Privacy Policy

Last Updated: October 22, 2026

1. Introduction

At VGFIT, we care about your personal data, so we have prepared this Privacy Policy to explain how we collect, use and share it.

This Privacy Policy (“Privacy Policy”) details the personal data of VGFIT LLC. (“VGFIT”, “we”, “us” or “our”) receives about you, and discloses information about you when you access or use our website, mobile applications, and other online products and services (collectively, the "Services"), how we process it, and your rights and obligations in relation to your personal data.

Prior to using the Service, kindly make sure you have read and agreed with the terms of collection, storage, use, and disclosure of your Personal Information as described in the current Privacy Policy.

If you choose to use our Services, then you agree to the collection and use of information in relation to this policy. The Information that we collect is used for providing and improving the Services. We will not use or share your information with anyone except as described in this Privacy Policy.

2. Information We Collect and Use

For a better experience, while using our Services, we may require you to provide us with certain personally identifiable information. The information that we request will be retained by us and used as described in this Privacy Policy.

Personal Information: When creating an account, you may be asked to provide us with personal information such as your name, surname, username, e-mail address, phone number, password, gender, date of birth, weight, height, fitness level, and workout location. When signing up for a paid service within our Services, we may also collect and store billing information. Personal Information may be required for account authentication, when dealing with inquires and complaints made by or about you related to the Services, for communication with you, including sending service-related messages, sending unsolicited marketing notifications, maintenance, and provision of features and functionality of the Services. Walk Well asks for your email address: you can sign in with Apple or with a one-time link sent to your email; Walk Well does not use passwords. If you have a Walk Well account, we save to it your profile answers (sex, birth year, height, weight, target weight, activity level), your profile photo if you add one, your daily goal, weight entries, walks (time, duration, distance, steps and route) and challenge progress. CleanCal AI asks for your email address: you can sign in with Apple, with Google, or with a one-time link sent to your email; CleanCal AI does not use passwords. If you use CleanCal AI, we save to your account your name, your profile photo if you add one, your profile answers (such as sex, birth year, height, current weight, goal weight and activity level), your calorie and nutrition goals, the meals and foods you log (with calories, protein, carbohydrates, fat and other nutrients), water and exercise entries, weight entries, and your streaks and progress. If you contact us at [email protected] (the Contact Support button in CleanCal AI opens your email app), we keep your email and our reply. Sign-in links we send you are stored together with your email address and IP address for up to 7 days and then deleted.

Automatic data collection: We may collect certain information automatically when you use our Services, such as your Internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers, browser or device information, general location information (including approximate location derived from IP address and time zone), and Internet service provider. We may also automatically collect information regarding your use of our Services, such as pages that you visit before, during and after using our Services, information about the links you click, the types of content you interact with, the frequency and duration of your activities, and other information about how you use our Services.

HealthKit Information: In ProFit: Workout Planner, we may collect iOS Health app and/or Healthkit data (including date of birth, heart rate, height, sex, weight, and workouts) (collectively “Healthkit Information”), which data is covered by this Privacy Policy if you choose to provide it. Users are not required to share this information and can choose not to provide this additional information by not entering it when asked. Our Services also allows Users to send workout and Active Energy data from Services to be written to Healthkit, should they choose. Our Services maintains all HealthKit Information in accordance with Apple’s development guidelines.

We may also collect data about your location using other technologies and sensors which may provide us information about nearby devices, Wi-Fi access points and networks, and nearby cell towers. We collect and maintain location data to provide you the complete functionality of the Service. In our other apps (not Walk Well or CleanCal AI), we may share location information with third parties for advertising, research, analytic and other purposes. If you want to restrict the collection of your location data, please adapt your settings in your mobile device, to bound the access of the app. Walk Well uses precise location only during a walk you start, to measure the distance and record the route of that walk; if you have an account, the route is saved to it. Walk Well does not track your location outside a walk, and its location data is never shared with third parties for advertising, research, analytics or any other purpose, other than the service providers that host our services for us.

Some of our other apps (not Walk Well or CleanCal AI) may also collect sensory and motion data from your smartphone, in order to calculate and detect driving events. In those apps, this information may be shared with third-party partners for marketing, research, analytic and other purposes. If you want to bound the access of the app to your sensory and motion data, please adjust the settings on your device. Walk Well uses the motion sensor only to count the steps of a walk you start, while the walk is running; this data is not shared with third parties. CleanCal AI does not collect your precise location and does not use the motion sensor.

3. Cookies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory.

We may use cookies in a range of ways to improve your experience on the Website, including understanding how you use the Website and approving your Website usage experience.

