— Legal —
— Legal —
Diagofit Privacy Policy
Diagofit Privacy Policy
Diagofit Privacy Policy
Effective date: October 30, 2026 · Version: 2026-10-30
Effective date: October 30, 2026 · Version: 2026-10-30
Contents
Contents
This policy explains what personal information Diagofit collects through the Diagofit iPhone app and the website at app.diagofit.com (together, the "Service"), how we use it, who can see it, and the choices you have.
This policy explains what personal information Diagofit collects through the Diagofit iPhone app and the website at app.diagofit.com (together, the "Service"), how we use it, who can see it, and the choices you have.
"Diagofit", "we", "us" and "our" mean Diagofit LLC. "You" means a client or staff member who uses the Service.
"Diagofit", "we", "us" and "our" mean Diagofit LLC. "You" means a client or staff member who uses the Service.
We also publish a separate Consumer Health Data Privacy Policy (diagofit.com/health-data-privacy) that explains in more detail how we handle health information. If you live in Washington or Nevada, or anywhere else with a similar law, that policy applies to your health data alongside this one.
We also publish a separate Consumer Health Data Privacy Policy (diagofit.com/health-data-privacy) that explains in more detail how we handle health information. If you live in Washington or Nevada, or anywhere else with a similar law, that policy applies to your health data alongside this one.
1.
1.
The short version
The short version
The Service is for Diagofit coaching clients and staff only. Accounts are by invitation, and you must be 18 or older.
The Service is for Diagofit coaching clients and staff only. Accounts are by invitation, and you must be 18 or older.
You use the Service to follow your training, nutrition and protocol plans, log your progress, message your coaching team and take part in the Diagofit community.
You use the Service to follow your training, nutrition and protocol plans, log your progress, message your coaching team and take part in the Diagofit community.
Your coaching team sees the health and progress information you log. That is how coaching works.
Your coaching team sees the health and progress information you log. That is how coaching works.
Authorized Diagofit staff can read any message in the Service, including direct messages between members. Messages are not end-to-end encrypted. You agree to this separately when you sign up, and every time staff open a conversation they're not part of, it is logged.
Authorized Diagofit staff can read any message in the Service, including direct messages between members. Messages are not end-to-end encrypted. You agree to this separately when you sign up, and every time staff open a conversation they're not part of, it is logged.
Data from Apple Health is shared with your coaching team only if you turn sharing on, and you can turn it off at any time.
Data from Apple Health is shared with your coaching team only if you turn sharing on, and you can turn it off at any time.
We do not sell your personal information, we do not share it for targeted advertising, we show no ads, we send no marketing email, and we never use health data for marketing.
We do not sell your personal information, we do not share it for targeted advertising, we show no ads, we send no marketing email, and we never use health data for marketing.
Data from Apple Health is never sent to any AI service.
Data from Apple Health is never sent to any AI service.
You can see, correct, download or delete your data. See Section 10.
You can see, correct, download or delete your data. See Section 10.
2.
2.
Information we collect
Information we collect
2.1
2.1
Information you or Diagofit staff give us
Information you or Diagofit staff give us
Category
Category
Examples
Examples
Account and contact details
Account and contact details
Name, email address, profile photo, headline and bio, time zone, preferred units, and the role on your account (client or staff).
Name, email address, profile photo, headline and bio, time zone, preferred units, and the role on your account (client or staff).
Sign-in details
Sign-in details
Your email address and password, or the one-time sign-in links we email you. If you use Sign in with Apple, the name and email (or Apple's private relay email) that Apple shares with us. We never see your Apple password.
Your email address and password, or the one-time sign-in links we email you. If you use Sign in with Apple, the name and email (or Apple's private relay email) that Apple shares with us. We never see your Apple password.
Coaching details
Coaching details
Your coaching status and start and end dates, your tier (for example VIP), your goals, which coaches are assigned to you, and notes staff write about your coaching.
Your coaching status and start and end dates, your tier (for example VIP), your goals, which coaches are assigned to you, and notes staff write about your coaching.
Training
Training
The programs and workouts your coach assigns you, and the sets, reps, weights, rest times, notes and personal records you log.
The programs and workouts your coach assigns you, and the sets, reps, weights, rest times, notes and personal records you log.
Nutrition
Nutrition
Foods and meals you log (including barcode scans and quick-add entries), saved meals, the nutrition targets and plans your coach sets, and meal photos you choose to take.
Foods and meals you log (including barcode scans and quick-add entries), saved meals, the nutrition targets and plans your coach sets, and meal photos you choose to take.
Protocol and health logs
Protocol and health logs
See Section 2.2.
See Section 2.2.
Forms and check-ins
Forms and check-ins
Your answers to the onboarding questionnaire, weekly check-ins and daily habits forms (for example mood, sleep, energy, weight, side effects), and your coach's feedback.
Your answers to the onboarding questionnaire, weekly check-ins and daily habits forms (for example mood, sleep, energy, weight, side effects), and your coach's feedback.
Messages
Messages
Messages, voice notes, photos, videos and files you send in your coaching thread, direct messages, group messages and chat spaces, plus reactions, read status and timestamps.
Messages, voice notes, photos, videos and files you send in your coaching thread, direct messages, group messages and chat spaces, plus reactions, read status and timestamps.
Community content
Community content
Posts, comments, reactions, event RSVPs, course and lesson progress, and reports or blocks you make.
Posts, comments, reactions, event RSVPs, course and lesson progress, and reports or blocks you make.
Calendar
Calendar
Entries you or your coach add to your calendar (for example meal prep, appointments, reminders).
Entries you or your coach add to your calendar (for example meal prep, appointments, reminders).
Support and consent records
Support and consent records
What you send us when you contact us, and a record of each consent you give or withdraw, with the date, the version of the text you saw and the platform you used.
What you send us when you contact us, and a record of each consent you give or withdraw, with the date, the version of the text you saw and the platform you used.
2.2
2.2
Health information
Health information
Much of what you log in Diagofit is health information. It includes:
Much of what you log in Diagofit is health information. It includes:
1.
1.
Protocol information: the protocol your coach sets up for you (compounds, doses, routes, schedules and phases), the doses you log or skip, injection sites, post-injection pain scores, and the supplies you track (vials, pens, tablets).
Protocol information: the protocol your coach sets up for you (compounds, doses, routes, schedules and phases), the doses you log or skip, injection sites, post-injection pain scores, and the supplies you track (vials, pens, tablets).
2.
2.
Symptoms you report, including how much they affected your day.
Symptoms you report, including how much they affected your day.
3.
3.
Vital signs and body measurements: blood pressure, resting heart rate, weight, body fat and circumference measurements.
Vital signs and body measurements: blood pressure, resting heart rate, weight, body fat and circumference measurements.
4.
4.
Progress photos.
Progress photos.
5.
5.
Bloodwork: lab requests from your coach, lab reports you upload (PDFs or photos) and the results entered from them.
