Zidd AI Privacy & Data Safety Disclosure

This document outlines the exact data privacy, retrieval architecture, tool call permissions, and safety guardrails governing Zidd AI — the 24/7 AI sports science and human performance coach inside the Ziddi platform.

1. What Data Does Zidd AI Access?

Zidd AI utilizes an agentic retrieval-augmented generation (RAG) architecture. Rather than storing your personal training history inside generic AI models, data is accessed ephemerally on demand via backend tool calls strictly when you submit a query. Zidd AI accesses the following data types:

• Workout Logs & Personal Records (PRs): Past exercise names, sets, reps, weight lifted, and personal record milestones to provide progressive overload advice.
• Weekly Split & Routine Planner: Scheduled workout days and exercise sequences to help design balanced training routines.
• Active Injury History: Injury locations (e.g., knee, shoulder, lower back) and pain scores. This is checked by safety guardrail tools like getUserInjuries to explicitly prevent recommending exercises that could aggravate an active injury.
• Government Exam Fitness Targets: Exam benchmarks (SSC GD, UP Police, NDA, CDS) and mock test times to calculate target cutoffs and pacing.
• Mindfulness & Yoga Logs: Session frequency and meditation streak metrics to recommend appropriate recovery flows.

2. How Tool Calls & Vector RAG Function

When you ask Zidd AI a question (e.g., "What should I train today?"), the request is processed through a secure 16-tool agentic architecture:

1. Intent Recognition: The backend determines if your question requires specific personal context (e.g., pulling your last leg day log).
2. Tool Execution: Specific data tools (e.g., getUserPRs, getUserInjuries) fetch only the minimal required data parameters from your encrypted database session.
3. Vector Knowledge Retrieval: Titan Embeddings v2 retrieves sports-science principles and verified exercise technique guides.
4. Token Streaming: Responses are generated in real-time using AWS Bedrock Converse API over TLS-encrypted Server-Sent Events (SSE).

3. Data Protection & Privacy Guarantees

• No Data Sale: We do NOT sell, rent, or monetize your health, workout, or AI prompt data to third-party ad networks or data brokers under any circumstances.
• Encryption in Transit & at Rest: All communications between the app, backend servers, and AI processing pipelines use industry-standard HTTPS/TLS encryption.
• No Third-Party Model Training: Your personal workout logs and chat history are never used to train public foundation models.
• Domain Isolation: Zidd AI is domain-scoped strictly to human performance, sports science, recovery, and exam fitness. Non-fitness or off-topic queries are politely declined.

4. Proactive Safety & Medical Disclaimer

5. User Controls & Data Deletion

You maintain 100% ownership and control over your data:

• Clear Chat History: You can reset and erase your Zidd AI conversation context at any time with one tap in-app.
• Account & Log Deletion: You have the right to permanently delete your account and all associated fitness/AI logs. Visit our Account & Data Deletion Page or email [email protected].

Contact & Developer Information

If you have questions regarding Zidd AI privacy or data processing:
🏢 Ziddi Fitness and Wellness LLP (LLPIN: ADA-7087 | DPIIT: DIPP276573)
📧 [email protected] / [email protected]
🌐 www.ziddiapp.com