Legal

Privacy Policy

Last updated July 2, 2026

This Privacy Policy explains how James R. McCarthy Jr., a sole proprietorship based in Mesa, Arizona, United States ("NewYou AI," "we," "us," or "our"), collects, uses, shares, and protects your information when you use the NewYou AI mobile application, the website at newyouai.app, and the web app at app.newyouai.app (together, the "Service").

By using the Service you agree to this Privacy Policy. If you do not agree, do not use the Service. This policy is written to align with the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and the U.S. Children's Online Privacy Protection Act (COPPA).

1. Who we are and how to contact us

  • Data controller: James R. McCarthy Jr. (sole proprietor), Mesa, Arizona, USA.
  • Postal address: Mesa, Arizona.
  • Privacy, legal, and support contact: support@newyouai.app.
  • EU/UK representative (GDPR Art. 27): [EU REP if required].

2. Scope

This policy covers the NewYou AI iOS app, the marketing site (newyouai.app), and the progressive web app (app.newyouai.app). It does not cover third-party services that have their own privacy policies, which we link to in Section 7.

3. Information we collect

  • Account and identity data: email address and authentication identifiers when you sign up with email/password or Sign in with Apple. If you use Sign in with Apple with private email relay, we receive only the relay address.
  • Fitness and health-related data you enter: workouts, nutrition and calorie logs, body weight, habits, streaks, goals, and progress notes.
  • Progress photos: optional photos you attach to weigh-ins to track visual change over time.
  • Future You photos: the selfie or body photo you upload for an AI-generated transformation preview, and the resulting AI-generated image.
  • Subscription and purchase status: whether you have an active subscription and related entitlement data. Payment card details are handled by Apple and are never collected or stored by us.
  • Device permissions you grant: camera, photo library, and notifications. You can change these at any time in your device settings.
  • Limited technical data: basic information needed to operate and secure the Service, such as app version and error/diagnostic events. We do not use third-party advertising or analytics tracking (see Section 12).

4. Future You and AI processing

When you use Future You, the photo you upload is sent to our servers and processed by third-party AI services (including OpenAI) to generate an illustrative image of a possible future physique. Uploaded photos and generated images are stored in private, access- controlled cloud storage tied to your account.

Future You output is illustrative only — it is not a medical prediction, diagnosis, guarantee, or health outcome, and should not be used to make health decisions.

Future You is intended for users 18 and older. We do not knowingly process transformation photos for users under 18. We do not use your Future You photos to train third-party AI models except as strictly necessary to generate your image, and we seek no-retention or limited-retention terms with AI vendors where available.

5. Sensitive data

Body photos and health/fitness information may be considered sensitive personal data (or a special category of data) under GDPR, UK GDPR, and CPRA. We process this data only with your explicit consent, only to provide the features you request, and we minimize what we collect. You can withdraw consent at any time by deleting the relevant content or your account (see Section 8). We do not use sensitive data to infer characteristics for advertising.

6. How we use your data and legal bases

We use your data to:

  • Provide coaching, tracking, sync, and Future You features.
  • Create, secure, and support your account.
  • Process and manage subscriptions.
  • Respond to support and rights requests.
  • Maintain reliability, prevent abuse, and fix bugs.
  • Comply with legal obligations.

Where GDPR/UK GDPR applies, our legal bases are:

  • Contract (Art. 6(1)(b)): to deliver the Service you sign up for.
  • Consent (Art. 6(1)(a) and Art. 9(2)(a)): for progress photos, Future You photos, and other sensitive data.
  • Legitimate interests (Art. 6(1)(f)): to secure the Service and prevent abuse, balanced against your rights.
  • Legal obligation (Art. 6(1)(c)): where we must retain or disclose data by law.

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

7. Service providers and international transfers

We share data only with service providers (processors) who help us operate the Service, under contracts that require them to protect your data and use it only on our instructions:

  • Supabase — authentication, database, and file storage (privacy).
  • OpenAI — Future You image generation (privacy).
  • Apple — App Store subscriptions and Sign in with Apple (privacy).
  • RevenueCat — subscription management (privacy).
  • Vercel — website and web app hosting (privacy).

These providers may process data in the United States and other countries. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. We may also disclose data to comply with law, enforce our terms, or protect rights and safety.

8. Retention and deletion

We keep personal data only as long as needed for the purposes above or as required by law. You can delete individual Future You transformations and your entire account from within the app. When you delete Future You content, we remove the associated source photo and generated images. When you delete your account, we remove your associated fitness data and photos from our active systems, subject to reasonable backup retention periods and legal requirements.

To request deletion or ask questions about your data, email support@newyouai.app.

9. Your rights (GDPR / UK GDPR)

If you are in the EEA or UK, you have the right to:

  • Access a copy of your personal data.
  • Correct inaccurate data.
  • Delete your data (right to erasure).
  • Restrict or object to certain processing.
  • Data portability.
  • Withdraw consent at any time, without affecting prior lawful processing.
  • Lodge a complaint with your local data protection supervisory authority.

10. Your rights (California — CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose.
  • Delete personal information we hold about you.
  • Correct inaccurate personal information.
  • Limit use and disclosure of sensitive personal information.
  • Opt out of sale or sharing — note that we do not sell or share your personal information.
  • Not be discriminated against for exercising your rights.

To exercise any of these rights, contact support@newyouai.app. We will verify your request and respond within the timeframes required by law. You may use an authorized agent where permitted.

11. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under the applicable age of digital consent, which is 16 in parts of the EU). Future You requires users to be 18 or older. If you believe a child has provided us personal data, contact us and we will delete it.

12. Cookies and local storage

We do not use advertising, analytics, or third-party tracking cookies. The marketing site sets no tracking cookies. To provide core functionality, the web app stores strictly necessary data in your browser's local storage — such as your authentication session and onboarding progress — and our hosting provider may set essential security cookies. This storage is required for the Service to work and is not used to track you across sites. If we introduce analytics in the future, we will update this policy and provide any consent controls required by law.

13. Security

We use administrative and technical safeguards, including encryption in transit, access controls, and private storage for photos, to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected on this page with a new "Last updated" date. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

15. Contact us

Questions, rights requests, or deletion requests: support@newyouai.app.

This document is provided for transparency and is not legal advice. Have it reviewed by a qualified attorney for your jurisdiction before relying on it.