Bloodwork: lab requests from your coach, lab reports you upload (PDFs or photos) and the results entered from them.
6.
6.
Sleep, recovery and activity data from Apple Health, if you connect it (see Section 2.3).
Sleep, recovery and activity data from Apple Health, if you connect it (see Section 2.3).
7.
7.
Food logs and check-in answers, which can reveal health information.
Food logs and check-in answers, which can reveal health information.
8.
8.
Alerts the Service creates for your coaching team when a reading or result crosses a threshold the team has set (for example a very high blood pressure reading).
Alerts the Service creates for your coaching team when a reading or result crosses a threshold the team has set (for example a very high blood pressure reading).
We treat all of this as sensitive. Section 7 explains how we protect it, and our Consumer Health Data Privacy Policy gives the full detail.
We treat all of this as sensitive. Section 7 explains how we protect it, and our Consumer Health Data Privacy Policy gives the full detail.
2.3
2.3
Apple Health
Apple Health
Connecting Apple Health is your choice. The Service works without it, and you can enter the same kinds of information by hand.
Connecting Apple Health is your choice. The Service works without it, and you can enter the same kinds of information by hand.
With your permission on Apple's Health screen, the iPhone app reads: steps, active energy, resting heart rate, heart rate variability, sleep, weight, body fat percentage, blood pressure, and daily totals of calories, protein, carbohydrates and fat (which may come from other apps you use, such as MyFitnessPal). We only read from Apple Health. The app does not write to Apple Health.
With your permission on Apple's Health screen, the iPhone app reads: steps, active energy, resting heart rate, heart rate variability, sleep, weight, body fat percentage, blood pressure, and daily totals of calories, protein, carbohydrates and fat (which may come from other apps you use, such as MyFitnessPal). We only read from Apple Health. The app does not write to Apple Health.
2.4
2.4
Information we receive when we move you from Circle or Trainerize
Information we receive when we move you from Circle or Trainerize
If you were a Diagofit client before the Service launched, we import your account, community posts and comments, course progress, coach conversations and training history from Circle and Trainerize, so you don't lose your history. We do not import direct messages between members from Circle.
If you were a Diagofit client before the Service launched, we import your account, community posts and comments, course progress, coach conversations and training history from Circle and Trainerize, so you don't lose your history. We do not import direct messages between members from Circle.
2.5
2.5
Information collected automatically
Information collected automatically
1.
1.
Device and app information: device type, operating system and app version, and a push-notification token for your device.
Device and app information: device type, operating system and app version, and a push-notification token for your device.
2.
2.
Log and security information: IP address, request times and errors. When staff view someone else’s data, we record who did it, when and from which IP address.
Log and security information: IP address, request times and errors. When staff view someone else’s data, we record who did it, when and from which IP address.
3.
3.
Usage information: which screens and features are used, so we can improve the Service (see PostHog in Section 5). We do not include health information, messages or your name in these usage events. You can turn this off in the app (Profile → Settings → “Share anonymous usage analytics”) and on the website (Account).
Usage information: which screens and features are used, so we can improve the Service (see PostHog in Section 5). We do not include health information, messages or your name in these usage events. You can turn this off in the app (Profile → Settings → “Share anonymous usage analytics”) and on the website (Account).
4.
4.
Crash and error reports: technical details when something goes wrong (see Sentry in Section 5). We configure these reports to exclude health information and message content, and not to store IP addresses.
Crash and error reports: technical details when something goes wrong (see Sentry in Section 5). We configure these reports to exclude health information and message content, and not to store IP addresses.
On the website we use browser storage to keep you signed in, to remember your settings and to remember the email address you asked a sign-in link for. Our usage analytics (PostHog) keeps a random identifier in your browser's local storage instead of a cookie, and turns off when your browser sends a Do Not Track signal. We don't use advertising cookies or cross-site tracking.
On the website we use browser storage to keep you signed in, to remember your settings and to remember the email address you asked a sign-in link for. Our usage analytics (PostHog) keeps a random identifier in your browser's local storage instead of a cookie, and turns off when your browser sends a Do Not Track signal. We don't use advertising cookies or cross-site tracking.
3.
3.
How we use your information
How we use your information
We use your information to:
We use your information to:
1.
1.
Provide your coaching: show you your plans, record what you log, let your coaching team review your progress and adjust your plan, send reminders, and run your coaching thread.
Provide your coaching: show you your plans, record what you log, let your coaching team review your progress and adjust your plan, send reminders, and run your coaching thread.
2.
2.
Run the community: show your posts and profile to the members who can see a space, and run courses and events.
Run the community: show your posts and profile to the members who can see a space, and run courses and events.
3.
3.
Keep people safe and enforce our rules: review reports, check flagged content (some words and patterns, such as attempts to buy or sell substances, flag a post or message for staff review automatically), restrict or remove accounts, and respond to signs of a medical emergency or self-harm.
Keep people safe and enforce our rules: review reports, check flagged content (some words and patterns, such as attempts to buy or sell substances, flag a post or message for staff review automatically), restrict or remove accounts, and respond to signs of a medical emergency or self-harm.
4.
4.
Send you service messages: invitations, sign-in links, push notifications and important notices about the Service. Push notifications are worded neutrally and do not name compounds.
Send you service messages: invitations, sign-in links, push notifications and important notices about the Service. Push notifications are worded neutrally and do not name compounds.
5.
5.
Secure the Service: prevent fraud and abuse, and keep audit records of staff access.
Secure the Service: prevent fraud and abuse, and keep audit records of staff access.
6.
6.
Improve the Service: understand which features are used and fix bugs, using usage and error data that excludes your health information.
Improve the Service: understand which features are used and fix bugs, using usage and error data that excludes your health information.
7.
7.
Provide the optional AI feature you choose to use (Section 4).
Provide the optional AI feature you choose to use (Section 4).
8.
8.
Meet legal obligations and protect our rights.
Meet legal obligations and protect our rights.
We do not use your information for advertising, we do not build advertising profiles, we do not send marketing email, and we do not use health information (including anything from Apple Health) for marketing or for "data mining" unrelated to your coaching.
We do not use your information for advertising, we do not build advertising profiles, we do not send marketing email, and we do not use health information (including anything from Apple Health) for marketing or for "data mining" unrelated to your coaching.
4.
4.
AI meal photo analysis
AI meal photo analysis
One optional feature uses artificial intelligence provided by OpenAI.
One optional feature uses artificial intelligence provided by OpenAI.
What it does. If you choose to analyze a meal photo, we send OpenAI that photo and the optional note you add about the meal, and nothing else: no name, no account details, and no other health data. OpenAI suggests the foods and portion sizes, the nutrition numbers come from our own food database, and you confirm or change each suggestion before anything is logged.
What it does. If you choose to analyze a meal photo, we send OpenAI that photo and the optional note you add about the meal, and nothing else: no name, no account details, and no other health data. OpenAI suggests the foods and portion sizes, the nutrition numbers come from our own food database, and you confirm or change each suggestion before anything is logged.
