Privacy Policy

We at AutoGrow respect your privacy and are committed to protecting the personal information you share with us. This policy explains how information is collected, stored, and processed.

Automated Decision-Making

We use automated processing, including artificial intelligence, to generate your training programs, calorie and macronutrient targets, meal suggestions, and progress feedback from the details you provide. In most cases this output is delivered to you without prior review by a human professional. Meal photographs and free-text descriptions you submit are sent to third-party AI providers (OpenAI, Google) solely to produce that output.

These are informational fitness and nutrition suggestions — they do not produce legal effects and are not medical decisions. You may contact us at any time to ask how a particular result was produced, to request human review of it, or to object to automated processing.

Messages With Your Coach, and Translation

Messages between you and your coach are private to the two of you. They are not readable by anyone else, including AutoGrow administrators.

If you and your coach read the App in different languages, the text of a message is sent to a third-party AI provider (OpenAI) to be translated at the moment it is opened. Only the text of that message is sent — never your name, your account identifier, or any other detail about you or your health record. A message that nobody opens in another language is never sent anywhere. The original wording is always kept and stays available to both of you, and translations are stored so the same text is not sent a second time.

Information Collected in the App

During registration and use of the App, data such as full name, email, physiological data (weight, height, age), dietary preferences, workout logs, and files/images uploaded by you will be collected.

Health & fitness questionnaire. As part of onboarding you complete a health and fitness questionnaire, including a mandatory medical pre-screening (PAR-Q) and details of injuries, medical conditions, medications, training background, and personal goals. This health data is treated as sensitive, is used only to tailor your programs safely and to comply with the Israeli Sports Law, and is never used for advertising.

Support requests. When you contact us through the in-app Help Center, the content of your message and basic contact details are stored so we (or your coach) can respond and improve the service.

Health Data From Your Device (Apple Health / Health Connect)

In the mobile app, and only if you grant permission, AutoGrow reads nine things from your device's health store: your daily step count, your active energy burned, last night's sleep (its duration and, where your device records them, its stages), your resting heart rate, the distance you walked, ran or cycled and the workouts your phone or watch recorded (so a cardio session can be logged without typing it), your heart rate and heart-rate variability during a night your watch or band recorded (shown in the Sleep Lab and not stored), and your latest weight (so the calories a session burned are worked out for your current body). They are used to fill in your daily check-in and to keep your activity, recovery and calorie figures honest without you typing them.

AutoGrow only ever reads from the health store — it never writes anything back to Apple Health or Health Connect. What is read is stored in your own daily records in the App, is visible to you and to your coach like the rest of your check-in, and is deleted with your account. It is never sold and never used for advertising.

Two of these values reach an AI provider, and we would rather say so than imply otherwise. Your step count and how long you slept become part of your daily check-in, and your check-in is summarised into the context given to the AI that answers your questions in the App and writes your weekly feedback (OpenAI and Google, as described under Automated Decision-Making above) — which is how it can say anything useful about a hard week. Your sleep stages, your active energy, your resting heart rate, the night's heart rate and HRV, your distance and workouts and the weight read from the health store stay inside the App and are not sent to either.

You can refuse this at any time, and you can withdraw it after granting it — the App never holds the permission itself, your operating system does. Privacy & Security → Health Data Permissions shows what is connected and opens the system screen where you revoke it. Revoking stops the reading immediately; the App keeps working, with the manual entry it has always had.

Mood Journal and Wellness

If you use the evening card's mood row, the mood you pick, any tags and your short note are kept in a private journal visible to you alone — not to your coach. Breathing sessions you finish are kept the same way. Once a week our servers look for simple patterns in your own check-ins, moods and workouts (for example, whether nights with more sleep were followed by better days) and keep at most three; the App phrases them from fixed sentences. No AI provider sees your journal or these patterns. All of it is deleted with your account.

Cycle Tracking

If you turn on cycle tracking, the App keeps the start of your last period, the cycle length you set, and — for the days you log them — your flow and how your body felt. From these it estimates, on your phone, your next period and fertile window; the estimates are not contraception. This data is visible to you alone — not to your coach — is never sent to an AI provider, and is deleted with your account.

The Running Coach

If you start a running plan, the App keeps your goal, your starting level and which runs you have completed — visible to you alone and deleted with your account. The plan itself is worked out on your phone, and the spoken cues use your phone's own voice; nothing about them is sent anywhere.

