Privacy Policy

Effective September 26, 2026

SixMaxx ("we", "us") is an AI ab-scan and core-training app for iPhone, published by Muhammed Ali Balcı. This policy explains what the app does with your information. The short version: your plan, history and photos live on your iPhone; photos and messages you choose to analyse are sent to our server only to produce a result and are not kept there; we don't show ads, track you across apps, or sell data.

What stays on your iPhone

Your onboarding answers (such as goal, age, height, weight and training days), your plan, completed sessions, streak, meals, weight check-ins, scan scores and scan photos are stored in the app's private storage on your device. Scan photos are saved with iOS complete file protection. This data is included in your own encrypted iPhone backups if you use them. We have no copy of it.

What is sent to our server, and why

Some features need AI analysis. When you use them, the app sends the minimum needed over an encrypted connection (HTTPS) to our API, which passes it to Google's Gemini API and returns the result:

• Ab scan: the torso photo you take or choose (resized, with location and other metadata removed) and a short profile summary such as your goal and body type.
• Meal scan and voice log: the meal photo, or the text transcript of what you said (your voice itself is not sent to us), plus your calorie and protein targets.
• Coach: your message, the recent conversation and a summary of your plan and latest scores.

Our server processes these requests in memory to produce a response. We do not store your photos, messages, transcripts or the AI's answers, and we do not log their content.

Identifiers and security data

• Anonymous account: the app creates an anonymous Firebase Authentication account. It has a random ID and no name, email or phone number. We use it to authenticate requests and to apply fair-use limits.
• Subscription status: the app sends the App Store's signed receipt for your current subscription so the server can confirm it's active. We read the product, expiry date and Apple's transaction ID; we never receive your Apple ID, name or payment details.
• Usage counters and IP address: to prevent abuse we count requests per anonymous account, per subscription and per network. IP addresses are stored only as a salted one-way hash, and counters reset every day.

Service providers

• Google (Firebase Authentication, Gemini API) processes the data described above on our behalf. See Google's Privacy Policy and the Gemini API Terms.
• Cloudflare carries encrypted traffic to our server.
• Apple handles purchases and subscriptions (App Store) and, for voice logging, speech recognition. Where your iPhone supports it, speech is recognised on the device; otherwise Apple may process audio under Apple's Privacy Policy.

What we don't do

• No advertising, no ad or analytics SDKs, no cross-app tracking.
• No selling or sharing of personal data.
• No use of your photos to identify you, and no human review of your photos.

Permissions

Camera (to take scan and meal photos) and Microphone and Speech Recognition (only for voice meal logging). SixMaxx does not send notifications. You can change permissions at any time in iOS Settings.

Your choices and deletion

In the app, go to You → Settings → Delete scan photos & history or Delete all my data. Deleting all data erases everything stored by the app on your iPhone and deletes your anonymous account. Deleting the app also removes its on-device data. Because we don't keep your content on our server, there is nothing else to delete; for any request about your data, email us.

Health information

Scan scores and body-fat numbers are AI visual estimates for fitness purposes, not medical measurements or diagnoses.

Age

SixMaxx is intended for adults 18 and over. We do not knowingly process data from anyone under 18; the scan rejects photos that appear to show a minor.

Where data is processed

Our server is hosted in Germany (EU). Google and Cloudflare may process data in other countries under their own safeguards.

Changes

If this policy changes, we'll update this page and the effective date above.

Contact

Muhammed Ali Balcı · muhammedalibalci@gmail.com