Your permission first. Before the app sends your first photo, it asks for your permission. If you say no, nothing is sent and you can still log meals by search or barcode. You can turn the feature on or off at any time in Profile → Settings (“AI meal photo analysis”) or Profile → Consents.
Your permission first. Before the app sends your first photo, it asks for your permission. If you say no, nothing is sent and you can still log meals by search or barcode. You can turn the feature on or off at any time in Profile → Settings (“AI meal photo analysis”) or Profile → Consents.
What OpenAI does with it. We use OpenAI’s API under terms that do not allow OpenAI to use our data to train its models, and we ask OpenAI not to store the request. OpenAI may keep API requests for up to 30 days to monitor for abuse, and then deletes them.
What OpenAI does with it. We use OpenAI’s API under terms that do not allow OpenAI to use our data to train its models, and we ask OpenAI not to store the request. OpenAI may keep API requests for up to 30 days to monitor for abuse, and then deletes them.
We never send Apple Health data to any AI service, and no AI system makes decisions about you that have legal or similarly significant effects.
We never send Apple Health data to any AI service, and no AI system makes decisions about you that have legal or similarly significant effects.
5.
5.
Who can see your information
Who can see your information
5.1
5.1
Inside Diagofit
Inside Diagofit
Who
Who
What they can see
What they can see
You
You
Everything in your own account, except staff-only notes.
Everything in your own account, except staff-only notes.
Your assigned coaching team (your primary coach, any secondary coach and your client success manager)
Your assigned coaching team (your primary coach, any secondary coach and your client success manager)
Your profile, training, nutrition, calendar, forms and check-ins, protocol and dose logs, symptoms, vitals, measurements, progress photos, bloodwork, alerts and your coaching thread. Apple Health data only if you turn on Apple Health sharing.
Your profile, training, nutrition, calendar, forms and check-ins, protocol and dose logs, symptoms, vitals, measurements, progress photos, bloodwork, alerts and your coaching thread. Apple Health data only if you turn on Apple Health sharing.
Head coaches, admins and the owner
Head coaches, admins and the owner
The same as your coaching team, for every client.
The same as your coaching team, for every client.
Admins and the owner (and any staff member we specifically authorize)
Admins and the owner (and any staff member we specifically authorize)
Any message in the Service, including direct and group messages between members. This access is read-only, it is used only for the purposes in Section 3 (coaching, safety, rule enforcement, security and legal compliance), and every time they open a conversation they're not part of, it is recorded in an audit log.
Any message in the Service, including direct and group messages between members. This access is read-only, it is used only for the purposes in Section 3 (coaching, safety, rule enforcement, security and legal compliance), and every time they open a conversation they're not part of, it is recorded in an audit log.
Community moderators (staff with moderation rights)
Community moderators (staff with moderation rights)
Reported and flagged posts, comments and messages, and the tools to hide or remove them.
Reported and flagged posts, comments and messages, and the tools to hide or remove them.
Other members
Other members
Your name, profile photo, headline and bio; your posts, comments and reactions in spaces they can access; and messages you send them. Members never see your health data unless you post it in the community or send it to them yourself.
Your name, profile photo, headline and bio; your posts, comments and reactions in spaces they can access; and messages you send them. Members never see your health data unless you post it in the community or send it to them yourself.
Every time a staff member views a client's health records, we record it in an audit log.
Every time a staff member views a client's health records, we record it in an audit log.
5.2
5.2
Service providers
Service providers
We use the companies below to run the Service. They process your information only on our instructions and to provide their service to us, under contracts that require them to protect it. We don't let them use your information for their own purposes.
We use the companies below to run the Service. They process your information only on our instructions and to provide their service to us, under contracts that require them to protect it. We don't let them use your information for their own purposes.
Provider
Provider
What they do for us
What they do for us
What they handle
What they handle
Render Services, Inc. (Render)
Render Services, Inc. (Render)
Hosts our servers and database (Virginia, US)
Hosts our servers and database (Virginia, US)
All Service data
All Service data
Cloudflare, Inc. (Cloudflare R2)
Cloudflare, Inc. (Cloudflare R2)
Stores the files you and your coaches upload
Stores the files you and your coaches upload
Photos, videos, voice notes, lab reports, plan documents, data exports
Photos, videos, voice notes, lab reports, plan documents, data exports
Mux, Inc. (Mux)
Mux, Inc. (Mux)
Hosts and streams course and coach videos
Hosts and streams course and coach videos
Those video files and viewing data (for example device and playback quality). Videos sent in messages are stored with Cloudflare, not Mux
Those video files and viewing data (for example device and playback quality). Videos sent in messages are stored with Cloudflare, not Mux
Google LLC (Firebase)
Google LLC (Firebase)
Sign-in (Firebase Authentication, including one-time sign-in links) and push notifications (Firebase Cloud Messaging)
Sign-in (Firebase Authentication, including one-time sign-in links) and push notifications (Firebase Cloud Messaging)
Name, email, sign-in identifiers, device push tokens. Push messages contain no health details
Name, email, sign-in identifiers, device push tokens. Push messages contain no health details
Plus Five Five, Inc. (Resend)
Plus Five Five, Inc. (Resend)
Sends our emails: sign-in links and invitations
Sends our emails: sign-in links and invitations
Your email address and the email itself. These emails contain no health details
Your email address and the email itself. These emails contain no health details
Functional Software, Inc. d/b/a Sentry (Sentry)
Functional Software, Inc. d/b/a Sentry (Sentry)
Error and uptime monitoring
Error and uptime monitoring
Technical error data; configured to exclude health data and message content, and not to store IP addresses
Technical error data; configured to exclude health data and message content, and not to store IP addresses
PostHog Inc. (PostHog)
PostHog Inc. (PostHog)
Product usage analytics (US hosting)
Product usage analytics (US hosting)
Usage events linked to your account ID, and your approximate location (city and country) worked out from your IP address, which is then discarded; no health data, no email address. You can turn it off (Section 2.5)
Usage events linked to your account ID, and your approximate location (city and country) worked out from your IP address, which is then discarded; no health data, no email address. You can turn it off (Section 2.5)
OpenAI OpCo, LLC (OpenAI)
OpenAI OpCo, LLC (OpenAI)
Meal photo analysis, only when you use it (Section 4)
Meal photo analysis, only when you use it (Section 4)
The meal photo and your optional note; never Apple Health data
The meal photo and your optional note; never Apple Health data
Apple
Apple
App distribution and, if you use it, Sign in with Apple
App distribution and, if you use it, Sign in with Apple
Information covered by Apple's own privacy policy
Information covered by Apple's own privacy policy
5.3
5.3
Labs
Labs
If your coach gives you a link to order bloodwork from a lab, the order is between you and that lab, and the lab's privacy policy applies.
If your coach gives you a link to order bloodwork from a lab, the order is between you and that lab, and the lab's privacy policy applies.
