Privacy Policy
FitTrack Pro is operated by Prime Software Studio ("we", "us"). This policy explains what the app collects, why, who else sees it, and what you can do about it.
FitTrack Pro records health information about you. We treat that as the sensitive data it is. In short:
- We do not sell your data. Not to anyone, at any price.
- We do not use your health data for advertising. The app shows no ads.
- We do not share your data with data brokers.
- There is no third-party analytics or tracking SDK in the app.
Contents
- Who we are
- What we collect
- Why we collect it, and our legal basis
- Health data is special-category data
- Location
- Photos, camera and microphone
- The AI coach, and where your data goes
- Sharing with other people you choose
- Companies that process data for us
- International transfers
- What we do not do
- Children and guardian-managed accounts
- Security
- How long we keep things
- Deleting your account
- Your rights
- Changes to this policy
- Contact
1. Who we are
FitTrack Pro is developed and operated by Prime Software Studio.
For data protection purposes, Prime Software Studio is the data controller for the information described here. That means we decide what is collected and why.
Contact: privacy@yourfittrack.com
We have not appointed a Data Protection Officer, and we are not required to.
2. What we collect
Everything below is data you enter, data you ask the app to import, or data the app needs in order to run. We do not buy data about you from anyone.
Your account
- Display name
- Email address (from Google Sign-In, or the address you register with)
- Date of birth
- Avatar photo, if you upload one
- Sex, height, starting weight and target weight, if you enter them
- Your activity level
We store a date of birth rather than an age. If you entered an age during sign-up, the app converts it to an approximate date of birth (1 January of your birth year) — it is a stored estimate, not your real birthday.
Health and fitness data
- Meals, including the individual food items, portions and macronutrients
- Water intake
- Sleep (bedtime, wake time, duration)
- Weight and other body measurements
- Steps and active calories
- Workouts, workout sessions, sets, reps and weights lifted
- Workout plans and your training preferences (equipment, experience, focus)
- Supplements you track, with dose and timing
- Your daily goals and targets
- Achievements, streaks, points and progress history
Location
- GPS routes recorded while you track a run or a walk. Each route is a list of points: latitude, longitude, a timestamp, and an accuracy reading.
- A still map image of the finished route, if the app was able to capture one.
Location is only recorded while you are actively tracking an activity. See section 5.
Data imported from Apple Health or Health Connect
If you connect Apple Health (iOS) or Health Connect (Android), the app imports workouts, sleep, body measurements and step counts from them into your FitTrack Pro account. We record which platform you connected and when it last synced. You can disconnect at any time.
Coaching data
If you work with a personal trainer through the app, we store your check-in answers, your assigned programme, your logged sessions and sets, and messages between you and your trainer. Your trainer's private notes about you are stored separately and belong to them.
AI coach conversations
Your messages to the AI coach and its replies are stored so the conversation has history. Changes the coach makes to your plan are recorded so you can undo them.
Subscription and billing
- Which plan you are on, whether it renews, and when the current period ends
- Your AI credit balance and a ledger of credits spent
We do not receive or store your card number, bank details or billing address. Payment is handled entirely by Google Play (and by Apple on iOS). See the Refund Policy.
Device and diagnostics
- A push notification token for each device you enable notifications on, with the platform (iOS or Android) and a device identifier
- Your notification preferences, and a log of which notifications we sent
- Crash reports and error diagnostics
Operational records
- Technical logs of AI requests: which action, which model, how many tokens, how long it took, and what it cost us. These logs do not contain the text of your messages.
- Short-lived rate-limiting counters, deleted within a day
- Any feedback you send us through the app
3. Why we collect it, and our legal basis
If you are in the UK or the EU, the GDPR requires us to name a legal basis for each use. Here it is.