The Sleep Lab

If you start a night in the Sleep Lab, the App uses your phone's motion sensor — and, only if you turn on "Listen for snoring", the microphone — while Night Mode is open. The microphone is used to measure how loud the room is, one number every quarter of a second; no sound is recorded, kept on your phone, or sent anywhere. From the movement and the loudness the App works out, on your phone, when you were probably asleep, estimated sleep phases and possible snoring. Only the night's resulting numbers (times, minutes, a score and any tags you add) are saved to your account — visible to you alone, not to your coach — and they are deleted with your account. They are not sent to any AI provider. The Sleep Lab is a wellness feature, not a medical device.

If you use a Sleep Lab night to fill in the sleep hours of your morning check-in, those hours become part of the check-in only when you save it — and like everything in a check-in, your coach can see them and Otto's feedback uses them. The night itself stays private.

Your Location

AutoGrow uses your device's location in two places, each only after you allow it, and stores your position in neither. The cardio tracker reads GPS on your device while a session runs, to measure distance and pace; only the totals (distance, pace, time and splits) are saved, never the route. If you turn on Shabbat & holidays mode with "Follow me on Shabbat eve", then in the six hours before candle lighting the App checks where you are and saves only the nearest town — its public name and the national registry's coordinates for it — on your profile until that Shabbat or holiday is out, so that candle-lighting times and the quiet hours for your reminders follow you when you travel. Your exact position is never stored and never leaves your device. You can switch the setting off, or remove the permission in your device settings, at any time.

Pausing Your Account, and the Evening Check-in

If you pause your account you can tell us why (for example a holiday, an injury or an illness) and add a short note and an end date. We keep them with your account so the pause can end on its own and, if you train with a coach, so your coach understands it. On the evening check-in you can say why a workout did not happen — what was behind tiredness, where it hurts on a day you were sick or injured (the same body areas as a pain report during a workout), or what you trained elsewhere and for how long. These answers are stored with that day's check-in, are visible to your coach if you have one, and are used only to adapt your plan and your reminders.

Steps Counted by Your Phone

If you allow it, the App reads your phone's own step counter (Android: "Physical activity"; iPhone: "Motion & Fitness") to show your steps without a watch or a health app. On Android the App keeps a small hourly record of the counts on your phone; only the day's total is saved to your account, as it is when you type it or sync it from Apple Health / Health Connect. You can withdraw the permission in your phone's settings at any time.

Error Reports

When something fails — a screen that runs into an error, the mobile app closing unexpectedly, or a fault on our servers while handling your request — a technical report is sent to our error-monitoring service (Google Cloud Error Reporting) so we can find and fix it: the error message, where in the code it happened, the screen you were on (its address, without anything after it), for the mobile app the device model and the versions of the operating system and the App, and for a fault on our servers your account identifier. We do not put your health data or anything you write into these reports, and they are kept for up to 30 days.

Training Buddies and Shared Plans

If you link a training buddy (both of you accept), each of you sees the other's display name, current check-in streak, the day of the last check-in, and how long you have been buddies — nothing else: no weights, meals, body data, photos or messages. If you join a challenge, its other participants also see your score in it — the one measured number it counts (days checked in, workouts, cardio minutes or steps) for its 7 or 14 days — and nothing more; declining or leaving shares nothing. A nudge sends your name to your buddy in a notification. If you share a Couple or Family plan, the member's access follows the paying owner's subscription, and the owner sees who holds the plan's seats. You can remove or block a buddy, or leave a shared plan, at any time; both links and seats are deleted with your account.

Your Chat With Otto

If you chat with Otto, the App's AI coach, the conversation is kept for 90 days, then deleted automatically: each message is deleted 90 days after it was written (normally within a day after that). So that Otto can follow the conversation, a short summary of it is kept too, and it is deleted automatically 90 days after your last message. Your messages are sent to our AI provider (OpenAI) to write Otto's replies. Your coach, if you have one, cannot see the conversation, and it is deleted with your account.

The Free Smart-Logging Trial

To keep the three free smart logs to one set per person, we keep a one-way keyed code derived from your verified email address, with the number of free tries used and requested and when they were first and last used. It cannot be turned back into your email, contains nothing else, and is kept after account deletion only to prevent repeat free trials, for no more than 3 years after it was last used.

To tell the real App from automated abuse, a free smart log may also be checked with Google reCAPTCHA Enterprise through Firebase App Check: signals from your device and browser (for example, how the page was loaded and used) are sent to Google for that check only. Google's Privacy Policy and Terms of Service apply to it.