There are a number of different types of cookies, however, the Website uses the following:

• - Functionality: we use these cookies to recognize you on our Website and remember your previously selected preferences. These could include what language you prefer and the location you are in. A mix of first-party and third-party cookies is used.
• - Activity: we use these cookies to collect information about your visit to the Website, the content you viewed, the links you followed and information about your browser, device, and IP address.

Most browsers accept cookies automatically. If you want to prevent cookies from being saved, you can select the ‘Accept no cookies’ option in your browser settings. To find out exactly how this works, you can consult your browser manufacturer’s instructions. you can delete cookies that have already been saved on your computer at any time. However, in a few cases, some of the Website features may not function as a result.

4. The Purpose of Collecting Your Information

We use your information for a variety of business purposes, including to provide our Services, for administrative purposes, and to market our products and Services, as described below. Our mission is to constantly improve our Services and provide new features. We use collected data to:

• - Managing your information and accounts;
• - Providing access to certain areas, functionalities, and features of our Services;
• - Using Healthkit Information to help generate dynamic workout plans personalized for you (note: Healthkit information is not used for marketing purposes or shared with third parties for marketing);
  - Using Walk Well Health Data only as described in “Walk Well – Health Data (Apple Health and Health Connect)” above, to provide Walk Well features (showing your daily steps and progress, running challenges). It is not used for marketing purposes or shared with third parties for marketing;
  - Using CleanCal AI data (your meals, nutrition goals, weight, photos, voice and Health Data) only to provide CleanCal AI features: showing your calories and nutrients, analyzing meals you scan or describe, tracking your progress and streaks, and saving meals to Apple Health or Health Connect if you choose. It is not used for advertising or marketing purposes or shared with third parties for marketing;
• - Answering requests for customer or technical support;
• - Communicating with you about your account, activities on our Services, and policy changes;
• - Allowing you to register for events;
• - To prevent spam, fraud, and enforcement of law.

We may use personal information to tailor and provide you with content and advertisements, as permitted by applicable law. Some of the ways we market to you may include email campaigns, custom audiences advertising, and “interest-based” or “personalized advertising,” including through cross-device tracking. We will not, however, use or disclose to third parties data gathered in the health and fitness context for advertising, marketing, or other use-based data mining purposes. If you have any questions about our marketing practices or if you would like to opt-out of the use of your personal information for marketing purposes, you may contact us at any time at [email protected].

5. How We Disclose Your Information

We disclose your information to third parties for a variety of business purposes, including to provide our Services, to protect us or others, or in the event of a major business transaction such as a merger, sale, or asset transfer, as described below. We may share the collected data with third parties only for purposes described under this Privacy Policy. We will not rent or sell your personal data to third parties. We may, however, share information like cookies, log files, device identifiers, and location data, with third-party organizations that provide automatic data processing technologies for the Services.
We may also share certain information such as cookie data, with third parties, for advertising purposes.

The Services may contain links to third-party services, or you may access the Services from a third-party site. We are not responsible for the privacy practices of these sites or services linked to or from our Services, including the information or content contained within them.

We may employ third-party companies and individuals due to the following reasons:

• - To facilitate our Services;
• - To provide the Services on our behalf;
• - To perform Service-related services; or
• - To assist us in analyzing how our Services are used.

Service Providers:

• - Amazon Web Services: We use Amazon Web Services, which is a hosting and backend service provided by Amazon, for personal data hosting and enabling our Service to operate and be distributed to its users.
• - RevenueCat: is a powerful, reliable, and free to use in-app purchase server with cross-platform support. Our open-source framework provides a backend and a wrapper around StoreKit and Google Play Billing to make implementing in-app purchases and subscriptions easy.
• - OneSignal: is a service that enables push notifications, abstracting details such as the platform the device is running on. OneSignal is a complete messaging solution, focused on push notifications, rich SMS, email, and in-app messaging through a marketer dashboard and a powerful developer API. We're the standard when it comes to simple and powerful user engagement, our freemium product is used by over 1 million marketers and developers worldwide. OneSignal offers features like A/B testing, Real-Time Reporting, and Segmentation which helps companies gain invaluable insight into their marketing processes and review their strategies. Companies like EatStreet, USA Today, and LendingTree trust OneSignal to increase engagement and improve communication with their customers. Founded in California, OneSignal sends over 8 billion push notifications daily.
• - DigitalOcean: a cloud hosting provider (DigitalOcean, LLC) that hosts the servers and databases of some of our apps, including Walk Well and CleanCal AI, and stores the data saved to your account there.
• - Sign in with Apple and Google Sign-In: if you choose to sign in with Apple (Apple Inc.) or Google (Google LLC), the provider confirms your identity and gives us your email address and, if you allow it, your name. We do not receive your Apple or Google password.
• - AI service provider (CleanCal AI): a third-party provider of artificial intelligence services that analyzes the meal photos and voice-to-text descriptions you submit in CleanCal AI, on our behalf and under contract, to identify food and estimate calories and nutrients. See “CleanCal AI – meal photos, barcodes, voice and AI analysis” in Section 2.
• - Open Food Facts: an open, non-profit food product database. When you scan a barcode in CleanCal AI, the barcode number is sent to it to look up the product.
• - Twilio SendGrid: an email delivery service (Twilio Inc.) that we use to send the sign-in links and account emails you request, such as confirming an email change or an account deletion.

