Privacy Policy

Last updated: August 12, 2026

TL;DR: We collect health data to power your AI coach. We encrypt everything. We never sell your personal health data. You control what gets shared — especially with insurance partners.

1. Who We Are

ObtAIn Fitness ("ObtAIn," "we," "us") is a health technology company based in Canada. We operate the website obtain.tech and the ObtAIn Fitness mobile application.

2. What Data We Collect

2.1 Account Information

When you sign up, we collect your name, email address, and password. Optional profile data includes age, height, weight, gender, fitness goals, and dietary preferences.

2.2 Health & Biometric Data

With your connected devices (smart ring, smart scale, or manual entry), we collect:

Heart rate and heart rate variability (HRV)
Sleep stages, duration, and sleep scores
Body composition (weight, body fat %, muscle mass, etc.)
Activity levels and step counts
Blood oxygen (SpO2) where supported
Skin temperature trends

2.3 Usage Data

We collect app usage patterns, feature interactions, and crash logs to improve the product. This is anonymized where possible.

3. How We Use Your Data

AI Coaching: To generate personalized daily briefings, meal plans, and training recommendations.
Product Improvement: To train and refine our AI models using aggregated, de-identified data.
Weekly Draw: To track egg hunt entries and select prize winners.
Insurance Partnerships (Opt-In Only): With your explicit consent, we may share verified, anonymized health trends with partner insurers to unlock discounted rates. You can revoke this anytime.

4. Data Storage & Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We use industry-standard cloud infrastructure with SOC 2 Type II compliance. Access to raw health data is restricted to essential engineering staff only.

5. Your Rights

Depending on your jurisdiction, you have the right to:

Access, correct, or delete your personal data
Export your data in a portable format
Withdraw consent for data sharing
Object to automated decision-making
Lodge a complaint with your local data protection authority

To exercise any of these rights, email privacy@obtain.tech.

6. Data Retention

We retain your account and health data for as long as your account is active. If you delete your account, we permanently erase your personal data within 30 days, except where legally required to retain it.

7. Third-Party Services

We use trusted third-party services for hosting, analytics, and payment processing. Each is bound by strict data processing agreements. We do not allow third parties to use your data for their own purposes.

8. Children's Privacy

ObtAIn Fitness is not intended for users under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us immediately.

9. Changes to This Policy

We may update this policy as our service evolves. Material changes will be communicated via email and in-app notification at least 30 days before taking effect.

10. Contact Us

Privacy questions? Reach us at privacy@obtain.tech or:

ObtAIn Fitness
Privacy Officer
Canada