Account Emails

Emails that verify your email address or reset your password are sent on our behalf by Google Firebase Authentication and contain a one-time link. Other emails about your account (a welcome message, confirmation of a deletion request, or a sign-in link if you ask for one) are sent through our email provider, Resend (United States). A verified email address is needed for the free smart-logging trial.

Purchases

If you buy a paid plan (in the App, on the web, through an app store, or as a coaching arrangement made directly with us), we keep the records a business must keep: evidence of your agreement at checkout (which texts and versions you accepted, when, a one-way code of your IP address and a description of your browser or device); your billing contact details, including a postal address, and confirmation that you are 18 or over; transaction documents and receipts; cancellation notices; claims that you were overcharged; refunds; and agreements for coaching made outside the App. These records are kept for 7 years, including after you delete your account, because tax and consumer-protection law require a business to keep them. After deletion they are used for nothing else, and payment records are pseudonymised (linked to a code rather than to your name). Card details are entered on the payment provider's page or in the app store and never reach us.

Promotional Messages

We send promotional messages (tips, offers, and news about paid features and plans) only if you opt in, separately for each channel, such as app notifications or email. The reminders you set are not promotional and do not depend on it. Opting in is never a condition of using the App, and you can withdraw at any time, in the App or from any message. We keep a record of each consent, refusal and promotional message sent for 7 years, as evidence under the Communications Law; after your account is deleted, that record is linked only to a one-way code of your email address, and a suppression list (one-way codes of the addresses that asked not to receive promotions) makes sure a deleted account is never sent one. As section 17ו of the Privacy Protection Law requires, every promotional message says that it is one, states your right to ask to be removed from our mailing list, names who holds the list (Almog Guma, Hadera, contact@joinautogrow.com) and says where your details came from (what you gave us in the App).

Limits on Repeated Cancellations and Seat Changes

To apply two limits (on buying again after two or more cancellations under the Consumer Protection Law within 12 months, and on changing who holds a shared plan's seat more than once every 30 days), we may keep a one-way keyed code of your email address and account, with the dates of those events. It is kept after your account is deleted only for that purpose, for 12 months.

Information Storage and Security (Google Firebase)

All personal and medical information is stored and secured using Google Firebase cloud services, which meet the strictest global information security standards (including data encryption in transit and at rest).

Use of Information

The information is used solely for operating the App, tailoring programs, and sending notifications. We commit not to sell or transfer your information to third parties for advertising purposes without your consent.

User Rights

The user has the right to review their information, update it, or request its complete deletion at any time via the App settings or by contacting customer service.

Account Deletion & Right to be Forgotten

You can delete your account directly from Profile → Delete account. Deletion requires a typed confirmation and starts a short grace period (during which you may cancel by contacting us), after which your profile and personal data — including questionnaire responses, logs, and uploaded images — are permanently removed from active systems. Limited records may be retained only where required by law or for legitimate accounting/audit purposes, including: those described above under The Free Smart-Logging Trial, Purchases, Promotional Messages and Limits on Repeated Cancellations and Seat Changes, each only for the purpose and the period stated there; a coded record that a business has already used its coach trial; and a record of administrative actions on the account, with the reason removed.

Your Rights under GDPR & CCPA

Depending on where you live you may have additional rights over your personal data. Under the EU/UK GDPR you have the right to access, rectify, erase, restrict, or object to processing, and to data portability. Under the California CCPA/CPRA you have the right to know what personal information we collect, to request its deletion, and to opt out of its "sale" or "sharing." We do NOT sell your personal information. To exercise any of these rights use Profile → Delete account or contact contact@joinautogrow.com; we will not discriminate against you for exercising them.

Children's Privacy (COPPA)

The App is intended for users aged 14 and over and is not directed to children under 14. We do not knowingly collect personal information from anyone under 14. If we learn that we have collected such information, we will delete it promptly.

Automated Processing & AI

Some features use automated processing and AI to personalize your programs (for example, estimating meal macros and drafting plans). Your training programme, calorie and macro targets and feedback are produced automatically — by fixed, rule-based formulas and by AI — and usually reach you without a person reviewing them first (a coach you work with may review what you receive). They are general wellness information, not decisions with a legal or similarly significant effect on you: they do not decide eligibility, prices or access to a service. For any question about how an automated result was produced, write to contact@joinautogrow.com.