Which apps use which services: the analytics and advertising services listed below are used in our other apps, not in CleanCal AI. CleanCal AI uses only Firebase (Analytics, Crashlytics, Performance), Amplitude and OneSignal; it does not use advertising or attribution partners.

Analytics: The services contained in this section enable us to monitor and analyze web traffic and can be used to keep track of User behavior.

• - Branch (Branch Metrics, Inc.)
  Branch provides the leading mobile linking platform, with solutions that unify user experience and measurement across different devices, platforms, and channels. Personal Data processed: Cookies; Usage Data.
  Place of processing: United States, Privacy Policy, Opt-Out.
• - Facebook Analytics for Apps (Facebook, Inc.)
  Facebook Analytics for Apps is an analytics service provided by Facebook, Inc. Personal Data processed: Usage Data; various types of Data as specified in the privacy policy of the service. Place of processing: United States, Privacy Policy.
• - Facebook Ads conversion tracking (Facebook pixel) (Facebook, Inc.)
  Facebook Ads conversion tracking (Facebook pixel) is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on this Application. The Facebook pixel tracks conversions that can be attributed to ads on Facebook, Instagram, and Audience Network. Personal Data processed: Cookies; Usage Data. Place of processing: United States – Privacy Policy.
• - Google Firebase (Google)
  Google Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps. Firebase provides tools for tracking analytics, reporting and fixing app crashes, creating marketing and product experiment. Personal Data processed: Passwords (only in apps that use passwords; Walk Well and CleanCal AI do not), Email addresses, Phone numbers, User agents, IP addresses, Firebase installation IDs, Crashlytics Installation UUIDs, Crash traces, Breakpad minidump formatted data, (NDK crashes only) Place of processing: United States – Privacy Policy.
• - Amplitude (Amplitude, Inc.)
  Amplitude is an analytics service provided by Amplitude, Inc. This service is designed for mobile apps analytics and can collect various information about the User’s device, highlighted in the Amplitude privacy policy. Personal Data processed: Tracker; Usage Data. Place of processing: United States – Privacy Policy.

Advertising Partners: We may share your personal information with third-party advertising partners. These third-party advertising partners may set Technologies and other tracking tools on our Services to collect information regarding your activities and your device (e.g., your IP address, cookie identifiers, page(s) visited, location, time of day). These advertising partners may use this information (and similar information collected from other services) for purposes of delivering personalized advertisements to you when you visit digital properties within their networks. This practice is commonly referred to as “interest-based advertising” or “personalized advertising.” We do not use or disclose to third parties data gathered in the health and fitness context for advertising, marketing, or other use-based data mining purposes.

This type of service allows User Data to be utilized for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this Application, possibly based on User interests.
This does not mean that all Personal Data are used for this purpose. Information and conditions of use are shown below.
Some of the services listed below may use Cookies or other Identifiers to identify Users or they may use the behavioral retargeting technique, i.e. displaying ads tailored to the User’s interests and behavior, including those detected outside this Application.
In addition to any opt-out feature offered by any of the services below, Users may opt-out by visiting the Network Advertising Initiative opt-out page.
Users may also opt out of certain advertising features through applicable device settings, such as the device advertising settings for mobile phones or ads settings in general.

