database that holds your account data, in [REGION — to be confirmed].
• Anthropic and OpenAI: the AI providers listed in section 4.

We may disclose information when required by law, to protect the rights and safety of users, or as part of a merger or acquisition (we would tell you first). Friends you connect with see your cartoon, display name and the challenge stats you choose to share, never your weight or measurements unless you turn them on.

7. Retention and deletion

• Your account data is kept while your account is active.
• Meal photos you send are deleted automatically 90 days after upload unless you choose to keep them; the meal log itself stays.
• When you delete your account (Settings → Delete account, or by emailing us), your account is closed immediately. We delete your sign-in details (password and linked Apple or Google sign-ins), devices and push tokens, profile, uploaded photos and files, and Pochi's memories, episode summaries and profile card, and we remove your name and email address from the account.
• Activity records (weights, meals, workouts, water and sleep logs, scans and measurements, goals, conversations with Pochi, coins, badges, closet items and friend connections) stay linked to the closed account, which no longer contains your name or email address, until [PURGE SCHEDULE — to be confirmed].
• Scan photos are deleted on-device immediately after a scan unless you opted to keep them; kept photos can be deleted individually or all at once in Settings.
• Purchase records required by tax and accounting law are kept for the legally required period in a form that no longer identifies your health data.
• Aggregate statistics that cannot identify you may be kept indefinitely.

8. Your rights and choices

You can exercise these directly in the app, without contacting us:

• View and correct: edit your profile, logs and goals at any time.
• Export: Settings → Your data → Export gives you a JSON and CSV copy of your profile, weights, scans, meals and conversations.
• Pochi's memory: see what Pochi remembers about you and delete single memories, or all of them, at any time.
• Delete: Settings → Delete account closes your account and deletes the data described in section 7.
• Hide: hide the weight number everywhere, turn off Apple Health, notifications, kept photos or AI features.

Under the APPI you also have the right to request disclosure, correction, suspension of use and deletion of retained personal data, and to be told the purpose of use. Send requests to [email protected]. We will confirm your identity and respond within [two weeks]. If you believe we have not handled your data properly, you may also contact the Personal Information Protection Commission of Japan.

9. Security

• All traffic is encrypted in transit (TLS). Stored files are encrypted at rest and reachable only through short-lived signed links.
• Every request is authenticated, and our application code checks that it only reads or changes records that belong to the signed-in account. Staff access to our admin tools is limited to named staff accounts with specific roles.
• Body data, photos and conversations are classified as high-protection data with additional access controls.
• Secrets such as API keys are stored as encrypted Cloudflare secrets and are never shipped in the app.
• No system is perfectly secure. If a breach affects your data we will notify you and the authorities as the law requires.

10. Age requirement

Fitoon is for adults 18 and over. Age is checked at onboarding and younger users cannot create an account. If we learn that a person under 18 has provided personal information, we delete it. Parents or guardians who believe this has happened can contact us.

11. Not medical advice

Fitoon is a wellness and lifestyle app, not a medical device under Japan's Pharmaceuticals and Medical Devices Act (薬機法) or any other law. Measurements, body-fat percentages, calorie counts and Pochi's suggestions are estimates for personal tracking, not diagnosis, treatment or prevention of any condition. Pochi does not give medication or dosing advice. Consult a doctor before changing your diet or exercise if you have a medical condition, are pregnant, or take medication.

12. Changes to this policy

We may update this policy as the app evolves. For material changes, for example a new category of data or a new overseas provider, we will ask for your consent again in the app before the change applies to you. The "last updated" date at the top always reflects the current version.

13. Contact

Bypass Inc. · [ADDRESS] · Personal information manager: [NAME, TITLE] · [email protected]

Business operator information required by Japanese law is on the 特定商取引法に基づく表記 page.