Legal
Last updated: April 2026
Not a medical product. Fitness Tracker is a personal logging and informational tool, not a medical service or health professional. See the full medical disclaimer.
Fitness Tracker is a health passport built for you. Five commitments shape how we treat your data, and everything else in this policy is designed to give effect to them:
We collect only what the service needs:
Looking ahead. The commitments in this section describe our current practices. If we ever decide to change them — for example, to introduce an ad-supported free tier, to share de-identified or aggregated data for research, or to offer any other use or disclosure not described above — we will update this policy and notify you in advance in accordance with Section 14. Any new use of personal or health data we collected before the change takes effect will require your separate affirmative consent, not merely your continued use of the Service. Where state law requires a specific form of consent (for example, for any sale or share of consumer health data under the Washington My Health My Data Act or similar statutes), we will obtain consent in the form the law requires, and you can always decline.
The app supports optional integrations with several third-party services. Each is off by default and must be enabled by you. Once enabled, any integration can be turned off at any time from the Settings page; disconnecting stops further data from flowing to or from that service going forward.
Current integrations:
When you enable a third-party integration, the third party's own terms and privacy policy also apply to how they handle your data. We do not control a third party's internal processing.
When you use an in-app AI advisor (Coach Jamie, Casey, Evelyn, etc.) or a Custom GPT integration, the text of your message and the subset of your logged data necessary to answer it is transmitted to the underlying AI provider — currently Anthropic (Claude), OpenAI, and/or Google (Gemini), depending on the feature.
Once the content reaches the AI provider, it is processed under that provider's data-handling practices, which we do not control. We endeavor to protect that content to the extent possible by: (i) using each provider's enterprise or API tier where available, which contractually restricts training of their models on customer inputs; (ii) sending only the minimum data needed to answer the message; and (iii) not sharing your identifying account metadata with the provider beyond what the API requires.
Photos attached to AI chats. As of the date of this policy, any photo you attach to an AI chat (for example, a meal photo for macro analysis) is transmitted to the AI provider for real-time analysis and is not retained on our servers after the analysis is complete. The AI provider may briefly retain the photo and accompanying message per its own API data-handling policy. If we change this handling in the future — for example, if we add optional chat history that saves past messages and attachments — we will update this policy and provide notice in accordance with Section 14 before the change takes effect.
Do not type into an AI chat, or attach to an AI chat, any information you would not be comfortable being processed by the underlying AI provider.
If you enable the Apple Health / HealthKit integration on iOS, the app reads only the HealthKit data categories you explicitly authorize in the native iOS permission sheet. HealthKit data is used solely to display your metrics back to you inside the app and to power the insights, charts, challenges, and AI summaries you choose to interact with.
In line with Apple's HealthKit requirements, we:
You can revoke the app's HealthKit access at any time through iOS Settings > Health > Data Access & Devices, or by disabling the integration from inside the app.
By creating an account, you consent to receive email communications from us:
You can opt out of promotional emails at any time by clicking the “unsubscribe” link included in every promotional email, or by contacting us. Opting out does not affect transactional emails necessary to operate your account.
We never share your email address with third parties for their own marketing purposes.
Your data is stored on servers operated by Supabase (database and authentication) and Vercel (application hosting). We implement reasonable administrative, technical, and physical safeguards appropriate to the nature of the data, including transport encryption (HTTPS/TLS) for all traffic between you and the service, encryption-at-rest for the underlying database, session-based authentication, row-level security policies in the database, and auditing of privileged access.
No internet-connected service can be made completely secure. We do not promise that our measures will prevent every possible breach — but we commit to using reasonable measures, to notifying affected users without undue delay if we become aware of a breach affecting their data, and to not collecting or retaining data we do not need.
We retain your account and health data for as long as your account is active and only as long as we need it to provide the service. When you delete your account, we delete the underlying records from our active production databases promptly (typically within 30 days). Encrypted backups roll off on a finite schedule (currently 30–90 days), after which the deleted data ages out of backups as well. We may retain a minimal set of records longer where required for legal, tax, fraud-prevention, or dispute-resolution purposes, and will keep any such retention narrowly scoped and protected.
You can exercise the following controls at any time, free of charge:
Depending on where you live, you may have additional rights under applicable privacy law (for example, the California Consumer Privacy Act, the Washington My Health My Data Act, and the Connecticut, Nevada, and Colorado consumer-health-data statutes). We honor those rights regardless of where you reside; to exercise them formally, email us at the address in Section 15.
We use cookies and browser storage solely for authentication (keeping you logged in) and for remembering your basic preferences. We do not use advertising or cross-site tracking cookies, and we do not embed third-party marketing pixels or analytics that track you off the service.
The service is intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will promptly delete it.
We may update this policy from time to time. If we make a material change — especially one that narrows your rights or expands the categories of data we collect — we will provide reasonable advance notice (by email to the address on file, by an in-app notice, or both) before the change takes effect. Non-material updates (wording, clarifications, structural changes) may be made by updating the date at the top of this page. Continued use of the Service after a change takes effect constitutes acceptance of the updated policy going forward.
Prospective vs. retroactive changes. A change that introduces a new data-sharing, data-sale, advertising, or similar monetization use of personal or health data takes effect only on a prospective basis — that is, it applies only to data you submit, or events that occur, after the change becomes effective — unless you separately and affirmatively consent to apply the new use to data we collected earlier. Continued use of the Service after such a change is consent to the new practice going forward, but it is not, by itself, consent to apply any new monetization use to data we already hold.
For questions about this privacy policy, to exercise a data right, to opt out of promotional emails, or to report a concern, contact us at support@fitnesstracker.app.