• - Facebook Ads Manager and Facebook Custom Audience, allow us to choose audiences that will see our ads on Facebook or other Facebook’s products (for example, Instagram). Through Facebook Custom Audience we may create a list of users with certain sets of data, such as an IDFA, choose users that have completed certain actions in the App (for example, installed it). As a result, we may ask Facebook to show some ads to a particular list of users. As a result, more of our ads may show up while you are using Facebook or other Facebook’s products (for example, Instagram). You may learn how to opt-out of advertising provided to you through Facebook Custom Audience here. Facebook also allows its users to influence the types of ads they see on Facebook. To find how to control the ads you see on Facebook, please go here or adjust your ads settings on Facebook.
• - AdMob
  AdMob is an advertising service provided by Google Ireland Limited. In order to understand Google's use of Data, consult Google's partner policy. Personal Data processed: Cookies; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data. Place of processing: Ireland – Privacy Policy.
• - Google Ads is an ad delivery service provided by Google that can deliver ads to users. In particular, Google allows us to tailor the ads in a way that they will appear, for example, only to users that have conducted certain actions with our App (for example, show our ads to users who have purchased a subscription). Some other examples of events that may be used for tailoring ads include, in particular, installing one of our Apps, finishing a workout program. Google allows its users to opt-out of Google’s personalized ads and to prevent their data from being used by Google Analytics.

6. How to opt-out or influence personalized advertising

- iOS: On your iPhone or iPad, go to “Settings,” then “Privacy” and tap “Advertising” to select “Limit Ad Track”. In addition, you can reset your advertising identifier (this also may help you to see less personalized ads) in the same section.
- Android: To opt-out of ads on an Android device, simply open the Google Settings app on your mobile phone, tap “Ads” and enable “Opt-out of interest-based ads”. In addition, you can reset your advertising identifier in the same section (this also may help you to see less personalized ads).

7. Your privacy rights

It does not matter what country or region you come from. We are committed to providing you with vast privacy rights for your Personal Data. Applicable data protection laws give you certain rights regarding your personal information. You have the following options in relation to your personal information that was collected:

• - Correction of Personal Data. If you believe that your Personal Data is inaccurate, you have a right to contact us and ask us to correct such Personal Data.
• - Restriction of Processing. You also have a right to request that the processing of your Personal Data be restricted if you contest the accuracy of the Personal Data and we need some time to verify its accuracy.
• - Information rights and access to your Personal Data. You have a right to request information about what Personal Data we have about you, to access all your Personal Data, and receive a copy of it. We also commit to notify you, as required under applicable laws, about Personal Data breaches related to your Personal Data.
• - Data Deletion and Retention. The user data is generally retained for as long as your user profile is in existence or as it is needed to provide the relevant services. However, specific retention times can vary based on the context of the processing performed. You have the right to ask to delete all or some of the personal data that is held about you. Please be aware that erasing some Personal Data may affect your App experience. In Walk Well you can delete your account in the app (Edit Profile → Delete Account); we send a confirmation link to your email, and deletion is completed once you confirm it. You can also request deletion on our web page: https://walk.vgfit.com/delete-account. In CleanCal AI you can delete your account in the app (Profile → Edit Profile → Delete Account) in the same way, or request deletion on our web page: https://cleancal.vgfit.com/delete-account.
• - Right to object to the processing of your Personal Data. In some cases, you can object to the processing of your Personal Data, for example, if we process it under a legitimate interest basis by contacting us at [email protected].

To exercise any of the rights described above contact us at [email protected]. We will exercise them within 30 days after receipt. It may take us up to 90 days in some cases, for example for full erasure of your Personal Data stored in our backup systems. We will let you know if we need more time and explain the reasons for the delay.
Please keep in mind that if we receive a vague request, we may engage the individual to better understand the motivation and content of the request. We may also refuse manifestly unfounded and excessive (repetitive) requests.
We might also require you to prove your identity in some cases. Normally, we make sure to verify that the request is coming from the same email as you indicated when registering in the App. In case of doubt, we may ask you to undergo some additional verification. This is made to ensure that no rights of third parties are violated by your request.
Subject to applicable laws, you may have a right to lodge a complaint with your local data protection authority about any of our activities (related to your privacy rights, among others) that you think are not compliant with applicable law. However, if you think that we do something incorrectly, let us know first at [email protected]. We care about your privacy and want to make sure that we did everything to address any of your concerns.
When your personal information is processed automatically you may object to such processing in some circumstances. Where your personal information is processed for direct marketing purposes, you may ask to cease processing your data for these direct marketing purposes. In order to exercise your right please contact the third-party services listed in Section 5 of this Privacy Policy to learn how you can object to processing your data. Most of them have clear instructions on their privacy pages, functional API, or other options.

8. How We Secure Your information

Security is our highest priority. We value your trust in providing us with your Personal Information, thus we are striving to use commercially acceptable means of protecting it.

We take reasonable and appropriate measures to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in the processing and nature of the personal information. We implement appropriate technical and organizational measures to assure data protection principles and encryption with strong algorithms.

Unfortunately, no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security. If your personal data is compromised by a breach of security, we will promptly notify you in compliance with applicable law.

