Veloce Fit: Calorie & Gym AI Privacy Policy
Your log is stored on your phone
Everything you log in Veloce Fit (food, workouts, gym sessions, rides, weigh-ins, height, birth year, sex, photos and the assistant chat) is stored on your device. No account is needed. Unless you sign in to the optional account (below), we see nothing of your log (only feedback you choose to send, see below). The sections below list everything that leaves your phone; all of it travels encrypted (HTTPS). Use Settings → More settings → Export to keep a copy. Settings → More settings → Delete all data erases the log, rides, photos and chat from the phone (and from your account, if you are signed in); uninstalling the app erases them from the phone, except the backup copy described below.
Optional account
In Settings → Account you can sign in with your Google account. This is optional, and the app works the same without it.
- What is kept to sign you in: Firebase Authentication (Google) keeps your Google account's email address, name and account id, and gives you an account id of ours.
- What is saved in the account: everything you log, as you go: food, workouts, gym sessions, weigh-ins, goals, height, birth year, sex, the assistant chat, your sports and, if you redeemed one, your Pro code's fingerprint. These records are stored in Google Firebase (Cloud Firestore); our security rules let only you, signed in, read or change them. Rides and your AI provider key are not saved.
- Photos: the meal photos (without their location metadata) are stored on Cloudinary, a photo hosting service, in a folder of your account. A photo can be opened by anyone who has its exact link; the links are random and long, are never shown or shared, and only your app uses them.
- Why: so that your data comes back after a reinstall or on a new phone, when you sign in again. It is not used for anything else, not analysed and not shared.
- Signing out keeps the data on the phone and stops saving it.
Backup
Android's Auto Backup copies the app's data (log, rides, photos, settings; not your AI provider key) to your own Google Drive, so it comes back on a new phone. This copy is kept by Google in your account, not by us, and it survives uninstalling the app. You can turn it off in your phone's Google backup settings.
What the AI assistant receives
When you send a message or a photo to the assistant, it goes to Google's Gemini API (through Firebase AI Logic) with the context it needs: today's log and totals, your goals, sports and app language, today's workouts and the last 10 messages of the chat. To answer, the assistant can also read, on its own initiative, other days' logs, your daily totals history, your profile (height, weigh-ins with their conditions, BMI, birth year, sex) and your workouts and gym lifts. Photos are sent without their location metadata. Scanning a gym machine sends its two photos, the app language and the names of the exercises you already logged; your lift history stays on the phone. Nothing is sent unless you tap Send or Scan.
The built-in AI uses Google's unpaid Gemini API tier. Under the Gemini API terms, Google may keep what is sent, use it to improve its products, including its AI models, and have human reviewers read it. Don't send the assistant anything you wouldn't want a reviewer to read: what Google keeps is out of our reach, and we can't have it deleted. To avoid this, you can use your own AI provider (below), under its own terms.
App integrity check
At every launch, and again from time to time while the app is open, Firebase App Check checks with Google that the app is the genuine one from Google Play. It sends Google a device integrity token and technical details of the phone and app (device model and brand, Android version, Firebase software versions), none of your log.
Your own AI provider (optional)
In Settings → AI provider you can use your own account with another AI provider (Google Gemini, OpenAI, Anthropic Claude, Mistral, Groq, OpenRouter, DeepSeek, xAI, or a server you run yourself). The same data described above then goes straight from your phone to that provider, with your API key, under that provider's terms. A server address must use HTTPS, unless the server runs on the phone itself. The key is stored encrypted on your phone, left out of backups, and is never sent to us.
Voice typing
Voice typing uses the speech recognition built into your phone (Google's or your device maker's service). The app only receives the recognized text; whether audio leaves your phone depends on that service's settings.
Location and Bluetooth
The speedometer uses GPS and, if you connect one, your e-bike's Bluetooth sensor to show your speed and record rides. Rides are stored on the phone and only leave it in your own export and backup. Location is never sent to us or to the AI.
Subscription and Pro codes
The Pro subscription and the optional tips ("Support the creator") are handled by Google Play. We receive no payment details. Whether Pro is active is stored on your phone and checked with Google Play.
If you redeem a Pro code (Settings → More settings → Redeem a code), a fingerprint of the code (its SHA-256 hash) is sent to Google Firebase (Cloud Firestore) to check it and count one use, and it is checked again at each launch. Nothing from your log is sent with it.
Same-day refund. Not convinced by Pro? Ask for a refund on the day you subscribe and you get your money back in full: use "Request a refund" in the app's Pro screen (leave your email so we can confirm), or request it from your Google Play order history. Google Play's own refund rules also apply.
Feedback and reports
When you send feedback, a feature idea or a refund request (Settings → Send feedback or Request a feature, or the Pro screen), or report an assistant reply (long-press the reply → Report), what you write, the reported reply and the reason you picked are sent to Super Veloce and stored in Google Firebase (Cloud Firestore), together with the app version, the operating system version and the app language. Your email is included only if you type it in the form, and is used only to answer you. Nothing else from your log is sent, and no identifier is attached. To have a message deleted, ask through Settings → Send feedback or the email on the Play Store listing, quoting its content.
Food product search
When you search foods, what you type (3 letters or more) is sent automatically, once you stop typing, to Open Food Facts (world.openfoodfacts.org), a free open food database run by a third party, to find branded products. The request also carries the app language code, the app's name (as its user agent) and, like any internet request, your IP address. The generic food table (ANSES-CIQUAL) and all exercises are stored in the app and work offline.
Analytics and ads
None. The app contains no analytics, tracking or advertising SDK.
Deleting your data
- Your account (Veloce Fit by Super Veloce): in the app, Settings → Account → Delete account erases at once the sign-in, your records and your account's details from Google Firebase; your photos are removed from Cloudinary within 30 days. The data on your phone is kept. If you no longer have the app, ask through the email on the Play Store listing, from the Google account you signed in with, and we delete the account within 30 days.
- On your phone: Settings → More settings → Delete all data erases your log, chat, photos and rides at once (and your records in the account, if you are signed in). Uninstalling the app also erases them from the phone (not the Android backup copy in your Google Drive, which you manage in Android's settings, nor your account).
- Feedback, feature ideas, refund requests and reports you sent: ask us to delete them through Settings → Send feedback or the email on the Play Store listing, quoting the message (or giving the email you left in it), since no identifier is attached. We delete them within 30 days. Nothing else is kept.
- Pro code: the use counted on a code cannot be traced back to you, so there is nothing to delete.
- AI requests and food searches are not kept by us. What Google (Gemini) and Open Food Facts keep under their own terms is out of our reach.
Children
The app is intended for adults (18 and over) and is not directed at children.
Changes
Changes to this policy are published here and in the app's Settings → More settings → Privacy.
Contact
Use the developer contact on the app's Play Store listing, or Settings → Send feedback in the app.