Nabzo

Privacy Policy

Effective 5 August 2026

Who we are

Nabzo is a personal health and fitness app for iPhone. It reads your Apple Health data on your device and offers dashboards, an AI coaching “buddy” (text and voice), meal photo estimates, an optional photo-based physique read, lab-result parsing (PDF or photo), weather-aware suggestions, personalized workout and diet plans, an opt-in “nearby” map with direct messaging for group activities, and an opt-in “places journal”. Some features require a paid subscription (Nabzo Pro).

Data we collect and how we collect it

Apple Health (HealthKit) data. With your permission, the app reads health metrics (steps, heart rate, HRV, sleep stages, energy, VO₂max, respiratory rate, blood oxygen, workouts, etc.) on your device to compute your dashboards and scores. Raw HealthKit data is not uploaded in bulk. Only summary values you see (e.g. a daily recovery/strain/sleep snapshot, and the specific metrics you discuss with the coach) are synced to our backend, and only when you are signed in to your account, so your data is available across devices and can inform coaching. HealthKit data is never used for advertising or marketing and is never shared with data brokers.

Profile you provide. During onboarding you may enter your name, age, sex, height, weight, goals, activity level, sports, hobbies, lifestyle answers (smoking, alcohol, diet), your chosen language, coach preference, and your country. Collected directly from what you type or select; stored to personalize coaching.

Health profile (optional survey). A separate, fully optional survey collects your occupation and how you work, your experience level, what is motivating your goal, and — in your own words where you choose to type them — health information about you: the conditions you report from a fixed list (high blood pressure, diabetes, thyroid, asthma, digestive problems, back or joint problems, and anxiety or low mood), a free-text note about those conditions, a free-text note listing the medications and supplements you take, and dietary restrictions and food allergies (including nut and shellfish allergy). You can skip any of it. If you allow AI processing, these answers are sent to our AI provider to produce a short profile summary, and that summary then travels with every coach request.

Safety questionnaire (PAR-Q). A one-time safety check records whether you are an adult, whether you are pregnant or recently gave birth, a heart or metabolic condition, heart-rate-altering medication, hypermobility, a significant injury history, and whether you have a bothersome pain right now — with the body area you name and a 0–10 severity. This is used on your device to decide how conservative your training guidance is; completing it does not turn on AI. If AI processing is on, some of these answers — and the safety conclusions drawn from them — are sent to our AI provider; see “Who receives your data” below for exactly which of them travel, and with which requests.

Menstrual cycle. If you selected Female and you log periods in Apple Health, Nabzo reads those entries on your device to work out which phase of your cycle you are in. This is used to explain your own recovery numbers — resting heart rate and HRV shift across the cycle, and without this Nabzo would read a normal luteal week as declining recovery. It is not a fertility or contraception feature, and Nabzo never writes to your cycle data. This stays on your device unless you separately switch on “Share cycle phase with the coach” in Profile, which is off by default and is not covered by the general AI consent. With it on, the coach is told only the phase name and the day number — never your flow, your dates, or your history. Turning it off stops that immediately.

Health log. Things you tell the coach (by text or voice) or photograph (meals) may be turned into dated log entries (mood, food, estimated calories, milestones) and stored so you can review trends and so the coach can “remember” them.

Lab results. If you import a lab report — a PDF or a photo — its text (or the photo image) is sent to our AI provider to read the markers. You review and confirm the values before anything is saved. Confirmed results are stored and may be included as context in your coaching (see “Who receives your data”).

Physique photo read (Pro, optional). If you choose to use this feature, a fitness photo you take or pick is sent to our AI provider to identify broad training-focus areas (e.g. “legs could use more attention”) — a casual visual impression for workout planning, never a body evaluation or medical assessment. The photo itself is not stored — only the derived summary, and only after you review and explicitly save it. This feature requires completing the app's one-time safety questionnaire and confirming you are an adult.

Voice and microphone. When you use the voice check-in or the morning “call”, the app records short audio while you speak and sends it to our AI provider for speech-to-text so the coach can respond, and generates a spoken reply. We store the resulting text, not the raw audio.

Direct messages (opt-in). If you use the social features, messages you send to other users are stored so they can be delivered. You control who can message you, and you can block or report other users.