If you want to report a security incident related to our Services please contact us at [email protected]

9. Log Data

We want to inform you that whenever you use our Services, in a case of an error in the app we collect data and information (through third-party products) on your phone called Log Data. This Log Data may include information such as your device IP address, device name, operating system version, the configuration of the app when utilizing our Services, the time and date of your use of the Services, and other statistics.

10. Links to Other Sites

This Services may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

11.California Privacy Rights

Under the California Consumer Privacy Act of 2018 (CCPA) California residents shall have the right to request:

• - the categories of personal information that is processed;
• - the categories of sources from which personal information is obtained;
• - the purpose for processing of user personal data;
• - the categories of third parties with whom we may share your personal information;
• - the specific pieces of personal information that we might have obtained about particular user provided that the data given in the request is reliable enough and allows to identify the user.

Residents of State of California (USA) have the right to request a list of all the third parties to whom our Services may disclose certain personal information (in accordance with the laws of State of California) for the purpose of marketing and advertising. If you are a resident of the State of California and want to receive such a list, please contact us at [email protected] When submitting such a request, please include in the Subject Line "California Privacy Rights", as well as your name, address, city, state and zip code. You must be able to confirm that you are a resident of the State of California (USA) and provide all required details.

12. Children’s Privacy

General age limitation. We are committed to protecting the privacy of children. The App is not intended for children and we do not intentionally collect information about children under 13 years old. The App does not collect Personal Data from any person the Company actually knows is under the age of 13. If you are aware of anyone under 13 using the App, please contact us at [email protected] and we will take the required steps to delete such information and (or) delete his/her account.

13. Retention of your Personal Data

We will retain your Personal Data as long as your account is active or needed to provide you Services, and only for as long as it serves purposes of processing identified. At any time, you can erase your Personal Data in accordance with the Privacy Policy.

If you choose to delete the App or deactivate your account, or your account becomes inactive for a while, we will retain your Personal Data for a reasonable period in case you decide to re-activate the Services. The Services cover different periods of users’ lifecycle; therefore retention of your data is needed in some cases to secure your smooth experience with other Services functions. You should be aware that we may retain certain Personal Data and other information after your account has been terminated or deleted as necessary to comply with legal obligations, resolve disputes and enforce our agreements.

In Walk Well, when you delete your account, we delete the Personal Data saved to it, including Health Data totals and walk routes, within 30 days after you confirm the deletion; copies in backup systems are erased within 90 days. Deleting the app from your device does not delete your account. In CleanCal AI, when you delete your account, we delete the Personal Data saved to it, including your meals, photos, nutrition and weight entries and Health Data totals, within 30 days after you confirm the deletion, and copies in backup systems are erased within 90 days. Our AI service provider may keep the data it received for up to 30 days, as described in Section 2. Deleting your account does not cancel a paid subscription: manage it in the App Store or Google Play.

14. Storage and international Personal Data transfers

The Company is based in the United States, and Personal Data we collect is governed by U.S. law. Please be advised that U.S. law and laws of other countries may not offer the same protections as the law of your jurisdiction.

In addition, you agree that Personal Data collected may be stored and processed in Canada and the United States, where the Company rents servers, or in any other country in which the Company or its affiliates, subsidiaries, or agents maintain facilities, and by using the Services, you consent to any such transfer of Personal Data outside of your country.

15.Communication with you

We may contact you from time to time via email or through other means (like popups or push notifications) to communicate with you about products, services, offers, promotions, rewards, and events offered by us and others, and provide news and information that we think will be of interest to you. CleanCal AI also sends push notifications (through OneSignal), such as meal reminders, if you allow them; you can turn them off at any time in your device settings or in the app.

Opt-out options. You can always opt-out of receiving emails by unsubscribing via the “Unsubscribe” link contained in the email. Opting out of these emails or notifications will not end the transmission of important service-related emails that are necessary to your use of the Services. If applicable laws prescribe so, we may ask some users to provide their consent for such communications.

Please note that we may contact you with our information about products, services, offers, promotions, rewards, and events offered by us and others via third-party platforms (like social media). Please note that you can always opt-out from such communication and usage of your Personal Data by contacting us at [email protected]

16.Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, You are advised to check our Service occasionally to inform Yourself of any changes. We will notify You of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page. Your continued use of the Service after changes to the Privacy Policy have been posted will constitute Your acceptance of such changes.

17.Contact Us

Please submit any questions, concerns, or comments You have about this Privacy Policy or any requests concerning Your Personal Information via the following email: [email protected]

© Copyright VGFIT LLC 2021. All rights reserved