5.4
5.4
Legal and safety reasons
Legal and safety reasons
We may disclose information if we believe in good faith that it is required by law (for example a valid subpoena, court order or search warrant), or that it is needed to prevent death or serious physical harm. Unless the law or the circumstances prevent it, we will tell you before we disclose your information in response to a legal demand.
We may disclose information if we believe in good faith that it is required by law (for example a valid subpoena, court order or search warrant), or that it is needed to prevent death or serious physical harm. Unless the law or the circumstances prevent it, we will tell you before we disclose your information in response to a legal demand.
5.5
5.5
Business changes
Business changes
If Diagofit is involved in a merger, acquisition or sale of assets, your information may transfer to the new owner. It will remain subject to the promises in this policy, and we will tell you before it becomes subject to a different policy.
If Diagofit is involved in a merger, acquisition or sale of assets, your information may transfer to the new owner. It will remain subject to the promises in this policy, and we will tell you before it becomes subject to a different policy.
5.6
5.6
What we don’t do
What we don’t do
We do not sell personal information. We do not share personal information for cross-context behavioral (targeted) advertising. We don't give personal information to data brokers or to third parties for their own marketing. Because we don't sell or share it, there's nothing to opt out of, and we treat a Global Privacy Control signal as a request not to sell or share, which we already honor. We don't track you across other companies' websites or apps.
We do not sell personal information. We do not share personal information for cross-context behavioral (targeted) advertising. We don't give personal information to data brokers or to third parties for their own marketing. Because we don't sell or share it, there's nothing to opt out of, and we treat a Global Privacy Control signal as a request not to sell or share, which we already honor. We don't track you across other companies' websites or apps.
6.
6.
Messages and community content
Messages and community content
When you post in the community or send a message, we store the content, attachments, the people in the conversation and the times.
When you post in the community or send a message, we store the content, attachments, the people in the conversation and the times.
1.
1.
Your coaching thread is with your whole coaching team, not one person. Staff can also add internal notes that you don’t see.
Your coaching thread is with your whole coaching team, not one person. Staff can also add internal notes that you don’t see.
2.
2.
Direct and group messages are not private from Diagofit. As described in Section 5.1, authorized staff can read them, read-only, and each such access is logged. Messages are encrypted while being sent and while stored on our servers, but they are not end-to-end encrypted.
Direct and group messages are not private from Diagofit. As described in Section 5.1, authorized staff can read them, read-only, and each such access is logged. Messages are encrypted while being sent and while stored on our servers, but they are not end-to-end encrypted.
3.
3.
Deleting a message replaces it with a “message deleted” placeholder, removes its text from our database and deletes its attachments.
Deleting a message replaces it with a “message deleted” placeholder, removes its text from our database and deletes its attachments.
4.
4.
Reporting and blocking: you can report any post, comment, message or member, and block a member. Moderators review reports promptly.
Reporting and blocking: you can report any post, comment, message or member, and block a member. Moderators review reports promptly.
7.
7.
How we protect your information
How we protect your information
1.
1.
Information is encrypted in transit (HTTPS/TLS) and encrypted at rest by our hosting and storage providers.
Information is encrypted in transit (HTTPS/TLS) and encrypted at rest by our hosting and storage providers.
2.
2.
Health information is kept in a separate, restricted part of our database, apart from other data. Health files (progress photos, lab reports, meal photos) are kept in private storage and can only be opened through short-lived links.
Health information is kept in a separate, restricted part of our database, apart from other data. Health files (progress photos, lab reports, meal photos) are kept in private storage and can only be opened through short-lived links.
3.
3.
We remove hidden metadata, such as the location where a photo was taken, from every image you upload.
We remove hidden metadata, such as the location where a photo was taken, from every image you upload.
4.
4.
Staff access is limited by role, and staff views of health records and other members’ conversations are logged.
Staff access is limited by role, and staff views of health records and other members’ conversations are logged.
5.
5.
We keep health information out of push notifications, analytics events and error reports.
We keep health information out of push notifications, analytics events and error reports.
No system is perfectly secure. If a breach affects your information, we will notify you and the authorities as the law requires.
No system is perfectly secure. If a breach affects your information, we will notify you and the authorities as the law requires.
Diagofit is a coaching business, not a healthcare provider or health plan, and it does not bill insurance. The federal health privacy law HIPAA generally does not apply to Diagofit, so we don't describe the Service as HIPAA compliant. We protect your health information under this policy, our Consumer Health Data Privacy Policy and the state and federal laws that do apply.
Diagofit is a coaching business, not a healthcare provider or health plan, and it does not bill insurance. The federal health privacy law HIPAA generally does not apply to Diagofit, so we don't describe the Service as HIPAA compliant. We protect your health information under this policy, our Consumer Health Data Privacy Policy and the state and federal laws that do apply.
8.
8.
How long we keep information
How long we keep information
When your coaching ends, you keep read-only access to your own data for 30 days, so you can review it and download a copy. After that we close your account, and your data follows the table below. You can download or delete your data at any time before then.
When your coaching ends, you keep read-only access to your own data for 30 days, so you can review it and download a copy. After that we close your account, and your data follows the table below. You can download or delete your data at any time before then.
Information
Information
How long
How long
Account, coaching, training, nutrition and health records (including Apple Health data)
Account, coaching, training, nutrition and health records (including Apple Health data)
While your account is open, and for 12 months after your coaching ends, so you can come back without losing your history. Then we delete it. You can delete it sooner by deleting your account.
While your account is open, and for 12 months after your coaching ends, so you can come back without losing your history. Then we delete it. You can delete it sooner by deleting your account.
Apple Health data after you disconnect
Apple Health data after you disconnect
Disconnecting Apple Health stops new syncing; it doesn’t remove what was already synced. To delete it, email info@diagofit.com, or delete your account.
Disconnecting Apple Health stops new syncing; it doesn’t remove what was already synced. To delete it, email info@diagofit.com, or delete your account.
Messages and community content
Messages and community content
Until your account is deleted.
Until your account is deleted.
Audit logs (staff access records) and consent records
Audit logs (staff access records) and consent records
3 years, so we can show who accessed data and what you agreed to.
3 years, so we can show who accessed data and what you agreed to.
Reports and moderation decisions
Reports and moderation decisions
2 years.
2 years.
Error reports
Error reports
90 days.
90 days.
Usage analytics
Usage analytics
12 months.
12 months.
Your data export file
Your data export file
Kept in your account, readable only by you, until you request a new export or delete your account. Each download link stops working after about an hour.
Kept in your account, readable only by you, until you request a new export or delete your account. Each download link stops working after about an hour.
Backups
Backups
Deleted data can remain in encrypted backups for up to 30 days until the backups are overwritten.
Deleted data can remain in encrypted backups for up to 30 days until the backups are overwritten.
When you delete your account, we delete or de-identify your personal information within 30 days, except audit and consent records (kept as listed above) and anything we must keep to meet a legal obligation, resolve a dispute or enforce our agreements. Community posts and messages you sent to others stay in those conversations, shown as from "Deleted user", with your name and photo removed.
When you delete your account, we delete or de-identify your personal information within 30 days, except audit and consent records (kept as listed above) and anything we must keep to meet a legal obligation, resolve a dispute or enforce our agreements. Community posts and messages you sent to others stay in those conversations, shown as from "Deleted user", with your name and photo removed.
9.
9.
Your choices
Your choices
1.
1.
Apple Health: connect or disconnect it in Profile → Connected apps. Turn sharing with your coaching team on or off in Profile → Consents. You can also turn off Diagofit’s access in the iPhone Health app.
Apple Health: connect or disconnect it in Profile → Connected apps. Turn sharing with your coaching team on or off in Profile → Consents. You can also turn off Diagofit’s access in the iPhone Health app.
2.
2.
AI meal photo analysis: turn it on or off in Profile → Settings or Profile → Consents.
AI meal photo analysis: turn it on or off in Profile → Settings or Profile → Consents.
3.
3.
Usage analytics: turn it off in Profile → Settings in the app, or on the Account page of the website.
Usage analytics: turn it off in Profile → Settings in the app, or on the Account page of the website.
4.
4.
Consents: review and withdraw your optional consents in Profile → Consents in the app, or on the Account page of the website. Withdrawing doesn’t affect what happened before you withdrew. Some consents are needed to use the Service (agreeing to the Terms and this policy, being 18 or older, staff access to messages, and the collection of health data). If you withdraw consent to the collection of health data, you can no longer use the Service, apart from downloading your data or deleting your account, until you give it again.
Consents: review and withdraw your optional consents in Profile → Consents in the app, or on the Account page of the website. Withdrawing doesn’t affect what happened before you withdrew. Some consents are needed to use the Service (agreeing to the Terms and this policy, being 18 or older, staff access to messages, and the collection of health data). If you withdraw consent to the collection of health data, you can no longer use the Service, apart from downloading your data or deleting your account, until you give it again.
5.
5.
Notifications: choose which push notifications you get in Profile → Notifications, or in your device settings.
Notifications: choose which push notifications you get in Profile → Notifications, or in your device settings.
6.
6.
Camera, photos and microphone: the app only asks for these when you use a feature that needs them, and you can change them in your device settings.
Camera, photos and microphone: the app only asks for these when you use a feature that needs them, and you can change them in your device settings.
10.
10.
Your rights
Your rights
Wherever you live, you can ask us to:
Wherever you live, you can ask us to:
1.
1.
Know and access the personal information we hold about you, including the categories of information, where it came from, why we use it and who we have shared it with;
Know and access the personal information we hold about you, including the categories of information, where it came from, why we use it and who we have shared it with;
2.
2.
Correct information that is wrong;
Correct information that is wrong;
3.
3.
Delete your information and your account;
Delete your information and your account;
4.
4.
Get a copy of your information in a portable, machine-readable format;
Get a copy of your information in a portable, machine-readable format;
5.
5.
Withdraw consent you have given; and
Withdraw consent you have given; and
6.
6.
Get a list of the third parties we have shared your health information with (see our Consumer Health Data Privacy Policy).
Get a list of the third parties we have shared your health information with (see our Consumer Health Data Privacy Policy).
How to ask:
How to ask:
1.
1.
Download your data yourself: in the app, Profile → Account → Download my data; on the website, Account → Download my data. You get one file with your profile, consents, training, nutrition, health records, the messages you sent, your posts and links to your files.
Download your data yourself: in the app, Profile → Account → Download my data; on the website, Account → Download my data. You get one file with your profile, consents, training, nutrition, health records, the messages you sent, your posts and links to your files.
2.
2.
Delete your account yourself: in the app, Profile → Account → Delete account; on the website, Account → Delete account.
Delete your account yourself: in the app, Profile → Account → Delete account; on the website, Account → Delete account.
3.
3.
Anything else, or if you can’t use the app: email info@diagofit.com with the subject “Privacy request”.
Anything else, or if you can’t use the app: email info@diagofit.com with the subject “Privacy request”.
We will confirm your identity, usually by asking you to make the request from, or confirm it through, the email address on your account. You can use an authorized agent; we'll ask for proof that you authorized them.
We will confirm your identity, usually by asking you to make the request from, or confirm it through, the email address on your account. You can use an authorized agent; we'll ask for proof that you authorized them.
When we’ll answer: within 45 days. If we need more time, we’ll tell you why, and we may extend by up to another 45 days where the law allows.
When we’ll answer: within 45 days. If we need more time, we’ll tell you why, and we may extend by up to another 45 days where the law allows.
Appeals: if we decline your request, in whole or in part, we will explain why. You can appeal within 45 days by replying to our decision with the subject “Privacy appeal”. We’ll answer your appeal within 45 days. If you’re still not satisfied, you can contact your state Attorney General.
Appeals: if we decline your request, in whole or in part, we will explain why. You can appeal within 45 days by replying to our decision with the subject “Privacy appeal”. We’ll answer your appeal within 45 days. If you’re still not satisfied, you can contact your state Attorney General.
We will not treat you differently, or charge you more, for exercising these rights.
We will not treat you differently, or charge you more, for exercising these rights.
California residents: we do not sell or share personal information and we use sensitive personal information only to provide the Service and for the other purposes the law permits, so we don’t offer a “Do Not Sell or Share” or “Limit the Use of My Sensitive Personal Information” link. California’s “Shine the Light” law doesn’t apply because we don’t disclose personal information to third parties for their direct marketing.
California residents: we do not sell or share personal information and we use sensitive personal information only to provide the Service and for the other purposes the law permits, so we don’t offer a “Do Not Sell or Share” or “Limit the Use of My Sensitive Personal Information” link. California’s “Shine the Light” law doesn’t apply because we don’t disclose personal information to third parties for their direct marketing.
11.
11.
Age requirement
Age requirement
The Service is only for people 18 and older. We don’t knowingly collect information from anyone under 18. If we learn that someone under 18 has an account, we will close it and delete their information. If you believe a minor is using the Service, email info@diagofit.com.
The Service is only for people 18 and older. We don’t knowingly collect information from anyone under 18. If we learn that someone under 18 has an account, we will close it and delete their information. If you believe a minor is using the Service, email info@diagofit.com.
12.
12.
Users outside the United States
Users outside the United States
Diagofit is based in the United States. Our servers and database are hosted in the United States (Virginia), and our service providers process information in the United States and may process it in other countries where they operate. If you use the Service from another country, your information is transferred to the United States, where privacy laws may differ from those where you live.
Diagofit is based in the United States. Our servers and database are hosted in the United States (Virginia), and our service providers process information in the United States and may process it in other countries where they operate. If you use the Service from another country, your information is transferred to the United States, where privacy laws may differ from those where you live.
If you are in the European Economic Area, the United Kingdom or Switzerland:
If you are in the European Economic Area, the United Kingdom or Switzerland:
1.
1.
Diagofit LLC is the controller of your personal information. Contact us at info@diagofit.com.
