RepBeit隐私政策
我们保存什么、为什么保存，以及你如何控制自己的记录。
适用于 RepBeit App 与这些公开网页。条款版本 9。
账号和同步
激活账号后，训练、饮食、体重、资料、设置、助手记忆、AI 修改记录和已保存的户外路线会同步到 RepBeit 服务器，用来在你的设备之间保存和恢复。资料可能包括名字、年龄、性别、身高、器械、目标和头像；部分记录可能来自你授权读取的 Apple 健康。Supabase 与所选登录服务处理账号验证，Resend 发送登录链接；它们会处理邮箱和验证所需的数据。登录邮件包含敏感链接，请勿转发。未登录时可只在本机记录。
邀请制内测
登录后需要邀请码激活，才能使用同步、助手、餐食识别和社区。每个激活账号有一个邀请码，最多邀请 3 人；用完或撤销后不能再兑换。删除账号不会退还已使用的邀请名额。
食物照片识别
仅在登录、邀请码激活并同意本说明后，餐食识别才会把你在饮食页选择的照片发到 RepBeit 识别服务器（内测期间为开发者的 Mac Studio）。上传的是重新编码的照片，不上传原文件的 EXIF 位置标签；照片画面本身仍可能包含个人信息。服务器保存照片、识别结果、你确认或修改的食物与份量、随机设备编号和经验证的账号编号，用于提供识别、评测和改进本项目的餐食模型（可能作为训练数据）。这些餐食数据与账号关联，不是匿名数据；不会把 Apple 健康导入的训练、体重或 Watch 心率作为餐食模型训练数据。识别在本项目服务器运行；只有你另外主动发给助手的照片才会转交 Anthropic。Cloudflare 处理网络传输。餐食数据在你保留账号期间保存，外置盘保留最近 14 份成功快照，快照未额外加密；删除账号时清理关联照片和已有备份内容，失败自动重试。早期匿名上传需提供设备编号另行核对。你可以拒绝或关闭识别并手动记录；停止上传不会自动删除已上传的数据。未登录或未激活时不上传识别或备份。
RepBeit 助手与 Anthropic
助手首次使用会另行征求同意。你发送的文字、照片、最近几轮对话，以及回答所需的资料、目标、饮食、训练、体重、器械、计划与追踪摘要，会经 RepBeit 服务器发送给 Anthropic 的 Claude API；摘要也可能包含 Apple 健康导入的记录。助手需要进一步查询时，相关记录或所选日历的忙闲起止时间也会发送，不发送日历活动标题、地点或参与人。RepBeit 服务器不建立完整聊天或助手照片存档；但你确认修改记录时，会把该次请求描述（最多 200 字）及修改前后值作为 AI 修改记录随账号保存，用于查看和撤销。调用日志另保存与账号关联的时间、任务、模型、用量、耗时和成功状态，错误日志不包含异常正文。Anthropic 可能根据其 API 保留政策和安全、法律要求处理或保留请求与回答，本项目不承诺第三方零保留。你可以不使用助手，继续手动记录。
聊天缓存与助手记忆
本机保留最近聊天的文字、回答和卡片，最长在最后一次保存后的 6 小时内可恢复，对话缓存本身不随账号同步；确认过的 AI 修改记录另行同步，本机显示最近 20 次，入口为助手「更多 → AI 修改记录」；过期会在下次载入时清除，退出登录也会清除。助手照片只在当前页面内存中，除非你另外选择存入饮食。开启记忆时，助手可以自动保存身体限制、偏好和安排等简短笔记，每次会在回答下显示并提供撤销；笔记随账号同步，并用于后续回答。可在助手右上角「更多 → 记忆管理」查看、编辑、删除或关闭；关闭会停止发送和新增记忆，但不会删除已有笔记。App 在下次检查记忆时清理已过期笔记：带日期的安排到期一周、最近情况满 30 天；其他笔记保留到你删除，旧备份按快照轮换清理。训练、饮食、目标等建议修改仍需点确认才写入。
语音、日历与提醒
按住说话时才采集语音。视 iOS 版本和语言，Apple 可能在设备上或其服务器上识别；RepBeit 不保存或向自身服务器上传录音，转出的文字作为你的助手消息发送。日历是可选功能；系统可能请求完整日历权限，但 App 只使用所选日历的忙闲时间，并在你点确认后新增训练。日历名称和来源仅留在本机；提供给助手的时间段可能作为对话缓存留存。提醒定义随账号同步，通知由 iPhone 本地排程，不使用远程推送服务。
位置、地图与社区
仅在你主动录制户外运动或分享动态位置时获取位置。保存的路线含精确坐标、时间和可用海拔，会跟随激活账号同步；未保存草稿留在本机。查看底图时 Apple MapKit 请求相关区域地图，路线覆盖图在本机绘制。社区资料和公开动态可被其他已激活用户查看；私密动态仅自己可见。只有主动开启动态位置分享才会附带坐标。私信和群消息保存在服务器，不是端到端加密；举报私信仅提交所举报的一条消息。
社区规则与举报
社区禁止色情、仇恨、骚扰、暴力威胁、垃圾信息和泄露他人隐私。文字经过基础规则过滤，公开照片和新头像先人工审核；规则不能识别所有不当内容。可以举报动态、评论、消息或用户，也可以屏蔽用户。管理员可查看待审内容和相关举报证据、移除内容或暂停账号云服务。当前服务中的未处理举报证据保留 30 天，处理后清除证据和补充说明；旧备份按快照轮换清理。申诉请到 repbeit.com/support。
Apple 健康与用途限制
iPhone 经授权读取训练和体重，不向健康写入；连接 Watch 时另行请求心率和能量权限，Watch 训练读取心率与能量消耗，并保存训练与能量消耗。相关记录可随账号同步、用于进步统计；只有同意使用助手后，回答所需的记录摘要才发给 Anthropic。我们不出售个人数据、不进行跨 App 广告追踪，不将 Apple 健康或 Watch 健康数据用于广告、出售或餐食模型训练。
服务商与保存
内测账号数据存于开发者 Mac Studio，外置硬盘保留最近 14 份成功备份，快照未额外加密。训练详情在手机按 90 天规则精简，服务端和已保存路线保留到你删除。Cloudflare 处理网站与 API 请求及 IP 地址；Supabase、登录服务商和 Resend 处理身份与邮件；Anthropic 处理助手内容；Apple 处理可选语音、地图和 iCloud 客服邮件。客服往来、服务商按其政策或法律要求保留的数据，不随 App 删号立即全部清除，可通过支持页提出请求。我们不在 App 或公开页面加入广告追踪脚本。
