Privacy Policy

Overview

FitTrack ("FitTrack," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and disclose information when you use the FitTrack mobile application and related services.

FitTrack is a training app that allows users to create accounts, log strength workouts, HIIT sessions and cardio sessions, create templates, manage exercises, track progress, and access optional premium subscription features.

Information We Collect

We may collect the following categories of information when you use FitTrack:

• Account information, such as your email address, login credentials handled through our authentication provider, the sign-in methods linked to your account, an optional display name, and a profile photo you choose to upload.
• Workout and fitness data, such as exercises, workout templates, workout sessions, sets, reps, weights, notes, progress history, weekly training goals, and preferences such as your preferred weight unit and your chosen app language.
• Cardio session data, such as the activity, whether it was indoors or outdoors, distance, duration, pace and splits. For outdoor sessions this includes the route recorded from your device's location while the session is running. See Location and Cardio Routes below.
• Shared workout templates, if you choose to create a share link for one of your templates. The template's name, its list of exercises, and the settings attached to those exercises, such as rest time, target sets, interval durations, and superset grouping, are uploaded to our servers so that people you send the link to can view and import it. Sharing is entirely optional; templates you do not share are never uploaded for this purpose.
• Subscription information, such as premium entitlement status, purchase status, and restore-purchase information processed through our subscription provider.
• Technical and diagnostic information needed to operate the app and integrated third-party services.

How We Use Information

We use information to:

• Create and manage your account.
• Send you account emails, such as confirming your email address, confirming a password change, and confirming that your account has been deleted. These are transactional messages needed to operate your account. We do not send marketing email.
• Provide workout logging, templates, exercise management, history, notes, and progress tracking features.
• Store and apply user preferences, including your weight unit and app language.
• Generate share links for workout templates you choose to share, and let recipients import them.
• Display your optional profile photo, and create a workout summary image when you ask to save or share one.
• Manage premium subscriptions, entitlements, purchases, and purchase restoration.
• Operate, secure, troubleshoot, and improve the app.

Third-Party Services

FitTrack may use third-party providers to operate certain features of the app, including:

• Supabase for authentication and certain backend/profile features.
• Sign in with Apple and Google Sign-In, if you choose to use them, to authenticate you. See Signing In with Apple or Google below.
• Resend to deliver account emails, such as address confirmation, password changes, and deletion confirmations. Resend processes your email address and the contents of those messages in order to deliver them.
• RevenueCat for subscription management, purchase validation, and premium entitlement handling across both iOS and Android platforms.
• Apple App Store for processing in-app purchases and subscriptions on iOS devices. Apple may collect and process information in accordance with Apple's Privacy Policy.
• Google Play for processing in-app purchases and subscriptions on Android devices. Google may collect and process information in accordance with Google's Privacy Policy.
• Apple Maps and Google Maps to display the map under your route, on iPhone and Android respectively. This happens on the live screen of an outdoor session and when you open a summary that shows a map, and nowhere else.
• YouTube API Services, if you paste a YouTube link for the moves of a HIIT session, to read that video's title and description. See YouTube Links below.

These providers may process certain information according to their own privacy practices and agreements with us.

Signing In with Apple or Google

You can create a FitTrack account, or sign in to one you already have, using Sign in with Apple or Google Sign-In. When you do, Apple or Google authenticates you and sends us a signed token confirming who you are. From that token we receive your email address and, the first time you use Sign in with Apple, the name you choose to share. We never receive your Apple or Google password.

Using one of these buttons tells Apple or Google that you use FitTrack. What they do with that fact is governed by their privacy policies, not by this one.

If the address the provider reports already has a FitTrack account, and the provider has verified that address, you are signed in to that existing account rather than a second one being created. Apple and Google both verify the addresses they report.

You can connect or disconnect a provider at any time under Profile → Account Details → Connected accounts. You cannot disconnect your last remaining way to sign in.

Apple's Hide My Email

Sign in with Apple lets you keep your real address private and share a randomly generated relay address instead. If you choose this, the relay address is the only one we ever see, and it is what we store on your account. Email we send to it is forwarded to you by Apple.

Two consequences are worth knowing. First, because we never see your real address, a FitTrack account you already have under that real address is not recognised as yours, and a separate account is created instead. Second, if you turn off Apple's forwarding for FitTrack, or stop using Sign in with Apple, we lose the ability to reach you by email at all, including for account recovery.

