Privacy Policy
This policy explains what information Titan Fitness collects and how we handle it. It is written in plain language.
1. Who we are
The titanOS app ("Titan", "we", "us", "our") is operated by MA Corporate Pty Ltd (ABN 39 631 004 003), based in New South Wales, Australia, the seller shown for titanOS on the App Store. This Privacy Policy explains how we collect, use, and safeguard information when you use the Titan Fitness mobile and web application (the "Service"). If you have questions, contact us at support@titanfitness.app.
2. Information we collect
Account data you provide directly: name, email address, and password (stored hashed). Fitness data you log: workouts, sets, reps, weights, rest times, body measurements, goals, injuries, dietary preferences, allergies, and nutrition entries. Photos you submit: when you scan a meal, a menu or a nutrition label, the image you capture or upload is sent for macro estimation (section 4). Device data: basic technical details (platform, app version) needed to run the Service. If you turn on reminders, a notification token for your device, so we can deliver them; it is removed when you sign out. Gym membership: anyone can create an account; when you do, we check your email against the membership system of Titan Fitness Coogee to see whether you are already a member, so your gym pass can be linked. Nothing else is sent in that check.
3. How your data is stored
Your data is stored in Supabase (managed PostgreSQL). Row-Level Security policies restrict each row to its owning user - other users cannot read your workouts, meals, or profile. Data in transit uses TLS. Data at rest is encrypted by our infrastructure provider. We aim to retain your data for as long as your account is active.
4. Food photo reading, and your consent to it
Food photo reading sends what it needs to a third-party AI provider (Google Gemini, with OpenAI as a backup when Gemini is unavailable) through a server-side Titan proxy. API keys are held server-side and are not embedded in the app.
We ask you in the app before anything is sent, and nothing is sent until you agree. What goes: your meal photo or typed description when you scan or describe a meal; the menu photo and your question when you ask about a menu; and the photo of a nutrition panel when you read a label. Your name, email and contact details are not sent. Titan no longer sends your training history, goals or body stats to any AI provider: the AI coach chat, AI workouts, AI meal plans and the written read were switched off on 23 October 2026. The text of your messages is sent only if you switch on "Help shape the app" (section 6). One exception, if you have a coach: when your coach asks the app to suggest a message to you, a short summary is sent to the AI provider to draft it (counts such as sessions done and days with food logged, and the answers you tapped in your weekly check-in, never your note, your name or a red-flag check-in). Your coach reads and edits every suggestion before anything is sent to you.
You can withdraw consent at any time from More, then Settings, then Food photo reading. Turning it off stops all of the above; logging food, workouts and macros yourself is unaffected. Providers are engaged as subprocessors and process submissions under their own published API terms, which we select for protections at least equivalent to those described in this policy. Their terms govern whether a submission may be retained or used to improve their services, so do not submit content you would not want a third-party AI model to process.
5. Camera and photo library
The Service requests access to your camera and photo library only when you invoke the food scanner, take or choose a progress photo, or attach an image. For a meal, with your consent (section 4) the image is sent for macro estimation. The photo is then stored with that meal entry in a private storage area that only your account can read, so you can see it again in your log. It is deleted when you delete the entry or your account. Progress photos are never sent for AI processing; section 19 covers them. We do not use camera access for background capture or facial recognition.
6. Coaches, coach-client messaging and session requests
If you work with a coach in the app, that coach can see the workouts, nutrition and stats you choose to share with them through the share toggles on the My Coach screen, and nothing you have not switched on. Progress photos have their own toggle, which is off unless you turn it on: see section 19. Your gym's head coach is different: see section 18. When you message a coach or client, Titan stores the message body, sender, recipient, timestamps, read status, and moderation metadata needed to run the 1:1 chat. The two conversation participants can access the thread. Titan admins do not read your messages as a matter of course. An admin can read a message that has been reported, or your messages when a safety review, a support request you make, a legal requirement or an abuse report needs it. An admin must give a written reason each time they read these messages, and every read is logged with who, when and why. Using your chats to plan the app is your choice: only if you switch on "Help shape the app" in Settings (it is off unless you do) may the Titan team read your chats, from both sides of the conversation, and group them with other members' into topics that tell us what to build next. To sort them into topics the text of those messages is sent to an AI provider, without your name. Turning it off stops this for every message from then on. We do not sell message content or share it with advertisers. In a chat with a human coach or client you can report or block a conversation from the chat safety menu, and those messages are soft-deleted after 90 days under our retention job unless a report, legal hold, or safety review requires longer preservation. When you book a session or a free intro, the request (what you asked for, when suits you, your note, and the screen you asked from) goes to your coach, or to the gym's head coaches when nobody coaches you yet, and the time they book is sent back to you. It is kept with your account and deleted with it. The AI coach chat was switched off on 23 October 2026. Conversations you had with it are still stored, may be read by Titan admins on the same terms (a written reason each time, and every read logged), and are kept until you delete your account, which deletes them with it. Nothing new is sent to an AI provider from them.
