Privacy Policy

01Overview

This Privacy Policy explains how ZOR, operated by Ishan Patil (“ZOR”, “we”, “us”, or “our”), collects, uses, and protects your information when you use the ZOR mobile application and the website joinzor.com (together, the “Service”). Ishan Patil is the data controller for the personal information described in this policy.

Our approach is simple: we collect what coaching requires, and nothing that advertising wants. We do not sell your personal information, we do not show third-party ads, and we do not use your health data for marketing of any kind.

02What we collect

Account information

• Sign-in details - your email address and password (stored as a secure credential by Firebase Authentication, never in plain text) when you create an account. Email and password is currently the only sign-in method.

Profile information you provide

• Fitness goals, biological sex (for metabolic-rate accuracy), body weight, height, and age.
• Dietary preferences (e.g. vegetarian, vegan, keto, halal, kosher, Jain, sugar-free), allergies, preferred cuisine, and workout style and equipment.

Activity you log in the app

• Workouts, sets, reps, weights, and personal records.
• Meals, food descriptions, scanned barcodes, and nutrition logs.
• Water intake, streaks, body-weight entries, and rest days.
• Conversations with the AI coach and the coach's memory of your preferences (fully visible and editable by you in the app).
• Feedback you submit (bug reports, feature requests, meal/exercise ratings).

Photos (optional)

• Meal photos - if you use photo-based food logging, the photo is sent to our AI provider to estimate nutrition. Meal photos are processed transiently for the estimate.
• Progress photos - if you use the progress photo feature, photos are stored privately in your account. AI analysis of progress photos is strictly opt-in and can be disabled at any time in Settings.

Health data (optional)

If you choose to connect Apple Health (HealthKit) or Android Health Connect, we access the data described in Section 5. This connection is entirely optional; the app works without it.

Device and usage information

• A push notification token (if you enable notifications) and your time-zone offset (so reminders arrive at sensible local times).
• Basic usage counters (e.g. number of AI generations per day) used to enforce plan limits and keep the Service reliable.
• Crash and error diagnostics (device model, OS version, app version, and the technical state that led to a crash) so we can find and fix failures. Crash reports are not used for advertising or profiling.

03How we use your information

• To coach you - generating personalised workouts, meal plans, recipes, macro targets, recovery guidance, performance reports, and coach conversations.
• To personalise over time - your ratings, edits, and patterns adjust future recommendations.
• To run your account - authentication, subscription status, trial eligibility, and promo codes.
• To send notifications you control - workout reminders, meal-logging nudges, streak alerts, and check-ins. Every category can be turned off in Settings.
• To keep the Service safe and reliable - enforcing usage limits, preventing trial abuse, and debugging failures.

We do not use your information for third-party advertising, and we do not sell or rent it to anyone.

04AI processing

ZOR's core features are powered by large language models. When you generate a workout or meal plan, ask the coach a question, estimate macros from a description or photo, or request a performance report, relevant parts of your profile and activity data are sent to our AI provider to produce the response:

• OpenAI - workout and meal generation, macro estimation, photo-based food recognition, the conversational coach, and long-form performance reports.

OpenAI processes your data via its business API to generate responses on our behalf. Under its API terms, data submitted through the API is not used to train its models. We send only what a given feature needs, and your inputs are sanitised before they are included in any AI prompt.

05Health data (Apple Health & Health Connect)

If you connect Apple Health or Android Health Connect, ZOR may - with your explicit permission granted through the operating system - read:

• Steps and active energy burned
• Workouts recorded by other apps and devices
• Heart rate, resting heart rate, and heart-rate variability (HRV)
• Sleep data
• Body weight

With your permission, ZOR may also write back the workouts you log, your water intake, and body weight, so your data stays consolidated in your health store.

We use this data exclusively to power your Recovery Score, ZOR Score, health insights, and recovery-aware workout adjustments. In line with Apple's and Google's requirements:

• Health data is never used for advertising or other use-based data mining.
• Health data is never sold and never shared with third parties for marketing, advertising, or data-broker purposes.
• You can disconnect Health access at any time in your device settings, and delete stored data via account deletion.

06Sharing & service providers

We share data only with the service providers required to operate ZOR, and only to the extent needed:

We may also disclose information if required by law, or to protect the rights, safety, and integrity of ZOR and its users. If ZOR is involved in a merger or acquisition, your data may be transferred as part of that transaction; this policy would continue to apply.

The joinzor.com website

This website sets no cookies and uses no analytics or tracking. The only third-party request the site makes is to Google Fonts to load its typefaces, which involves your IP address being sent to Google (see the Google Privacy Policy). The site collects no personal information; if you email us, we receive what you send and use it only to respond.

07Data retention

• Your account data, activity history, and preferences are retained while your account is active, so your coaching keeps its memory.
• Meal photos used for macro estimation are processed for the estimate and are not kept as a photo library.
• Progress photos are retained until you delete them or delete your account.
• When you delete your account, your data is removed as described below.

08Account deletion

You can permanently delete your account and data directly in the app - no email required:

If you cannot access the app, email support@joinzor.com from your account email and we will delete your account for you. Step-by-step instructions are on our account deletion page.

Two narrow things survive deletion, solely to prevent repeated free trials: if your account used its free trial, we keep an anonymous, salted one-way hash of your account email and of your device's install identifier - never the raw values. These hashes cannot be reversed and are not linked to any of your deleted content. If you joined ZOR through another user's referral, the small reward record stored under that user's account (an account identifier and reward metadata only) is also retained.

09Security

• All data is encrypted in transit (TLS) and encrypted at rest on Google Cloud infrastructure.
• Access to your data is protected by per-user security rules - your records are readable only by your authenticated account.
• Progress photos are stored in private, owner-scoped storage.

No system is perfectly secure, but we design for least privilege and minimal collection: data we never collect is data that can never leak.

10Your rights

Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information (most profile data is directly editable in the app).
• Delete your information (available in-app, as described above).
• Port your data - request a copy in a machine-readable format.
• Object to or restrict certain processing.

To exercise any of these rights, email support@joinzor.com. We will respond within 30 days. We never discriminate against you for exercising your privacy rights. We do not sell personal information, so there is nothing to opt out of selling.

11Children

ZOR is not directed at children under 13, and we do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us personal information, contact us at support@joinzor.com and we will delete it.

12International data transfers

ZOR is operated from the United States, and our service providers process data in the United States and other countries. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses implemented by our providers.

13Changes to this policy

We may update this policy as the Service evolves. If we make material changes, we will notify you in the app or by email before the changes take effect, and we will always update the “Last updated” date above. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14Contact us

Questions, concerns, or requests about your privacy: