Data Retention Policy
How long we keep your data, what happens when you delete your account, and how to request removal. No surprises.
Effective date: 1 March 2026 · Aivrio Solutions Pte. Ltd.
1. Overview
nibFIT is operated by Aivrio Solutions Pte. Ltd. (UEN: 202610813K), incorporated in Singapore. We retain personal data only for as long as necessary to provide the service, meet our legal obligations, and resolve disputes. This policy sets out specific retention periods for each category of data we hold.
2. Retention periods by data type
| Data category | Retention period | Reason |
|---|---|---|
| Account profile (name, email, body metrics) | Until deletion + 30 days | Active service delivery. 30-day grace period allows account recovery before permanent deletion. |
| Meal logs | Until deletion + 30 days | Required for calorie tracking, AI coaching, and progress history while account is active. |
| Workout logs & exercise data | Until deletion + 30 days | Required for workout history, plan tracking, and progress charts. |
| Weight logs | Until deletion + 30 days | Required for weight trend chart and BMR recalculation. |
| Fitness plan data | Until deletion + 30 days | Required to display and restore your personalised workout plan. |
| AI coaching cache (daily tips) | 7 days rolling | Short-term cache to avoid redundant AI calls. Not personally identifying beyond your user ID. |
| Meal photo images | Not stored | Photos are sent to our AI proxy for analysis and immediately discarded. We do not retain meal images. |
| Push notification tokens | Until deletion or token refresh | Required to deliver reminders and notifications. Invalidated automatically when the OS refreshes the token. |
| Referral records | 2 years | Retained to honour rewards, resolve referral disputes, and prevent abuse. |
| Coach–client relationship records | Until deletion + 30 days | Required to maintain access controls between coaches and clients while accounts are active. |
| Coach comments | Until deletion + 30 days | Visible to both coach and client; deleted with the account of whichever party requests deletion. |
| Subscription & billing status | 7 years | Singapore tax and financial record-keeping obligations under the Income Tax Act and GST Act. |
| Deletion request records | 2 years | Retained to confirm compliance with deletion requests and to respond to regulatory enquiries. |
| Crash & error logs | 90 days | Used for debugging and service stability. Logs do not contain meal content or health data. |
| Anonymous usage analytics | 24 months | Aggregated product analytics used to improve the app. Not linked to your identity after anonymisation. |
3. Account deletion process
You can delete your account at any time from Profile → Account → Delete Account in the app. When you request deletion:
- Your account is immediately marked as deleted and you lose access to the app.
- All personal data listed above (except where a longer statutory period applies) is permanently deleted within 30 days.
- A confirmation email is sent to the address on file once hard-deletion is complete.
- Subscription and billing records are retained for 7 years as required by Singapore financial regulations — this data is held separately and is not accessible within the app.
If you change your mind within the 30-day window, contact us at contact@nibfit.app and we can restore your account.
4. Data minimisation
We collect only what is necessary to provide the service. We do not collect precise location data, device contacts, or financial payment details (payments are handled entirely by Apple's App Store). Meal photos are processed in memory and never written to persistent storage on our servers.
5. Third-party data processors
Some personal data is processed by third-party service providers on our behalf — including infrastructure hosting, authentication, AI analysis, and subscription management. Each provider operates under a data processing agreement and is contractually required to handle data in accordance with applicable privacy laws. We do not sell your data to any third party, and no provider is permitted to use your data for their own purposes beyond delivering the service. If you would like a list of the specific providers we use, please contact us at contact@nibfit.app.
6. Your rights
Under Singapore's Personal Data Protection Act (PDPA), you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Withdraw consent to data processing (subject to legal obligations)
- Request deletion of your personal data
- Port your data to another service (we can export your meal and workout logs in JSON format on request)
To exercise any of these rights, email contact@nibfit.app. We will respond within 30 days.
7. Data security
All data is encrypted in transit (TLS 1.2+) and at rest. Database access is restricted by row-level security policies. API endpoints are protected by shared-secret authentication. We conduct internal security reviews before each major release.
8. Changes to this policy
We may update this policy as our data practices change or as legal requirements evolve. Material changes will be communicated via in-app notification at least 14 days before they take effect. The effective date at the top of this page always reflects the current version.
9. Contact
Aivrio Solutions Pte. Ltd.
60 Paya Lebar Road, #06-28 Paya Lebar Square
Singapore 409051
UEN: 202610813K
contact@nibfit.app