If you would rather not depend on the relay, you can set a password under Profile → Account Details → Password, which gives you a second, independent way in.

Health and Fitness Data

FitTrack allows users to enter workout-related information such as exercise names, workout history, sets, reps, weights, notes, and templates. We use this information to provide the core workout tracking experience inside the app.

We do not sell your workout or fitness data.

Location and Cardio Routes

FitTrack can record outdoor cardio sessions: runs, walks and rides. Doing so requires access to your device's precise location, which the app asks for the first time you start an outdoor session. Location is used only while a session is running, and only to measure your distance, pace, splits and route.

Indoor cardio never uses location. Strength workouts and HIIT sessions never use location. If you decline the permission, every other part of FitTrack continues to work, and indoor cardio remains fully available.

Unlike your health data, the route recorded during an outdoor session is stored on our servers, as part of the session it belongs to, so that it survives a lost phone and appears when you sign in elsewhere. It is treated as your workout data: we do not sell it, we do not share it with third parties, and we do not use it for advertising, marketing, or to derive anything about where you live, work or travel.

A route is included in the data export you can request from inside the app. Deleting a cardio session deletes its route with it, on your device and on our servers, and removes the copy FitTrack sent to your health app if you had sent one. Deleting your account deletes all of them.

When a session summary shows your route on a map, the map imagery is provided by Apple Maps on iPhone or Google Maps on Android. Displaying a map may involve your device contacting that provider, which processes information according to its own privacy policy. FitTrack does not send your route to any advertising or analytics service.

You can withdraw location access at any time in your device's settings. Doing so stops future outdoor sessions from recording a route; it does not delete routes you have already recorded, which you can remove by deleting those sessions.

A GPX file you open in FitTrack, from Files or from another app's share sheet, is read on your device to create a cardio session, and the copy the app received is discarded once it has been read. The file itself is never uploaded; the session it creates is stored like any other, route included.

Apple Health and Health Connect

FitTrack can connect to Apple Health on iPhone or Health Connect on Android. This is off until you turn it on in Profile > Preferences, and the app is fully usable without it.

When you turn it on, FitTrack reads the workouts your watch or fitness app recorded, the calories and heart rate recorded during them, and your most recent bodyweight. Calories are the active calories the recording app wrote or, on Android when it wrote only a total for the session, as Samsung Health does, that total. Bodyweight is read only so we can estimate the calories of a session nothing measured, so you never have to enter your weight, age or sex into FitTrack. We do not request your date of birth, your sex, or any other health category.

You can also choose to import a cardio or HIIT session your watch or another app recorded, so it appears in your FitTrack history. You pick the sessions from a list; nothing is imported on its own. An imported session keeps the identifier your health app gave that workout, stored with the session, so the same workout is never offered for import twice. A HIIT session arrives with its time and calories. For a cardio session you choose, FitTrack also reads the distance, elevation and speed recorded during it, and its GPS route. The speed samples are used only to work out the fastest stretch of the session and are not stored. On Android, each route is released only through Health Connect's own consent dialog, which names the app that recorded it and lets you allow that one route or all routes; FitTrack never reads a route you have not released.

FitTrack also writes your finished sessions back, so they appear alongside the rest of your training and count towards your activity rings. A session we write carries our calorie estimate only when nothing else measured it, so we never compete with or overwrite what your watch recorded. A cardio session is written with its distance, and an outdoor one with its GPS route and the elevation it climbed, so it shows a map and its kilometres in your health app and in anything that reads from it. Sessions are only ever written when you choose them on the export screen; nothing is written automatically.

Calories, heart rate and bodyweight read from your health app stay on the device that read them. They are not sent to our servers, are not included in the data export you can request from the app, and do not leave your phone. The distance, elevation and route of a session you chose to import are different: they become part of that session in your history, and a session is stored on our servers like every other session you log, so that it survives a lost phone and appears when you sign in elsewhere, exactly as a route recorded in FitTrack is, under Location and Cardio Routes above. Nothing read from your health app is ever used for advertising or marketing, shared with third parties, or sold. We do not use it for any purpose other than showing you your own session.

You can withdraw access at any time in your device's own health settings, or by turning the setting off in FitTrack. Turning it off erases every value FitTrack derived from your health data and offers to delete the sessions FitTrack added to your health app. Workouts recorded by your watch or another app are never deleted by us.