7. Analytics and crash reporting
We record which screens and features you use, for example that you opened the food scanner or finished a workout, in our own database against your account. We use this to see what members actually use and to improve the product. It is never sold and is deleted with your account. We use Sentry for crash reporting and error monitoring. It receives limited device metadata, stack traces, and event breadcrumbs when something goes wrong. We exclude personally identifying content from these payloads where practical.
8. How we share information
We do not sell your personal data. We share information only with: (a) infrastructure subprocessors needed to operate the Service (Supabase, our AI providers, hosting, analytics); (b) parties you explicitly authorise; (c) parties required by law, subpoena, or to protect rights and safety; and (d) your gym, as follows.
If you agree at sign-up to share with your gym, Titan Fitness Coogee can see that you use the app, your goals, your experience level, how often you train and how active you are in the app, so the team can support you properly. This sharing never includes your food logs, your progress photos, your messages with a coach, your injury notes, or your weight and measurements. You can turn it off at any time in your profile, and nothing further is shared from that point. A head coach your gym appoints to coach in the app is separate from this sharing: see section 18.
The gym leaderboard and the "trained today" row show your first name, your initials or profile photo, and your training activity (workouts logged, streak and rank) to other members of your gym. New members start off the board and appear only once they choose to join; Home asks once. Accounts created before 24 October 2026 were on the board by default: Home asks those members once whether to stay on. You can leave at any time on the leaderboard itself (tap the scoreboard on Home). Nothing else from your account is shown there. Product suggestions on the Fuel tab (Suppstance, our supplement range) are computed on our servers and your device from your own goals, training days, diet settings and logged protein, and nothing about you is shared with Shopify until you choose to open the checkout, which runs on suppstance.com.au under its own privacy policy.
9. Cycle tracking (optional)
If you turn on cycle tracking, the period dates you log are stored only on your device. They are never sent to our servers, never shared, and never sent to any AI provider. We use them on-device to time gentle training and nutrition suggestions, such as highlighting iron-rich foods during your period. You can delete this data at any time from the cycle settings, and it is removed when you sign out or delete your account.
10. Connected health (optional)
You can connect Apple Health (iPhone), Health Connect (Android), WHOOP or Oura. Nothing is read until you connect, and you can disconnect at any time from More, then Connections, which stops all reading immediately.
From Apple Health or Health Connect, Titan reads five things: how long you slept, your resting heart rate, your heart rate variability where your watch records it, your step count, and workouts recorded by your watch. Your phone reduces this to one daily total per item before anything leaves the device. Titan only ever reads; it does not write to your health app.
From WHOOP or Oura, Titan reads the same daily items plus the daily score that product shows you (WHOOP Recovery and Strain, Oura Readiness and Sleep score) and, where you allow it, blood oxygen. This data arrives from their servers through ours, once every half hour, and only daily totals are kept. The sign-in tokens that allow this are stored encrypted and are revoked at the provider when you disconnect.
We store those daily aggregates against your account so your readiness can be measured rather than guessed. We never store raw readings, heart-rate series or sleep stages, and this data is never sent to an AI provider or to your gym. The one exception is your daily step count: your coach sees it only while you share your workouts with them, and your gym's head coach only while you share with them (section 18). Nothing else from your health data reaches a coach. Disconnecting stops new reading; days already shown stay in your history. All health data is deleted with your account.
11. Your rights
Under the Australian Privacy Act, GDPR (EEA / UK / Switzerland), and CCPA (California) you have rights to access, correct, export, or delete your personal data, and to object to certain processing. You can delete your account and all associated personal data at any time from More, then Settings, then Delete account. You may also email support@titanfitness.app to exercise these rights. We aim to respond within 30 days.
12. Children
The Service is not directed at children under 13 (or the applicable minimum age in your jurisdiction). If you believe a child has given us personal data, contact us and we will take steps to delete it.
13. Changes to this policy
We may update this policy from time to time. Material changes will be surfaced in the app or via email. The "Last updated" date above reflects the latest revision.
14. Contact
Questions about this Privacy Policy or your data? Email support@titanfitness.app. Effective date: 2026-05-22.
15. Where our food data comes from
Nutrition data in the Service comes from several sources. Packaged and barcoded products come from Open Food Facts (openfoodfacts.org), used under the Open Database Licence (ODbL). Whole and generic foods come from USDA FoodData Central (fdc.nal.usda.gov), which is in the public domain. Australian fast-food items come from each chain's own published nutrition guide. Remaining entries are curated by us. None of these sources receive your personal data: we read from them, we do not send anything about you to them.
16. Location (Eat nearby)
If you use Eat nearby, Titan asks for your location once, when you open it, to find food places within walking distance. Your phone rounds it to about 100 metres before it is sent to our server, which uses it only to look up nearby places from OpenStreetMap. We never store your location, never log it, and never share it with a coach, your gym or an AI provider. Titan never tracks your location in the background.
Ranking the places uses your calorie target and diet preferences on your phone; those are not sent for this. If you scan a menu from Eat nearby, the dishes and their estimated macros are saved to that place so the next person sees them; your name and account are not saved with them. Map data © OpenStreetMap contributors (openstreetmap.org/copyright).
17. Streaks, badges and Titan nudges
Titan, the character on your Home screen, keeps your daily streak, your weekly session goal and your badges.
What he counts: the days you log something and what kind it was (a meal, a workout, a check-in or a weight); your completed workouts against the training days in your weekly plan; and, for badges, how many workouts and personal records you have and whether you have logged a meal from a photo. He never reads what you ate, how much, your weight, your body measurements or what your check-ins say.
What is stored: a record of the days you logged something and what kind it was (no contents, amounts or food names), your streak and weekly goal, and the badges you have earned. All of it is deleted with your account. No AI is involved, and none of it is shared with your coach or your gym.
Notifications: if notifications are on, Titan sends at most one a day: an evening reminder on a day you have not logged (to save your streak or start one), a Thursday check on your weekly goal, or, if you have a weekly plan, a Monday kick-off. For now these reach iPhones only. They replace the older "Nothing logged today" notification. On an iPhone that receives these, with Titan nudges on, the daily log reminder on your phone pauses so you only get one, except on Mondays if you have a weekly plan, when the reminder stays because your Titan notification that day is the kick-off. Anywhere Titan cannot reach you, including Android, the reminder keeps working. Turn them off any time in Settings with "Titan nudges".
18. Your gym's head coach
Your gym can appoint a head coach: a member of the gym's staff who coaches in the app. The head coach sees your coaching data only if you allow it: switch on "Share with the gym's head coach" on the My Coach screen (it is off until you turn it on), or ask the front desk for help, which lets the head coach see it for 30 days so they can answer. While either applies, the head coach can see your training (workouts, sets and notes, training blocks and any pain you report), nutrition (food logs, water, calorie and macro targets), weight and body stats, onboarding answers (such as goals, injuries and allergies), meal and coaching plans and your daily step count, and can message you, change your calorie and macro targets, your goals and your training blocks, and send you meal and training plans, the same way your own coach can. Switching it off stops this straight away, unless you asked the front desk in the last 30 days.
Whatever you choose, the head coach can see your name and email, whether you have a coach and who it is, and, if your app account is linked to your gym membership, when you came in through the gym's front door (the day and time only).
The other share toggles on the My Coach screen apply to your own coach, not to the head coach. The first time a head coach messages you or changes your targets, goals or plans, you get a notification in the app naming them, and after that you can message them back from My Coach. Having a head coach does not change who your own coach is.
A head coach cannot see your conversations with your own coach or with the AI coach, the notes on your mood check-ins, your weekly check-ins (except as section 20 says), data from Apple Health, Health Connect, WHOOP or Oura (other than your step count while you share), your location, your progress photos or your gym-pass number, and cannot change your account details or your share settings.
19. Progress photos
Progress photos are photos of yourself that you choose to add: front, side or back, taken with the camera in the app or chosen from your photo library.
What is stored: the photo, resized, and a small copy of it for your timeline, in a private storage area that only your account can read; and with it the day it is for, the pose, when you added it and, if you added it after a workout, which workout. Nothing is written on the stored photo.
The stamp: the day number, that day's workout length, exercises and sets, the muscles trained and your weigh-in are worked out on your phone from your own logs and drawn over the photo while you look at it. They become part of an image only when you choose Share, and that image goes only where you send it. Titan never posts a photo for you.
