Data Retention Policy

1. About This Policy

This Data Retention Policy ("Policy") describes how Aivrio Solutions Pte. Ltd. ("Aivrio", "we", "us", or "our"), a company incorporated in Singapore (UEN: 202610813K), determines how long we retain personal data collected through the nibFIT mobile application and associated services (collectively, the "Services").

This Policy supplements our Privacy Policy, which explains what data we collect and why. Together, these documents form our data governance commitment to you under the Personal Data Protection Act 2012 of Singapore ("PDPA").

Our guiding principle is simple: we keep your data only for as long as it serves a clear and legitimate purpose. When that purpose ends, we delete or anonymise it.

2. Retention Schedule

The following summarises how long we retain each category of personal data. Detailed explanations are provided in Section 3.

• Account and profile data — retained for the duration of your account, then deleted within 45 days of an account deletion request.
• Meal logs — retained for 2 years from the date of entry, then automatically deleted.
• Meal photos — not retained. Discarded immediately after AI processing is complete.
• Exercise logs — retained for 2 years from the date of entry, then automatically deleted.
• Weight logs — retained for the duration of your account, then deleted as part of account deletion.
• AI-generated workout plans — retained for the duration of your account, then deleted as part of account deletion.
• Streak and journey progress data — retained for the duration of your account, then deleted as part of account deletion.
• Coach Mode data and comments — retained for 1 year from the date of entry, then automatically deleted.
• Coach linking tokens — expire after 5 minutes from generation and are purged nightly.
• Analytics event data — retained for up to 12 months on an anonymised or pseudonymised basis.
• Crash and error logs — retained for up to 90 days.
• Server function logs — retained for 1 to 3 days by our hosting infrastructure.
• Encrypted backup copies — may persist for up to 90 days after deletion for disaster recovery purposes.
• De-identified and aggregated data — may be retained indefinitely as it contains no personal data.

3. Detailed Explanations

3.1 Account and Profile Data

Your account information (name, email address, date of birth, gender) and body metrics (height, weight, activity level, fitness goals, target weight) are retained for the duration of your account. When you submit a deletion request, we apply a short grace period to allow for accidental deletions. All personally identifiable profile data is permanently deleted within 45 days of the deletion request — consistent with our Privacy Policy.

Authentication credentials are managed by our third-party authentication provider and are not stored directly by Aivrio. On account deletion, we submit a corresponding deletion request to that provider to remove your identity from their systems.

3.2 Meal Logs

Food entries — including items logged via text search, voice input, barcode scan, or manual entry — are retained for 2 years from the date of entry, after which they are automatically deleted by a nightly purge process. Two years provides meaningful long-term nutrition trend value while keeping data storage proportionate to need.

Meal photos are never stored on our servers. When you use the camera feature to analyse a meal, the photo is transmitted to our AI processing pipeline and discarded immediately after macro extraction is complete. No image is written to any database or file store by Aivrio.

3.3 Exercise Logs

Exercise records are retained for 2 years from the date of entry, consistent with the meal log policy. This provides a meaningful window for tracking long-term fitness progress without indefinite retention of granular activity data.

3.4 Weight Logs

Body weight entries are retained for the lifetime of your account. Weight trend data is uniquely valuable over a long period — you may want to view multi-year progress. Weight log entries consist only of a date, a weight value, and your account identifier, and are deleted as part of full account deletion.

3.5 AI-Generated Workout Plans and Streak Data

Your AI-generated weekly workout plans and journey progress data (including streaks) are retained for the lifetime of your account. These represent your personal fitness history and are deleted as part of full account deletion.

3.6 Coach Mode Data

If you participate in Coach Mode, your shared journal data and any comments added by your linked coach are retained for 1 year from the date of each entry, after which they are automatically purged. Coach linking tokens — temporary credentials used to establish the coach-user connection — expire after 5 minutes from generation and are also removed by a nightly cleanup job.

If you revoke coach access via Profile → Coach Mode, your coach immediately loses the ability to view new journal entries. Historical coach comments remain subject to the 1-year rolling deletion.

3.7 Analytics and Error Data

Analytics events are collected on an anonymised or pseudonymised basis and are retained for up to 12 months, consistent with our Privacy Policy. Aggregated, de-identified insights derived from this data may be retained indefinitely as they contain no personal data.

Crash and error logs are retained for up to 90 days. We configure our error monitoring tools to redact personal identifiers from error payloads. Raw logs are never used for profiling or marketing.

Server function logs generated by our hosting infrastructure are retained for 1 to 3 days and purged automatically by the platform. We do not log personal data — such as meal content, body metrics, or authentication tokens — in server function logs.

3.8 Backup Copies

Encrypted database backup copies may persist for up to 90 days after a deletion event for disaster recovery purposes. These backups are encrypted at rest, access-controlled, and are not used for operational processing. They are destroyed on a rolling automated schedule.

3.9 AI Provider Data

When you use AI features (meal photo analysis, workout plan generation, coaching tips), your submitted content is processed by third-party AI providers as described in our Privacy Policy. Data submitted to these providers is subject to their respective privacy policies and data processing terms. We do not control the retention practices of these providers, and we do not submit your full health record or sensitive identifiers beyond what is necessary to fulfil your specific request.

3.10 De-identified and Aggregated Data

Data that has been fully anonymised and aggregated such that no individual can reasonably be re-identified falls outside the scope of this Policy. Such data — for example, aggregate statistics on feature usage — may be retained indefinitely for service improvement and research purposes.

4. Account Deletion

You may request deletion of your account and all associated personal data at any time. Deletion requests can be submitted in two ways:

• In-App: navigate to Profile → Settings → Delete Account.
• By Email: contact us at contact@nibfit.app with the subject line "Account Deletion Request".

Upon receiving your request, we will:

• Immediately prevent your account from being accessed.
• Apply a short grace period during which your account can be recovered by contacting us. No new data will be collected during this period.
• Permanently delete all personal data from our live systems — including your profile, meal logs, exercise logs, workout plans, and weight logs — within 45 days of the deletion request.
• Submit a corresponding deletion request to our authentication provider to remove your identity from their systems.
• Send you a confirmation email once deletion is complete.

Encrypted backup copies may retain your data for up to a further 90 days as described in Section 3.8. Anonymised, aggregated data derived from your usage is not deleted as it cannot be linked back to you.

If you are a Singapore resident and are not satisfied with our response to a deletion request, you may lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC) at www.pdpc.gov.sg.

5. Relationship to Our Privacy Policy

This Data Retention Policy forms part of our broader privacy framework. For information on what data we collect, how we use it, how we protect it, your rights under the PDPA, and how to contact us, please refer to our Privacy Policy.

In the event of any inconsistency between this Policy and the Privacy Policy, the Privacy Policy shall prevail.

6. Updates to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, or legal obligations. Material changes will be communicated via in-app notification or email to the address associated with your account, with at least 14 days' notice before they take effect. The updated Policy will be posted on our website with a revised effective date.

7. Contact Us

For questions about this Policy or to exercise your data rights, please contact us:

We aim to respond to all enquiries within 30 days.