Diagofit LLC is the controller of your personal information. Contact us at info@diagofit.com.
2.
2.
Our legal bases: we process your information to perform our contract with you (to provide coaching and the Service); based on your explicit consent for health information, for sharing Apple Health data with your coaches and for AI meal photo analysis; based on our legitimate interests for security, preventing abuse and improving the Service; and to meet legal obligations. Staff review of messages is based on your consent and on our legitimate interest in keeping members safe and enforcing our rules.
Our legal bases: we process your information to perform our contract with you (to provide coaching and the Service); based on your explicit consent for health information, for sharing Apple Health data with your coaches and for AI meal photo analysis; based on our legitimate interests for security, preventing abuse and improving the Service; and to meet legal obligations. Staff review of messages is based on your consent and on our legitimate interest in keeping members safe and enforcing our rules.
3.
3.
Transfers: where required, we rely on the European Commission’s Standard Contractual Clauses (and the UK addendum) or another lawful transfer mechanism with our service providers.
Transfers: where required, we rely on the European Commission’s Standard Contractual Clauses (and the UK addendum) or another lawful transfer mechanism with our service providers.
4.
4.
Your rights: in addition to the rights in Section 10, you can object to or ask us to restrict our processing, and you can complain to your local data protection authority.
Your rights: in addition to the rights in Section 10, you can object to or ask us to restrict our processing, and you can complain to your local data protection authority.
13.
13.
Changes to this policy
Changes to this policy
We may update this policy. If we make a material change, especially to how we use or share health information, we will tell you in the app or by email before the change takes effect, and we'll ask for your consent again where the law requires it. The date at the top shows when it was last updated.
We may update this policy. If we make a material change, especially to how we use or share health information, we will tell you in the app or by email before the change takes effect, and we'll ask for your consent again where the law requires it. The date at the top shows when it was last updated.
14.
14.
Contact us
Contact us
Diagofit LLC
Email: info@diagofit.com
Mail: 8605 Santa Monica Blvd #174069, West Hollywood, CA 90069, USA
Diagofit LLC
Email: info@diagofit.com
Mail: 8605 Santa Monica Blvd #174069, West Hollywood, CA 90069, USA
DIAGOFIT
© 2026 Diagofit. All rights reserved.
DIAGOFIT
© 2026 Diagofit. All rights reserved.
— Legal —
Diagofit Privacy Policy
Effective date: October 30, 2026 · Version: 2026-10-30
Contents
This policy explains what personal information Diagofit collects through the Diagofit iPhone app and the website at app.diagofit.com (together, the "Service"), how we use it, who can see it, and the choices you have.
"Diagofit", "we", "us" and "our" mean Diagofit LLC. "You" means a client or staff member who uses the Service.
We also publish a separate Consumer Health Data Privacy Policy (diagofit.com/health-data-privacy) that explains in more detail how we handle health information. If you live in Washington or Nevada, or anywhere else with a similar law, that policy applies to your health data alongside this one.
1.
The short version
The Service is for Diagofit coaching clients and staff only. Accounts are by invitation, and you must be 18 or older.
You use the Service to follow your training, nutrition and protocol plans, log your progress, message your coaching team and take part in the Diagofit community.
Your coaching team sees the health and progress information you log. That is how coaching works.
Authorized Diagofit staff can read any message in the Service, including direct messages between members. Messages are not end-to-end encrypted. You agree to this separately when you sign up, and every time staff open a conversation they're not part of, it is logged.
Data from Apple Health is shared with your coaching team only if you turn sharing on, and you can turn it off at any time.
We do not sell your personal information, we do not share it for targeted advertising, we show no ads, we send no marketing email, and we never use health data for marketing.
Data from Apple Health is never sent to any AI service.
You can see, correct, download or delete your data. See Section 10.
2.
Information we collect
2.1
Information you or Diagofit staff give us
Category
Examples
Account and contact details
Name, email address, profile photo, headline and bio, time zone, preferred units, and the role on your account (client or staff).
Sign-in details
Your email address and password, or the one-time sign-in links we email you. If you use Sign in with Apple, the name and email (or Apple's private relay email) that Apple shares with us. We never see your Apple password.
Coaching details
Your coaching status and start and end dates, your tier (for example VIP), your goals, which coaches are assigned to you, and notes staff write about your coaching.
Training
The programs and workouts your coach assigns you, and the sets, reps, weights, rest times, notes and personal records you log.
Nutrition
Foods and meals you log (including barcode scans and quick-add entries), saved meals, the nutrition targets and plans your coach sets, and meal photos you choose to take.
Protocol and health logs
See Section 2.2.
Forms and check-ins
Your answers to the onboarding questionnaire, weekly check-ins and daily habits forms (for example mood, sleep, energy, weight, side effects), and your coach's feedback.
Messages
Messages, voice notes, photos, videos and files you send in your coaching thread, direct messages, group messages and chat spaces, plus reactions, read status and timestamps.
Community content
Posts, comments, reactions, event RSVPs, course and lesson progress, and reports or blocks you make.
Calendar
Entries you or your coach add to your calendar (for example meal prep, appointments, reminders).
Support and consent records
What you send us when you contact us, and a record of each consent you give or withdraw, with the date, the version of the text you saw and the platform you used.
2.2
Health information
Much of what you log in Diagofit is health information. It includes:
1.
Protocol information: the protocol your coach sets up for you (compounds, doses, routes, schedules and phases), the doses you log or skip, injection sites, post-injection pain scores, and the supplies you track (vials, pens, tablets).
2.
Symptoms you report, including how much they affected your day.
3.
Vital signs and body measurements: blood pressure, resting heart rate, weight, body fat and circumference measurements.
4.
Progress photos.
5.
Bloodwork: lab requests from your coach, lab reports you upload (PDFs or photos) and the results entered from them.
6.
Sleep, recovery and activity data from Apple Health, if you connect it (see Section 2.3).
7.
Food logs and check-in answers, which can reveal health information.
8.
Alerts the Service creates for your coaching team when a reading or result crosses a threshold the team has set (for example a very high blood pressure reading).
We treat all of this as sensitive. Section 7 explains how we protect it, and our Consumer Health Data Privacy Policy gives the full detail.
2.3
Apple Health
Connecting Apple Health is your choice. The Service works without it, and you can enter the same kinds of information by hand.
With your permission on Apple's Health screen, the iPhone app reads: steps, active energy, resting heart rate, heart rate variability, sleep, weight, body fat percentage, blood pressure, and daily totals of calories, protein, carbohydrates and fat (which may come from other apps you use, such as MyFitnessPal). We only read from Apple Health. The app does not write to Apple Health.
2.4
Information we receive when we move you from Circle or Trainerize
If you were a Diagofit client before the Service launched, we import your account, community posts and comments, course progress, coach conversations and training history from Circle and Trainerize, so you don't lose your history. We do not import direct messages between members from Circle.
2.5
Information collected automatically
1.