| What we do | Why | Legal basis (GDPR Art. 6) |
|---|---|---|
| Create and run your account | You asked us to | Contract — Art. 6(1)(b) |
| Store your meals, workouts, sleep, weight and other logs | It is the core function of the app | Contract — Art. 6(1)(b), plus explicit consent for health data (Art. 9(2)(a)) |
| Record GPS routes | To map and measure your runs | Consent — Art. 6(1)(a) |
| Send your data to the AI coach | You asked it a question | Consent — Art. 6(1)(a) |
| Show your data to a trainer or family member | You turned that sharing on | Consent — Art. 6(1)(a) |
| Manage your subscription and credits | To provide what you paid for | Contract — Art. 6(1)(b) |
| Send push notifications and emails you enabled | You opted in | Consent — Art. 6(1)(a) |
| Collect crash reports | To find and fix faults | Legitimate interests — Art. 6(1)(f) |
| Rate-limiting, abuse prevention, spend caps | To keep the service working and affordable | Legitimate interests — Art. 6(1)(f) |
| Keep anonymised billing records | Tax and accounting duties | Legal obligation — Art. 6(1)(c) |
Where we rely on consent, you can withdraw it at any time — by turning the feature off in the app, or by deleting the data. Withdrawing consent does not undo what was lawful before you withdrew it.
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your privacy. You can object; see section 16.
4. Health data is special-category data
Meals, weight, sleep, workouts and body measurements are special-category data under GDPR Article 9. So is anything you tell the AI coach about pain, injury or how you feel.
We process it on the basis of your explicit consent under Article 9(2)(a).
By creating an account and logging health data, you are consenting to us storing and processing it for the purposes in this policy. You can withdraw that consent by deleting the data or your account.
We do not process health data for any purpose other than running the app for you. See section 11.
5. Location
The app asks for location permission only when you start tracking a run or a walk.
- Location is recorded only while an activity is being tracked. The app does not track you in the background at other times.
- If you grant "always" permission, that is so recording continues when your screen locks mid-run. It is not used to follow you between activities.
- Routes are stored against the activity they belong to and are visible only to you.
- Your GPS coordinates are never sent to the AI coach, to a trainer, or to your family. They are not included in crash reports — the app specifically strips coordinates before a report is sent.
On Android, maps are rendered using the Google Maps SDK, which is part of Google Play services on your device. Google may receive information as part of providing that map. We do not send your stored routes to Google.
You can decline location permission. Everything except run and walk mapping will still work.
6. Photos, camera and microphone
Meal photos are not stored. When you photograph a meal, the image is sent to our AI provider so it can identify the food. Only the resulting list of food items is saved to your account. We do not keep the photograph.
Avatar photos are stored, in a private storage area. They are not on a public web address; the app fetches them through short-lived signed links.
Route map images are stored the same way — private, signed links only.
The microphone is used only if you choose to log a meal by speaking. Speech is converted to text by your device's own speech recognition, on-device where your device supports it, otherwise by the speech service built into your operating system (Apple or Google). We receive only the resulting text. We do not record or store audio.
7. The AI coach, and where your data goes
The AI coach needs to see your data to answer usefully. Here is exactly what happens.
What is sent
When you send a message to the AI coach, we send the model:
- Your message
- Your height, sex, date of birth, starting weight, target weight and activity level
- Your latest weight, your goals and targets
- Your meals and macronutrient totals, water, sleep and steps for your chosen history window
- Your active workout plan and completed sessions
- Your supplements
- A summary of previous changes the coach made
You choose how far back the coach can look — 14, 30 or 90 days, or your whole history — in the coach's settings. The limit is enforced on our servers, not in the app, so the model cannot widen its own window.
What is not sent
We do not send your name, your email address, your avatar, or your GPS routes.
Who processes it
Anthropic is our only AI provider. Your data is sent to Anthropic's API to generate the reply. Anthropic processes it to return a response and does not use it to train its models.
Meal parsing, activity parsing, meal photo recognition, workout plan generation, weekly digests and trainer check-in summaries all use Anthropic in the same way.
AI output is not advice
The AI coach can be wrong. It is not a doctor, a dietitian or a trainer. See the Terms of Service.
8. Sharing with other people you choose
Family
If you join a family group, other members can see some of your data. What they see is off by default and controlled by you:
| Shared | Default |
|---|---|
| Your daily activity rings | On |
| Your points and standings | On |
| Your weight | Off |
| Your meals | Off |
| Your sleep | Off |
You can change these at any time in the family sharing settings.
Trainers
If you accept a trainer's invitation, they can see:
- Your workouts and sessions — always. A trainer who cannot see your training cannot coach you, so this is not optional. If you do not want a trainer to see your training, do not accept the invitation.