你的选择、删除与联系
拒绝相机、照片、位置、语音、日历或健康权限仍可手动记录；可在系统设置撤销权限。可导出记录，或在「设置 → 账号」删除账号和本机记录；服务器会清理关联账号数据、餐食照片及已有备份中的账号内容，失败明确提示并自动重试。恢复备份会排除已删除账号，为此保留最小删除记录和防滥用标记；其他设备须联网同步或另行清除本机副本。停止同步、关闭识别或关闭记忆不等于删除已保存数据。隐私、更正、删除请求及审核申诉可通过 repbeit.com/support 联系；服务不用于紧急求助。
不是医疗建议
App 和助手提供一般健身参考，不能代替医生；怀孕、生病、受伤、有进食障碍或在用药时请先咨询医生，不要把助手当作诊断或紧急求助工具。
Privacy policy
What we keep, why we keep it, and how you control your records.
Applies to the RepBeit app and these public pages. Terms version 9.
Your account and sync
After account activation, training, food, weight, profile, settings, assistant memory, AI change records and saved outdoor routes sync to RepBeit to keep and restore them across your devices. A profile may include your name, age, sex, height, equipment, goals and photo; some records may come from Apple Health with your permission. Supabase and your chosen sign-in provider handle authentication; Resend sends sign-in links and processes your email address and verification data. Sign-in emails contain sensitive links; do not forward them. You can keep local records without signing in.
Invite-only beta
Activate with an invite code after sign-in to use sync, the assistant, meal recognition and Community. Each activated account can invite up to 3 people. Used-up or revoked codes cannot be redeemed. Account deletion does not refund used invitations.
Meal photo recognition
Meal recognition uploads only photos you choose on Food, after sign-in, invite activation and agreement to this notice. The RepBeit recognition server runs on the developer’s Mac Studio during the beta. Photos are re-encoded without the original file’s EXIF location tags; visible details in the image may still identify you. The server keeps the photo, recognition result, food and portion corrections, random device ID and verified account ID to provide recognition and evaluate and improve our meal model, possibly as training data. These records are linked to your account, not anonymous. Workouts and weight imported from Apple Health, and Watch heart rate, are not used to train the meal model. Recognition runs on our server; only photos you separately send to the assistant go to Anthropic. Cloudflare handles network traffic. Meal data is kept while you retain the account. The external drive keeps the latest 14 successful snapshots without additional encryption. Account deletion clears associated photos and existing backup contents, retrying failures. Early anonymous uploads need a device ID to check ownership. Decline or turn off recognition and log manually; stopping uploads does not erase existing server data. Guests and inactive accounts do not upload for recognition or backup.