Location (opt-in). Location is used only for features you choose:

• Nearby / weather: while the map or weather is on screen, to find nearby sports venues, fetch local weather, and (if you create/join a session) share a meeting point with other signed-in users.
• Go live: if you turn it on, your live location is shown as a pin, with your name, to signed-in Nabzo users you have not blocked — not only to your friends — and only while you are “live.” Going live requires two switches that are both off by default. You can stop anytime, and it clears when you leave the map.
• Places journal (off by default): if you enable it, the app uses Apple's battery-light “visit monitoring” (which needs the “Always” location permission) to note places you spend time. The journal itself is stored on your device and individual dated visits are never sent anywhere. What the app does derive from it, and does include as coaching context, is: the areas it has learned as your home and work (named by a nearby venue, e.g. “Home: around <venue>”), your most-visited places with visit counts, any pattern it finds between a place and your stress level, and time you spend in a vehicle. You can turn it off anytime, which stops monitoring and clears the local journal.

Mind check-ins (optional). If you complete one of the app's short wellbeing questionnaires (WHO-5, PSS-4, PHQ-2, GAD-2, or the TIPI personality check), the score and date are stored, and the recent scores — including whether a score came back in an elevated range — are included as coaching context so the coach can respond appropriately. These are wellness self-checks, not a diagnosis.

Phone-use signal. The app counts how often you open it late at night (after 23:00) as a rough proxy for late-night screen use, and includes that count as coaching context. It does not observe your use of any other app.

Subscription (payments). Nabzo Pro is billed by Apple through the App Store. Apple handles the payment; we never see or store your card details. We receive Apple's subscription status (active / not) to unlock features.

Account. We use Sign in with Apple and store the identifier Apple provides.

Everything we use your data for

• Compute and show your dashboards, scores, trends, and insights on your device.
• Personalize the AI coach's replies, plans (workout, diet, sleep, wellness), and daily insights.
• Remember facts you share so the coach has long-term context.
• Turn your health-profile answers into a short summary the coach reuses, and use your safety answers to keep training guidance conservative.
• Estimate calories from meal photos and read markers from lab reports you import.
• Fetch local weather and find nearby venues for the features you use.
• Deliver direct messages, group sessions, and live-location sharing you choose to use.
• Keep your data in sync across your devices via your account.
• Verify your subscription status and unlock paid features.
• Send local notifications you enable, respond to support requests, and keep the service secure.

We use your data for no other purpose. No advertising, no profiling for third parties, no sale of data.

Your consent before any AI processing

Before the app sends any of your data to an AI provider for the first time, it shows you a consent screen that names the current AI provider(s), lists exactly what will be sent, and asks for your explicit permission. AI features (coach chat, voice, insights, photo and lab reads, plans) stay off until you agree. If you decline, the rest of the app keeps working without AI. You can withdraw your consent at any time in Profile, which turns AI features off again.

Who receives your data (third parties)

• Supabase (backend hosting, authentication, and database) stores your account, profile, daily snapshots, health log, labs, messages, and any group sessions you create. Row-level security restricts each row to its owner (group sessions are visible to other signed-in users by design).
• OpenAI is our only AI provider — every AI feature in Nabzo sends its data to OpenAI, and aside from Apple's speech recognition (described in the Apple entry below) no other AI company receives it. What is sent, in full:
  • Coaching conversations, daily insights, and profile synthesis: your chat messages, plus the context that makes coaching relevant. That context is: your profile — including your name, age, sex, height, weight, goals and lifestyle answers, and your occupation and how you work; the AI profile summary described above, which is derived from your health-profile answers and is attached to every coach request; today's health metrics and scores plus your longer-term trends, your bedtime and wake time, how long you took to fall asleep, your wind-down, daytime naps, and blood pressure if you have shared it; the insight cards the app shows you on Today (their headlines and text, so the coach stays consistent with them); local weather and your country; facts the coach has remembered from earlier conversations; your workouts, training plan, logged meals with their calories, sleep-journal and lifestyle answers, streaks, and your energy/stress/soreness ratings; your saved lab marker values (most recent per marker, out-of-range ones first — these travel with ordinary coach chats, not only when you import a report); your recent mind check-in scores, including elevated flags; and the location-derived signals described under “Places journal” above — your home and work areas, your most-visited places with visit counts, place↔stress patterns, and driving time — plus the late-night app-open count.
    