- Your measurements — on by default, and you can turn this off.
- Your nutrition — off by default, unless you turn it on.
- Your sleep — off by default, unless you turn it on.
- Check-ins you submit to them.
You can end a coaching relationship at any time, which stops their access.
Guardians
See section 12.
9. Companies that process data for us
These companies process data on our behalf. They are bound to use it only to provide their service to us.
| Company | What it does | What it receives |
|---|---|---|
| Supabase | Database, sign-in and file storage | Everything the app stores: your account, health data, routes, photos, messages |
| Anthropic | The AI coach and AI parsing — our only AI provider | The fitness context in section 7; meal photos when you use photo logging |
| Sentry | Crash and error reports | Technical crash data and your user ID. Coordinates, notes, weight and height are stripped before sending |
| RevenueCat | Subscription management | Your user ID and your subscription status. No payment details |
| Google Play Billing | Payments (Android) | Your purchase. Google, not us, holds your payment details |
| Apple | Payments (iOS, when the app launches there) | The same, on Apple's side |
| Google Sign-In | Signing you in | Your Google account email and basic profile, if you sign in that way |
| Google Maps | Rendering maps in the app (Android) | Map requests from your device while viewing a map |
| Expo | Delivering push notifications | Your push token and the content of the notification |
| Resend | Sending our emails | Your email address and the content of the email |
Sentry is configured to use its European data region.
We do not have contracts with anyone else who receives your personal data.
10. International transfers
We are based in Israel. The companies in section 9 operate in various countries, including the United States.
Where personal data of UK or EU users is transferred outside the UK or EEA, we rely on:
- Adequacy decisions, where one exists. The EU and the UK have both recognised Israel as providing adequate protection.
- Standard Contractual Clauses (and the UK Addendum) in our agreements with processors in countries without an adequacy decision, such as the United States.
If we ever add a processor in a country without an adequacy decision, we will update this policy and tell you before it takes effect.
11. What we do not do
Stated plainly, because Google Play's health apps policy requires it and because you deserve to know:
- We do not sell your personal information or health data. We have never sold it and have no plans to. Under the CCPA/CPRA, we do not "sell" or "share" personal information as those terms are defined.
- We do not use your health data for advertising or marketing profiling. The app contains no advertising.
- We do not share your data with data brokers.
- We do not use your health data to train AI models, and our AI provider does not train on it either.
- There is no third-party analytics or tracking SDK in the app. No Google Analytics, no Firebase Analytics, no Amplitude, no Mixpanel, no advertising identifiers. The only third-party code that reports anything about your usage is the crash reporter described above.
- We do not track you across other apps or websites.
12. Children and guardian-managed accounts
FitTrack Pro is for people aged 13 and over.
You must be at least 13 to create an account. The app enforces this when you sign up. We do not knowingly collect data from anyone under 13. If you believe a child under 13 has an account, email privacy@yourfittrack.com and we will delete it.
Guardian-managed child profiles
An adult in a family group can create a profile for a child aged 13 to 17. This is enforced both in the app and on our servers.
How it works:
- The child profile gets its own account so their data stays separate from yours, but the child has no login of their own. There is no password to give them and no way for them to sign in.
- The guardian logs the child's meals, activity, sleep, water and body measurements on their behalf.
- The guardian can see everything logged for that child.
- The same family sharing settings in section 8 apply to what other family members can see.
- Nothing about a minor's data is used for advertising or profiling. There are no ads in the app.
If you are a guardian
You are responsible for the data you enter about your child, and you should have their agreement to do it.
To delete a child's data: remove the child from your family group in the family settings. To have a child profile and all its data erased entirely, email privacy@yourfittrack.com from the address on your own account and we will do it.
Note on your own deletion: you cannot delete your own account while you are a guardian for a child profile. The app will tell you to remove the child from the family first. This is deliberate — otherwise the child's account would be left with nobody able to reach it.
13. Security
- In transit: all traffic between the app and our servers uses HTTPS (TLS). So does every connection to the companies in section 9.
- At rest: our database and file storage are encrypted at rest by our hosting provider.
