Last updated August 20, 2026
Privacy policy.
CoreOne brings fitness coaching, workouts, nutrition, recovery, progress tracking, and community features together in one app. This policy explains which information CoreOne processes, why it is used, and the choices available to you.
Information we process
- Account and profile information: email address, name, profile photo, language, fitness goals, experience level, preferences, and account identifiers.
- Fitness and workout information: exercises, training plans, sets, repetitions, weights, workout history, personal records, and information you choose to enter about your performance.
- Health information: with your explicit permission, selected Apple Health and HealthKit information, including steps, heart rate, workouts, active energy, and related recovery signals.
- Nutrition information: meals, products, portions, calories, macronutrients, water intake, meal plans, shopping lists, favourites, and food-search or barcode information.
- Photos and camera content: photos you choose for your profile, community, progress, or meal analysis. Form Coach video is analysed on-device and is not uploaded or stored by CoreOne. Meal photos selected for AI analysis are transmitted securely for that requested analysis.
- Community content: posts, stories, comments, reactions, shared workouts or meals, reports, and connections. Published content can be visible to other CoreOne users according to the feature and privacy settings you choose.
- AI interactions: prompts, meal descriptions, images submitted for meal analysis, and responses needed to provide Kai coaching and AI-assisted features.
- Purchase information: subscription product, entitlement status, renewal or expiry status, and an app-specific customer identifier. Apple processes payment details; CoreOne does not receive your full payment-card information.
- Device and technical information: app version, device platform, notification token, language, diagnostic events, security information, and limited operational logs.
- Website and support information: feedback category, feedback message, contact requests, and optional contact information.
How we use information
We use information to create and secure your account; provide workouts, nutrition tracking, AI coaching, recovery insights, Apple Watch features, subscriptions, community features, notifications, customer support, and account deletion; synchronise information across your devices; prevent abuse; diagnose problems; and improve CoreOne.
CoreOne does not sell personal information. HealthKit information is never used for advertising, marketing, or sale to data brokers. We do not use your personal information for third-party targeted advertising.
Services and processors
CoreOne uses service providers only where needed to operate its features:
- Supabase for authentication, database, storage, and server-side functions.
- RevenueCat and Apple for subscriptions, purchase validation, and entitlement status.
- OpenAI for AI features such as Kai and meal analysis when you choose to use them.
- Open Food Facts and USDA FoodData Central for food and nutrition information.
- Expo for app infrastructure and push-notification delivery where enabled.
- Cloudflare and Resend for website hosting, security, analytics, email forwarding, and transactional product and support email.
- WhatsApp/Meta only when you voluntarily follow a link to join the external CoreOne WhatsApp Community.
These providers process information under their own terms and privacy commitments. Information may be processed in countries other than your own, with appropriate contractual and legal safeguards where required.
Apple Health and Apple Watch
Health and fitness permissions are optional. CoreOne requests access only when a feature needs it, and denying access does not prevent use of unrelated features. You can review or revoke CoreOne’s access at any time in Apple Health or device settings. CoreOne does not write health information without the permission required by Apple.
Sharing and visibility
We share information with service providers as described above, when you explicitly share content with another user, when required by law, or when necessary to protect users and the service. We do not automatically add you to external communities. Public or shared community content may be viewed, copied, or reshared by other users.
Retention and deletion
We keep information for as long as your account is active and as needed to provide CoreOne, comply with legal obligations, resolve disputes, prevent fraud, and maintain security. Feature-specific information can be removed through available app controls. You can delete your CoreOne account from the app. Account deletion removes or anonymises account-linked information from active systems, subject to limited legal, security, fraud-prevention, and backup retention requirements.
Security
We use technical and organisational measures intended to protect information, including encrypted network connections, access controls, row-level database security, and restricted server credentials. No service can guarantee absolute security.
Children
CoreOne is not directed to children under 13. If local law requires a higher minimum age or parental consent, that requirement applies. Contact us if you believe a child has provided information without the required permission.
Your choices and rights
Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete personal information, or withdraw consent. You can update profile information and delete your account in the app, manage HealthKit access in Apple Health, manage notifications in device settings, and manage subscriptions through your Apple account.
For privacy requests, contact contact@joincoreone.com. We may need to verify your identity before completing a request.
Changes
We may update this policy as CoreOne evolves. The latest version and its effective date will remain available on this page.