RepBeit Assistant and Anthropic
The assistant asks separately before its first use. Your text, photos, recent conversation and the profile, goals, food, workouts, weight, equipment, routines and tracker summaries needed to answer go through RepBeit to Anthropic’s Claude API. Summaries may include records imported from Apple Health. Follow-up reads may send relevant records or busy-time ranges from your selected calendar, without event titles, locations or attendees. RepBeit does not archive complete conversations or assistant photos on its server. When you confirm a data change, its request description (up to 200 characters) and before/after values are saved with your account as an AI change record for review and undo. Separate call logs store account-linked time, task, model, usage, duration and success status; error logs omit exception bodies. Anthropic may process or retain requests and answers under its API retention policy and safety or legal requirements; this project does not promise third-party zero retention. You can decline the assistant and continue manual logging.
Chat cache and assistant memory
This device can restore recent chat text, answers and cards for up to 6 hours after the last save; the conversation cache itself is not synced and is cleared on the next load after expiry or when you sign out. Confirmed AI change records sync separately; the device shows the latest 20 under More → Changes by the assistant. Assistant photos stay in the current page’s memory unless you separately save one to Food. With memory on, the assistant can automatically save short notes about body limits, preferences and plans, showing each change below its reply with Undo. Notes sync with your account and are used in later answers. View, edit, delete or disable them in the assistant’s top-right More → Memory menu. Disabling memory stops sending and adding notes without erasing existing notes. The app clears expired notes when it next checks memory: dated plans one week after their date and recent notes after 30 days. Other notes remain until deleted; older backups expire by snapshot rotation. Suggested changes to workouts, meals and goals still need confirmation.
Speech, calendar and reminders
Audio is captured only while you hold to talk. Depending on iOS and language, Apple may transcribe on-device or on its servers. RepBeit does not store recordings or upload audio to its own server; the transcript is sent as your assistant message. Calendar connection is optional. The system may request full calendar access, while the app uses busy times from your selected calendar and adds workouts only after confirmation. Calendar names and sources stay on this device; time ranges sent to the assistant may remain in the chat cache. Reminder definitions sync with your account; iPhone schedules notifications locally, without a remote push service.
Location, maps and Community
Location is used when you start an outdoor recording or share a post’s location. Saved routes include precise coordinates, times and available elevation and sync with an activated account; unsaved drafts stay on this device. Apple MapKit requests maps for the relevant area; route overlays are drawn locally. Community profiles and public posts are visible to other activated users; private posts are author-only. Post coordinates are included only when you enable location sharing. Direct and group messages are stored on the server and are not end-to-end encrypted; a message report submits only the reported message.
Community rules and reports
Sexual content, hate, harassment, threats, spam and disclosure of other people’s private information are prohibited. Text passes basic rules; public photos and new profile photos require human review. Rules cannot detect all violations. Report posts, comments, messages or users, or block users. Moderators can inspect pending content and relevant report evidence, remove content or suspend cloud access. Unresolved evidence in the live service is kept for 30 days and cleared with additional details upon resolution; old backups expire through snapshot rotation. Appeal through repbeit.com/support.
Apple Health and limits on use
With permission, iPhone reads workouts and weight without writing to Health. Connecting Watch separately requests heart-rate and energy permissions; Watch reads heart rate and active energy during training and saves workouts and active energy. Records can sync with your account and support progress statistics; summaries needed for an answer go to Anthropic only after assistant consent. We do not sell personal data, track across apps for advertising, or use Apple Health or Watch health data for advertising, sale or meal-model training.
Providers and retention
During the beta, account data is on the developer’s Mac Studio. An external drive keeps the latest 14 successful backups without additional snapshot encryption. The phone reduces workout detail under a 90-day rule; server records and saved routes remain until deleted. Cloudflare processes website/API requests and IP addresses. Supabase, sign-in providers and Resend handle identity and email; Anthropic handles assistant content; Apple handles optional speech, maps and iCloud support mail. Support correspondence and data retained by providers under their policies or legal obligations are not all erased immediately by app account deletion; contact support to request help. The app and public pages do not include advertising trackers.
Your choices, deletion and contact
You can log manually if you decline camera, photo, location, speech, calendar or Health access, and revoke permissions in system settings. Export records or delete your account and this device’s records in Settings → Account. The server clears associated account data, meal photos and account contents in existing backups, stating failures and retrying. Restores exclude deleted accounts using minimal deletion and abuse-prevention markers; other devices need to sync or have their local copies cleared separately. Stopping sync, recognition or memory does not erase saved data. Contact repbeit.com/support for privacy, correction, deletion requests or appeals. The service is not an emergency channel.
Not medical advice
The app and assistant offer general fitness guidance, not medical advice. If pregnant, ill, injured, taking medicine or affected by an eating disorder, consult a clinician. Do not use the assistant for diagnosis or emergencies.