Device and app information: device type, operating system and app version, and a push-notification token for your device.
2.
Log and security information: IP address, request times and errors. When staff view someone else’s data, we record who did it, when and from which IP address.
3.
Usage information: which screens and features are used, so we can improve the Service (see PostHog in Section 5). We do not include health information, messages or your name in these usage events. You can turn this off in the app (Profile → Settings → “Share anonymous usage analytics”) and on the website (Account).
4.
Crash and error reports: technical details when something goes wrong (see Sentry in Section 5). We configure these reports to exclude health information and message content, and not to store IP addresses.
On the website we use browser storage to keep you signed in, to remember your settings and to remember the email address you asked a sign-in link for. Our usage analytics (PostHog) keeps a random identifier in your browser's local storage instead of a cookie, and turns off when your browser sends a Do Not Track signal. We don't use advertising cookies or cross-site tracking.
3.
How we use your information
We use your information to:
1.
Provide your coaching: show you your plans, record what you log, let your coaching team review your progress and adjust your plan, send reminders, and run your coaching thread.
2.
Run the community: show your posts and profile to the members who can see a space, and run courses and events.
3.
Keep people safe and enforce our rules: review reports, check flagged content (some words and patterns, such as attempts to buy or sell substances, flag a post or message for staff review automatically), restrict or remove accounts, and respond to signs of a medical emergency or self-harm.
4.
Send you service messages: invitations, sign-in links, push notifications and important notices about the Service. Push notifications are worded neutrally and do not name compounds.
5.
Secure the Service: prevent fraud and abuse, and keep audit records of staff access.
6.
Improve the Service: understand which features are used and fix bugs, using usage and error data that excludes your health information.
7.
Provide the optional AI feature you choose to use (Section 4).
8.
Meet legal obligations and protect our rights.
We do not use your information for advertising, we do not build advertising profiles, we do not send marketing email, and we do not use health information (including anything from Apple Health) for marketing or for "data mining" unrelated to your coaching.
4.
AI meal photo analysis
One optional feature uses artificial intelligence provided by OpenAI.
What it does. If you choose to analyze a meal photo, we send OpenAI that photo and the optional note you add about the meal, and nothing else: no name, no account details, and no other health data. OpenAI suggests the foods and portion sizes, the nutrition numbers come from our own food database, and you confirm or change each suggestion before anything is logged.
Your permission first. Before the app sends your first photo, it asks for your permission. If you say no, nothing is sent and you can still log meals by search or barcode. You can turn the feature on or off at any time in Profile → Settings (“AI meal photo analysis”) or Profile → Consents.
What OpenAI does with it. We use OpenAI’s API under terms that do not allow OpenAI to use our data to train its models, and we ask OpenAI not to store the request. OpenAI may keep API requests for up to 30 days to monitor for abuse, and then deletes them.
We never send Apple Health data to any AI service, and no AI system makes decisions about you that have legal or similarly significant effects.
5.
Who can see your information
5.1
Inside Diagofit
Who
What they can see
You
Everything in your own account, except staff-only notes.
Your assigned coaching team (your primary coach, any secondary coach and your client success manager)
Your profile, training, nutrition, calendar, forms and check-ins, protocol and dose logs, symptoms, vitals, measurements, progress photos, bloodwork, alerts and your coaching thread. Apple Health data only if you turn on Apple Health sharing.
Head coaches, admins and the owner
The same as your coaching team, for every client.
Admins and the owner (and any staff member we specifically authorize)
Any message in the Service, including direct and group messages between members. This access is read-only, it is used only for the purposes in Section 3 (coaching, safety, rule enforcement, security and legal compliance), and every time they open a conversation they're not part of, it is recorded in an audit log.
Community moderators (staff with moderation rights)
Reported and flagged posts, comments and messages, and the tools to hide or remove them.
Other members
Your name, profile photo, headline and bio; your posts, comments and reactions in spaces they can access; and messages you send them. Members never see your health data unless you post it in the community or send it to them yourself.
Every time a staff member views a client's health records, we record it in an audit log.
5.2
Service providers
We use the companies below to run the Service. They process your information only on our instructions and to provide their service to us, under contracts that require them to protect it. We don't let them use your information for their own purposes.
Provider
What they do for us
What they handle
Render Services, Inc. (Render)
Hosts our servers and database (Virginia, US)
All Service data
Cloudflare, Inc. (Cloudflare R2)
Stores the files you and your coaches upload
Photos, videos, voice notes, lab reports, plan documents, data exports
Mux, Inc. (Mux)
Hosts and streams course and coach videos
Those video files and viewing data (for example device and playback quality). Videos sent in messages are stored with Cloudflare, not Mux
Google LLC (Firebase)
Sign-in (Firebase Authentication, including one-time sign-in links) and push notifications (Firebase Cloud Messaging)
Name, email, sign-in identifiers, device push tokens. Push messages contain no health details
Plus Five Five, Inc. (Resend)
Sends our emails: sign-in links and invitations
Your email address and the email itself. These emails contain no health details
Functional Software, Inc. d/b/a Sentry (Sentry)
Error and uptime monitoring
Technical error data; configured to exclude health data and message content, and not to store IP addresses
PostHog Inc. (PostHog)
Product usage analytics (US hosting)
Usage events linked to your account ID, and your approximate location (city and country) worked out from your IP address, which is then discarded; no health data, no email address. You can turn it off (Section 2.5)
OpenAI OpCo, LLC (OpenAI)
Meal photo analysis, only when you use it (Section 4)
The meal photo and your optional note; never Apple Health data
Apple
App distribution and, if you use it, Sign in with Apple
Information covered by Apple's own privacy policy
5.3
Labs
If your coach gives you a link to order bloodwork from a lab, the order is between you and that lab, and the lab's privacy policy applies.
5.4
Legal and safety reasons
We may disclose information if we believe in good faith that it is required by law (for example a valid subpoena, court order or search warrant), or that it is needed to prevent death or serious physical harm. Unless the law or the circumstances prevent it, we will tell you before we disclose your information in response to a legal demand.
5.5
Business changes
If Diagofit is involved in a merger, acquisition or sale of assets, your information may transfer to the new owner. It will remain subject to the promises in this policy, and we will tell you before it becomes subject to a different policy.
5.6
What we don’t do
We do not sell personal information. We do not share personal information for cross-context behavioral (targeted) advertising. We don't give personal information to data brokers or to third parties for their own marketing. Because we don't sell or share it, there's nothing to opt out of, and we treat a Global Privacy Control signal as a request not to sell or share, which we already honor. We don't track you across other companies' websites or apps.
6.
Messages and community content
When you post in the community or send a message, we store the content, attachments, the people in the conversation and the times.
1.
Your coaching thread is with your whole coaching team, not one person. Staff can also add internal notes that you don’t see.
2.
Direct and group messages are not private from Diagofit. As described in Section 5.1, authorized staff can read them, read-only, and each such access is logged. Messages are encrypted while being sent and while stored on our servers, but they are not end-to-end encrypted.
