The controller responsible for data processing in the FitData app and on fitdata.app is:
Can Ata
Hans-Böckler-Str. 176A
46242 Bottrop, Germany
Email: support@fitdata.app
This privacy policy explains which data we process, why, on which legal basis, and what rights you have. We have not appointed a data protection officer because we are not legally required to.
Email address, display name and sign-in method (Sign in with Apple, Google or email) via Firebase Authentication. You can also use FitData as a guest without an account; guest data stays on your device.
Workout plans, exercises, sets, reps, weights, workout duration and workout streaks.
Run plans, runs with GPS route, distance, pace, duration, heart rate, cadence and your rating of effort. Location is used only during a run and for the weather shown before a run.
Food diary (meals, foods, amounts, nutrients), your own foods, saved meals, favorites, weight, body fat, lean mass and BMI, and your goals.
Only with your permission: steps, distance, active energy, heart rate, workouts, running routes, weight and body measurements, and nutrition. If you choose, FitData writes workouts, runs, weight and nutrition back to Apple Health.
Your messages to the AI assistant, its answers and the context it needs from your training, running and nutrition data. Chats are saved in your account so you can reopen them later, until you delete them or your account.
Photos you send to recognize a meal. A photo is transmitted only for that single analysis and is not stored. We store only how many photos you used in a month.
Scanned barcodes, to look up product and nutrition data.
Apple purchase receipts (product, term, transaction ID) so we can verify your FitData Pro subscription. We never receive payment details; Apple handles payment.
Anonymous usage statistics, crash reports and app performance data (app version, device model, OS version). You can turn analytics and crash reporting off at any time in the app under Settings → Privacy.
Page views and App Store clicks on fitdata.app, only if you agree in the cookie banner.
We do not use your data for advertising, build no advertising profiles and never sell data. App suggestions in "Discover apps" are chosen app to app, never based on you.
Sign-in, database (Cloud Firestore), server functions, file storage for exercise images, App Check (abuse protection), Remote Config, Analytics, Crashlytics and Performance Monitoring. Our server functions run in Frankfurt (europe-west3).
Answers AI chat messages, recognizes meals in photos and text, and looks up nutrition values of branded and restaurant products (this may use Google Search). We send your message or photo and the context needed, not your email address.
Simple AI tasks, such as chat titles or short corrections to your meals, run on Apple's language model on your device or via Apple's Private Cloud Compute.
Apple Health (see above), Sign in with Apple, the App Store for purchases, WeatherKit for the weather shown before a run (your approximate location is sent to Apple for this) and Apple Maps for running routes.
Only if you sign in with Google.
When you scan a barcode, we query the open product database openfoodfacts.org with that barcode. No data about you is sent.
Provides the app suggestions in "Discover apps". The service receives only app data such as bundle ID, app and build version, platform and App Store country, never a user or device identifier. See the Kickstart Exchange privacy notice.
Loaded on fitdata.app only if you agree in the banner.
Google and Apple may also process data in the United States. Both are certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses apply in addition.
We use health, body and nutrition data only to show you your activity, your progress and AI answers. We never share it for advertising and never sell it. For AI features, only the values needed for that specific answer are sent to Gemini.
Your data is stored in Firebase Cloud Firestore and also on your device, so FitData works offline. Transfers are encrypted with TLS, and stored data is encrypted at rest. Only your own account can access your data.
We keep your data as long as your account exists. When you delete your account in the app (Settings → Profile → Delete Account), all associated data is permanently removed within 30 days. Firebase deletes crash reports after at most 90 days.
You have the right to:
To exercise these rights, email support@fitdata.app.
FitData is not intended for children under 14, and we do not knowingly collect their data. If you are under 16, use FitData only with the consent of a parent or legal guardian where the law requires it. If a child has sent us data, please contact us.
When the app or the law changes, we update this policy. We tell you about material changes in the app or by email. For new processing that requires consent, we ask you first.