    The coach also receives the conclusions of your safety check: whether clinician clearance is indicated, whether the check has been completed, whether higher-intensity and sauna-type options are unlocked for you, whether a heart-rate-based recovery score is meaningful for you, the movement types to avoid today if you reported hypermobility (end-range, ballistic and heavy full-range work — the answer itself is not sent), and — if you reported significant pain — that fact and the resulting “hold training and get it checked” recommendation. These travel because they are what stops the AI recommending training load on top of pain or an uncleared condition.
    
    Profile synthesis additionally sends the raw health-profile answers themselves: the medical conditions you reported (including anxiety or low mood), your free-text notes about those conditions, the medications and supplements you listed, and your dietary restrictions and food allergies — together with your name, occupation, work style, experience level and goal detail.
  • Voice, photos, labs, and plans: the audio you record (for speech-to-text), the coach's replies (for spoken audio), meal photos, lab reports (PDF text or the photo image — which normally also carry your name, date of birth and clinic), the optional physique photo (Pro), and the profile and metrics used to build your workout, diet, sleep, and wellness plans — including your name, and, for the diet-and-exercise plan, your injury history and your current pain flag and body area, your country, and the derived physique read. Sleep analysis also sends your sleep stages, bedtime and wake time, and your sleep-journal notes and lifestyle answers.
  We send only what is needed for that request. Audio is sent for transcription and is not retained by us as audio — we keep the resulting text. The physique photo is not stored. If we ever change AI provider, the in-app consent screen and this policy will name the new provider before your data is sent to it.
• Apple provides Sign in with Apple, App Store subscription billing (Apple — not us — processes your payment), WeatherKit and Apple Maps (MapKit) for weather and nearby venues, and, if enabled, local notifications. Apple also performs speech recognition. When you use the voice check-in, iOS transcribes your speech; depending on your device and language this may be processed on Apple's servers rather than on the device. Apple's handling of it is governed by Apple's own privacy policy.
• Open-Meteo may receive your approximate coordinates to return local weather (as a fallback weather source).
• Other users: by design, group sessions are visible to signed-in users, and content you deliberately share — a direct message, or your live location while “live” — is shared with the users you send it to.

International transfers. Your data may be processed on servers outside your own country. OpenAI processes it in the United States. Wherever it is processed, it travels encrypted and remains covered by the equal-protection requirement above.

AI and accuracy

Coaching, calorie estimates, lab interpretations, biological-age estimates, and health scores (Recovery, Strain, Energy, Sleep, etc.) are AI-generated or heuristic estimates for general wellness only. They are not medical advice, diagnosis, or treatment. Always consult a qualified professional for medical decisions.

Data retention and deletion

• We keep your data only while your account exists and only to run the app for you.
• Delete everything: in the app, Profile → Delete account & data permanently deletes your account and all associated data from our backend.
• Revoke Health access anytime in iOS Settings → Privacy & Security → Health.
• Revoke location or microphone access anytime in iOS Settings → Nabzo.
• Turning off the places journal stops visit monitoring and clears the local journal.

Your rights

Wherever you live, we give you the same set of rights over your data:

• Access & portability: ask for a copy of your data in a portable format.
• Correction: fix inaccurate profile or log data (most of it you can edit directly in the app).
• Deletion: delete everything yourself in the app (Profile → Delete account & data) or ask us to do it.
• Withdraw consent: turn off AI processing, location, microphone, or Health access at any time, as described above — without losing the rest of the app.
• Restriction & objection: ask us to limit or stop a particular use of your data.
• Complaint: if you are in the EU/EEA, UK, or another region with a data-protection authority, you may lodge a complaint with your local supervisory authority.

To exercise any of these rights, email aliyeveea@gmail.com. We respond within 30 days.

Security

Data in transit is encrypted (HTTPS). Access to your rows is restricted to your authenticated account. No method of storage or transmission is 100% secure.

Children

Nabzo is not directed to children under 16, and we do not knowingly collect their data.

Changes

We may update this policy; the effective date above will change. Material changes will be highlighted in the app or on this page. If a change affects what is sent to an AI provider or who that provider is, the app will ask for your consent again before sending anything new.