3.
Deleting a message replaces it with a “message deleted” placeholder, removes its text from our database and deletes its attachments.
4.
Reporting and blocking: you can report any post, comment, message or member, and block a member. Moderators review reports promptly.
7.
How we protect your information
1.
Information is encrypted in transit (HTTPS/TLS) and encrypted at rest by our hosting and storage providers.
2.
Health information is kept in a separate, restricted part of our database, apart from other data. Health files (progress photos, lab reports, meal photos) are kept in private storage and can only be opened through short-lived links.
3.
We remove hidden metadata, such as the location where a photo was taken, from every image you upload.
4.
Staff access is limited by role, and staff views of health records and other members’ conversations are logged.
5.
We keep health information out of push notifications, analytics events and error reports.
No system is perfectly secure. If a breach affects your information, we will notify you and the authorities as the law requires.
Diagofit is a coaching business, not a healthcare provider or health plan, and it does not bill insurance. The federal health privacy law HIPAA generally does not apply to Diagofit, so we don't describe the Service as HIPAA compliant. We protect your health information under this policy, our Consumer Health Data Privacy Policy and the state and federal laws that do apply.
8.
How long we keep information
When your coaching ends, you keep read-only access to your own data for 30 days, so you can review it and download a copy. After that we close your account, and your data follows the table below. You can download or delete your data at any time before then.
Information
How long
Account, coaching, training, nutrition and health records (including Apple Health data)
While your account is open, and for 12 months after your coaching ends, so you can come back without losing your history. Then we delete it. You can delete it sooner by deleting your account.
Apple Health data after you disconnect
Disconnecting Apple Health stops new syncing; it doesn’t remove what was already synced. To delete it, email info@diagofit.com, or delete your account.
Messages and community content
Until your account is deleted.
Audit logs (staff access records) and consent records
3 years, so we can show who accessed data and what you agreed to.
Reports and moderation decisions
2 years.
Error reports
90 days.
Usage analytics
12 months.
Your data export file
Kept in your account, readable only by you, until you request a new export or delete your account. Each download link stops working after about an hour.
Backups
Deleted data can remain in encrypted backups for up to 30 days until the backups are overwritten.
When you delete your account, we delete or de-identify your personal information within 30 days, except audit and consent records (kept as listed above) and anything we must keep to meet a legal obligation, resolve a dispute or enforce our agreements. Community posts and messages you sent to others stay in those conversations, shown as from "Deleted user", with your name and photo removed.
9.
Your choices
1.
Apple Health: connect or disconnect it in Profile → Connected apps. Turn sharing with your coaching team on or off in Profile → Consents. You can also turn off Diagofit’s access in the iPhone Health app.
2.
AI meal photo analysis: turn it on or off in Profile → Settings or Profile → Consents.
3.
Usage analytics: turn it off in Profile → Settings in the app, or on the Account page of the website.
4.
Consents: review and withdraw your optional consents in Profile → Consents in the app, or on the Account page of the website. Withdrawing doesn’t affect what happened before you withdrew. Some consents are needed to use the Service (agreeing to the Terms and this policy, being 18 or older, staff access to messages, and the collection of health data). If you withdraw consent to the collection of health data, you can no longer use the Service, apart from downloading your data or deleting your account, until you give it again.
5.
Notifications: choose which push notifications you get in Profile → Notifications, or in your device settings.
6.
Camera, photos and microphone: the app only asks for these when you use a feature that needs them, and you can change them in your device settings.
10.
Your rights
Wherever you live, you can ask us to:
1.
Know and access the personal information we hold about you, including the categories of information, where it came from, why we use it and who we have shared it with;
2.
Correct information that is wrong;
3.
Delete your information and your account;
4.
Get a copy of your information in a portable, machine-readable format;
5.
Withdraw consent you have given; and
6.
Get a list of the third parties we have shared your health information with (see our Consumer Health Data Privacy Policy).
How to ask:
1.
Download your data yourself: in the app, Profile → Account → Download my data; on the website, Account → Download my data. You get one file with your profile, consents, training, nutrition, health records, the messages you sent, your posts and links to your files.
2.
Delete your account yourself: in the app, Profile → Account → Delete account; on the website, Account → Delete account.
3.
Anything else, or if you can’t use the app: email info@diagofit.com with the subject “Privacy request”.
We will confirm your identity, usually by asking you to make the request from, or confirm it through, the email address on your account. You can use an authorized agent; we'll ask for proof that you authorized them.
When we’ll answer: within 45 days. If we need more time, we’ll tell you why, and we may extend by up to another 45 days where the law allows.
Appeals: if we decline your request, in whole or in part, we will explain why. You can appeal within 45 days by replying to our decision with the subject “Privacy appeal”. We’ll answer your appeal within 45 days. If you’re still not satisfied, you can contact your state Attorney General.
We will not treat you differently, or charge you more, for exercising these rights.
California residents: we do not sell or share personal information and we use sensitive personal information only to provide the Service and for the other purposes the law permits, so we don’t offer a “Do Not Sell or Share” or “Limit the Use of My Sensitive Personal Information” link. California’s “Shine the Light” law doesn’t apply because we don’t disclose personal information to third parties for their direct marketing.
11.
Age requirement
The Service is only for people 18 and older. We don’t knowingly collect information from anyone under 18. If we learn that someone under 18 has an account, we will close it and delete their information. If you believe a minor is using the Service, email info@diagofit.com.
12.
Users outside the United States
Diagofit is based in the United States. Our servers and database are hosted in the United States (Virginia), and our service providers process information in the United States and may process it in other countries where they operate. If you use the Service from another country, your information is transferred to the United States, where privacy laws may differ from those where you live.
If you are in the European Economic Area, the United Kingdom or Switzerland:
1.
Diagofit LLC is the controller of your personal information. Contact us at info@diagofit.com.
2.
Our legal bases: we process your information to perform our contract with you (to provide coaching and the Service); based on your explicit consent for health information, for sharing Apple Health data with your coaches and for AI meal photo analysis; based on our legitimate interests for security, preventing abuse and improving the Service; and to meet legal obligations. Staff review of messages is based on your consent and on our legitimate interest in keeping members safe and enforcing our rules.
3.
Transfers: where required, we rely on the European Commission’s Standard Contractual Clauses (and the UK addendum) or another lawful transfer mechanism with our service providers.
4.
Your rights: in addition to the rights in Section 10, you can object to or ask us to restrict our processing, and you can complain to your local data protection authority.
13.
Changes to this policy
We may update this policy. If we make a material change, especially to how we use or share health information, we will tell you in the app or by email before the change takes effect, and we'll ask for your consent again where the law requires it. The date at the top shows when it was last updated.
14.
Contact us
Diagofit LLC
Email: info@diagofit.com
Mail: 8605 Santa Monica Blvd #174069, West Hollywood, CA 90069, USA
DIAGOFIT
© 2026 Diagofit. All rights reserved.