Privacy Policy – Zenith

Effective Date: 3/24/26

Zenith Strong LLC (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Zenith mobile application, website, and related services (collectively, the “Services”).

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Scope

This Privacy Policy applies to all users of Zenith and covers all data collected through the app, website, and any related services.

Zenith is designed to help users track workouts, monitor nutrition, and analyze fitness progress, including through personalized and AI-assisted features.

2. Information We Collect

a. Information You Provide

We may collect personal information you voluntarily provide, including:

  • Name and email address

  • Account login credentials

  • Profile details (age, height, weight, fitness goals)

  • Workout and exercise data

  • Nutrition and food tracking data

  • Progress metrics (weight, body measurements, goals)

  • Messages or support requests

b. Health and Fitness Data

To provide core functionality, Zenith collects:

  • Workout history (sets, reps, performance)

  • Nutrition data (calories, macros, food logs)

  • Body measurements and progress tracking

This data is used solely to provide and improve your experience.

c. Automatically Collected Information

We may automatically collect:

  • Device information (device type, OS version)

  • Usage data (features used, session activity)

  • Log and diagnostic data (crashes, errors)

  • Approximate location based on IP address

d. Information from Third Parties

We may receive information from:

  • Apple (for subscriptions and purchases)

  • Analytics providers

  • Authentication or hosting services

3. How We Use Your Information

We use your information to:

  • Provide, operate, and improve the app

  • Personalize workouts, nutrition, and recommendations

  • Track your progress and performance

  • Enable AI-powered features and insights

  • Process subscriptions and transactions

  • Respond to support inquiries

  • Maintain security and prevent fraud

  • Comply with legal obligations

Zenith offers optional AI-powered features, including Zenith Chat,

AI meal analysis (photo + text), **AI workout & program

generation**, body photo analysis, AI recovery insights, and

voice exercise logging. These features only run after you explicitly

grant consent inside the app ("AI & Your Data" screen) and can be

revoked at any time in Profile → Settings → AI & Privacy.

What data is sent. When and only when you trigger an AI feature,

Zenith sends the minimum data required for that request:

- Your typed prompts and chat messages

- Photos you upload (meals, body progress)

- Profile stats relevant to the request (age, sex, height, weight,

goals, dietary preferences, units)

- Recent workouts, meals, or readiness metrics when needed for context

- A short-lived account identifier so we can associate the response

with your session

No background telemetry, contacts, location, health-kit data, or

identifiers for advertising are sent to AI providers.

Who receives the data. AI requests are transported through Rork's

secure proxy (TLS) to the following sub-processors:

- OpenAI, L.L.C. — GPT-4.1 family of models (chat, reasoning,

structured output). https://openai.com/policies/privacy-policy

- Google LLC — Gemini 2.0 Flash (image understanding, structured

output). https://policies.google.com/privacy

Per their API terms, **neither provider trains models on data sent

through the API**, and data is retained only for a limited period for

abuse-monitoring purposes. Zenith does not sell your personal data to

any party.

How the data is used. Solely to produce the AI response you

requested (e.g. estimate calories from a meal photo, generate a

workout, answer a coaching question). Responses are returned to your

device, stored in your Zenith account so you can review them later,

and are never used for advertising or shared with third parties beyond

the sub-processors named above.

Your choices.

- AI features are opt-in. You can use Zenith without ever enabling

them.

- You can revoke consent any time in Profile → AI & Privacy, which

immediately disables all AI features in the app.

- You can request deletion of your account and stored AI responses by

emailing support@zenithstrong.com.

Equal protection. Each sub-processor named above is contractually

bound by their API terms to maintain confidentiality, security, and

data-handling standards equivalent to those described in this Privacy

Policy.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your data based on:

  • Contractual necessity (to provide the app’s services)

  • Legitimate interests (improving features, analytics, security)

  • Consent (where required)

  • Legal obligations

5. Data Sharing and Disclosure

We do not sell your personal data.

We may share your data with:

  • Service providers (hosting, analytics, infrastructure)

  • Payment processors (e.g., Apple)

  • Legal authorities when required by law

  • Business partners in the event of a merger or acquisition

All third parties are required to protect your data.

6. Data Retention

We retain your data only as long as necessary to:

  • Provide the Services

  • Maintain your account

  • Comply with legal obligations

  • Resolve disputes and enforce agreements

You may request deletion of your data at any time.

7. International Data Transfers

Your information may be transferred to and processed in countries outside your own, including the United States. We take reasonable steps to ensure your data is protected in accordance with applicable laws.

8. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Delete your data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent

To exercise your rights, contact:
📧 support@zenithstrong.com

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal data we collect

  • Request deletion of your data

  • Correct inaccurate data

  • Opt out of the sale of personal data

Zenith does not sell personal data.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no system is completely secure.

11. Children’s Privacy

Zenith is not intended for individuals under 13. We do not knowingly collect data from children.

12. Third-Party Services

Zenith may integrate with third-party services (e.g., Apple, analytics providers). These services have their own privacy policies, and we are not responsible for their practices.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted within the app and/or on our website with an updated effective date.

14. Contact Us

If you have any questions about this Privacy Policy:

Zenith Support
📧 kkornieck@zenithstrong.com
🌐 https://www.zenithstrong.com