Who can see them: only you, unless you turn on "Progress photos" in the share toggles on the My Coach screen. It is off to begin with. While it is on, the coach you work with can view your photos and the days they are for; they cannot add, change or delete them. Turning it off stops that, and so does pausing or ending the coaching relationship (a photo your coach already has open can stay on their screen for up to an hour). If you start working with that coach again it is off until you turn it on again. Your gym's head coach cannot see your progress photos unless they are also your own coach and you have turned this on for them. No other member, and no Titan admin screen, shows them.
Never sent to AI: progress photos are not sent to any AI provider and are not analysed. Titan does not estimate anything about your body from them.
Deleting: you can delete any photo from its own screen, which removes it from storage and from your coach's view. Deleting your account deletes all of them. On your phone, photos you have looked at are kept in the app's cache so they open quickly; that cache is cleared when you sign out.
20. Weekly check-ins
Once a week you can send a short check-in: your energy, recovery, how training and food went, whether anything hurts, what got in the way, whether you would like a chat, and an optional note. The number of sessions you did that week is added from your own log.
Who reads it: if you have your own coach, it goes to them and also appears in your chat with them, whatever your mood check-in share setting is. If you do not have a coach, it goes to your gym's head coach and the gym's coaching team. If what you write sounds like an emergency (for example chest pain, fainting, trouble breathing or thoughts of harming yourself), the head coach can see that check-in too, even if you have your own coach. Coaches record what they did about a check-in (for example replied or adjusted your program). If a check-in mentions pain or a medical word and your coach has not handled it within 48 hours, the gym's head coach can see it too, so someone covers it.
Alerts and reminders: when a check-in is marked for a person, the coach who reads it gets a notification naming you by first name (the notification on their lock screen does not say who it is or what you wrote). If you have not checked in by Saturday morning, the app may send you one reminder that week; turning off "Weekly check-in" or "Titan nudges" in Settings stops it.
Red flags: the app looks for words about pain, injury, symptoms, pregnancy, medication, eating concerns, low mood and emergencies. A check-in that has them is marked for a person to read and Titan, the AI, never drafts a reply to it. This is a simple word check, not a medical assessment, and check-ins are not watched around the clock: in an emergency call 000, and for support at any time call Lifeline on 13 11 14.
AI: your coach can ask Titan to suggest a reply to an ordinary check-in. Titan is given only your answers to the tap questions and your session count, never your note and never your name, and your coach reads, edits and sends the reply themselves. The suggestion and whether your coach used it are kept as a record. Deleting your account deletes your check-ins and these records.
21. Saying your set (voice)
During a workout you can tap Say it and say a set, like "3 sets of 10 at 40 kilos", or ask to swap the exercise, like "swap to dumbbell press". In the iPhone and Android app, Titan asks for the microphone and speech recognition the first time, and listens only after you tap Say it, until you stop talking or tap Stop. Your phone turns what you say into text on the device: the audio never leaves your phone, and Titan never records, keeps or sends it. The mic is only offered on phones that can do this on the device.
The text is read on your phone and shown to you as sets (or opens the swap list) before anything is saved; only the sets you choose to log are kept, like any set you type. The words you said are not saved. We count that a set was logged this way (how many sets and how long the text was), never what you said. If you use the microphone on your keyboard instead, that is your phone's own dictation, covered by Apple's or Google's privacy terms. No AI is used.
22. Photos, PDFs and voice notes in chat
In a chat with your coach you can send a photo, and a coach can send you a photo, a PDF or a voice note. A voice note is different from Say it (section 21): it is a recording that IS saved and sent to the person in that chat, and Titan asks for the microphone for it and tells you so before it records. Recording starts only after you tap Start recording and stops when you tap Stop (or at 5 minutes), and you can discard it before sending.
Who can open them: only you and the person in that chat. The files are kept in a private store and shown through short-lived links; nobody else, including your gym's head coach unless they are the one in the chat, can open them. They are never sent to any AI provider and are not analysed. They go when you or the other person delete the message after the usual 90-day clean-up, or when either account is deleted. Deleting your account deletes the files you sent.
23. Where your information goes
Your account and app data are stored in Sydney, Australia (Supabase). Some of the providers we use are overseas, so some of your information is likely to be disclosed outside Australia: Google (Gemini) and OpenAI in the United States, for the AI features described in sections 4 and 6; Expo in the United States, to deliver push notifications; Resend in the United States, to send email; and Sentry in Germany, for crash reports (section 7). Vercel serves the web app from its global network and does not store your data.
We take reasonable steps so that these providers handle your information consistently with the Australian Privacy Principles.