- Access control: every table holding your data has row-level security enforced by the database itself, not just by the app. A request that is not yours returns nothing. This is enforced at the database layer, so a fault in the app cannot expose another user's rows.
- Files: avatars and route images are in private storage. There is no public web address for them. The app fetches them using short-lived signed links.
- Crash reports are scrubbed before they leave your device. GPS coordinates, free-text notes, weight and height are replaced with
[Redacted]. - Your session is stored in your device's secure storage.
No system is perfectly secure. If we discover a breach affecting your personal data, we will notify the relevant supervisory authority within 72 hours where the law requires it, and we will tell you if there is a high risk to you.
14. How long we keep things
We keep your data until you delete it. There is no automatic expiry. Your history is the point of the app, so we do not quietly delete a year-old workout.
The exceptions:
| Data | How long |
|---|---|
| Everything in your account | Until you delete it, or delete your account |
| Rate-limiting counters | Under 24 hours |
| Anonymised billing ledger | Kept after account deletion, with your identity removed — see below |
| Crash reports held by Sentry | Per Sentry's retention, typically 90 days |
| Backups | Deleted data disappears from backups as they age out, normally within 30 days |
If you stop using the app without deleting your account, your data stays until you come back or ask us to remove it.
15. Deleting your account
You can delete your account from inside the app: Settings → Delete account. You do not need to email anyone.
Before you confirm, the app offers you an export of your data. Take it if you want it — after deletion it is gone.
What is erased
- Every meal, workout, run, weight and sleep entry you logged
- Your goals, streaks, achievements and progress history
- Your profile, including your name, email, date of birth and body measurements
- Your avatar photo and your saved route maps
- Your GPS routes
- Your AI coach conversations
- Your push tokens and notification settings
- Any coaching relationship and the check-ins in it
- Your sign-in credentials
This is a real deletion, not a flag. Your email address is freed, so you can sign up again later with the same address if you want to.
What is kept
- An anonymised billing ledger. We are required to keep records of transactions for tax and accounting. Your identity is stripped from these rows — they record that a transaction happened, not who it belonged to.
- Your subscription is not cancelled by deleting your account. Deleting here does not stop Google Play billing you. Cancel your subscription in the Play Store separately. See the Refund Policy.
Before you can delete
The app will ask you to sort out a few things first, and tells you which:
- If you are a trainer with active clients, end those relationships first so your clients are told rather than abandoned mid-programme.
- If you own a family group with other members, transfer it or dissolve it first.
- If you are a guardian of a child profile, remove them from the family first.
You can also email privacy@yourfittrack.com and we will handle deletion for you.
16. Your rights
Wherever you live, you can email privacy@yourfittrack.com to exercise any of these. We will not charge you and we will not make it difficult.
- Access — get a copy of your data. There is an Export my data button on the delete-account screen that produces a JSON file immediately. It covers your profile, goals, meals, activities, water, sleep, body metrics, steps, workout plans, achievements and check-ins, capped at the most recent 5,000 entries per section. Ask us if you need more than that.
- Correction — fix anything wrong. Most of it you can edit in the app.
- Deletion — see section 15.
- Portability — the export above is machine-readable JSON.
- Restriction and objection — ask us to stop a particular use.
- Withdraw consent — turn the feature off, or tell us.
- Complain — if you are in the UK or EU you can complain to your data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk).
If you are in California
Under the CCPA/CPRA you have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights.
We do not sell or share your personal information, so there is no "Do Not Sell or Share My Personal Information" link to offer — there is nothing to opt out of.
We will respond to requests within 45 days.
Response times
We aim to respond within 30 days, and within one month as GDPR requires. If a request is complex we may take longer, and we will tell you why.
17. Changes to this policy
We will update this page when the app changes.
- The Last updated date at the top always reflects the current version.
- For significant changes — a new category of data, a new company receiving your data, or a new country your data is sent to — we will tell you inside the app or by email before the change takes effect, and where the law requires it, we will ask for your consent again.
- Minor corrections and clarifications will just appear here.
Continuing to use FitTrack Pro after a change means you accept the updated policy, except where we need fresh consent, in which case we will ask.
18. Contact
Questions, requests, or complaints about privacy:
privacy@yourfittrack.com
We are Prime Software Studio, operating from Israel.