Device Language

FitTrack reads your device's language setting so that the app appears in your language the first time you open it. This is a local device setting and is not location data. For how FitTrack uses your location during outdoor cardio, see Location and Cardio Routes above.

If you choose a language inside the app, that choice is saved on your device and to your account, so that it can be restored when you sign in on a new device. If you never choose one, FitTrack simply follows whatever language your device is set to.

Rest Timer Notifications

FitTrack can notify you when a rest period ends, so you do not have to keep the app open between sets. These notifications are scheduled and delivered entirely on your device. FitTrack does not use push notifications and does not register a push token, so no information leaves your device for this feature. The same is true of the two cardio notifications: the one shown while an outdoor session is recording in the background, and the one that tells you a target is reached. You can turn the rest alerts off under Profile → Preferences, or revoke the permission in your device settings.

Photo Library Access

FitTrack may ask for access to your photo library for two separate purposes. They are different permissions, and you can allow one without allowing the other.

• Choosing a profile picture. If you set a profile photo, FitTrack opens your photo library so you can pick and crop one image. Only the image you select is read. FitTrack does not browse, scan, or upload anything else from your library.
• Saving a workout summary. When you save a workout, HIIT or cardio summary card, FitTrack writes that image to your photo library. This is add-only access: it allows the app to put a picture into your library, and does not allow it to read what is already there.

You can decline either request and continue using the app. A summary card is created on your device and is not uploaded to our servers. If you share one to another app instead of saving it, the image goes directly from your device to the app you choose, and does not pass through us.

Your Profile Photo

A profile photo you upload is stored on our servers in private storage, and is visible only to you. The app retrieves it using a short-lived link issued to your account, which expires after about a minute; there is no address that anyone else can use to reach the image. No other part of FitTrack displays your photo, including templates you share, which carry no information about who created them.

Please still do not upload photos of other people without their permission.

Uploading a new photo replaces the previous one. A profile photo is optional, and deleting your account removes it along with the rest of your data.

Templates You Share

Creating a share link for a workout template uploads that template to our servers, where it can be retrieved by other FitTrack users in order to view and import it. Please do not include personal or sensitive information in the names of templates or exercises that you intend to share.

A share link remains available to anyone who has it. Deleting your account removes your shared templates along with the rest of your data. If you need a specific share link taken down, contact us at [email protected].

FitTrack also publishes a set of starter programs that we create ourselves. These are visible to all users and contain no user information.

Summaries You Share

Sharing a workout, HIIT or cardio summary works differently from sharing a template, and nothing is uploaded to us. The summary card is drawn on your device, turned into an image on your device, and handed to your phone's own share sheet or saved to your photo library. FitTrack does not send that image to our servers and keeps no copy of it.

Before you share, you choose what the card shows. Your weights, the per-set numbers, exercise names, duration, date and progress markers can each be left off, and a cardio card can be shared with or without its route map, and the image is captured from the card exactly as it appears on screen, so anything you have hidden is not in the file. Once you hand the image to another app, what happens to it is governed by that app's own terms and privacy policy.

YouTube Links

You can paste a YouTube link where the moves of a HIIT session go. FitTrack then asks YouTube API Services, from our servers, for that video's title and description, and shows them to you so the moves can be read from the description. YouTube receives the video's identifier from our servers and nothing about you: not your account, your email address or your training. We do not keep the link, the title or the description. The moves you choose to add are saved with your session or template, like moves you type.

FitTrack uses YouTube API Services for this feature. Their use is governed by the YouTube Terms of Service and the Google Privacy Policy.

Data Sharing

We do not sell your personal information. We may share information only in limited circumstances, including:

• With service providers that help us operate the app.
• With other FitTrack users, limited to workout templates you deliberately choose to share, as described above.
• To comply with legal obligations, lawful requests, or applicable regulations.
• To protect the rights, security, and integrity of FitTrack, our users, or others.

Data Retention

We retain information for as long as necessary to provide the app, maintain your account, fulfill subscriptions, resolve disputes, enforce agreements, and comply with legal obligations.

Security

We use reasonable administrative, technical, and organizational safeguards to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Choices

• You may stop using the app at any time.
• If you subscribed on an iOS device, you may manage or cancel your subscription through Apple's App Store subscription settings (Settings → Apple ID → Subscriptions) and use in-app restore purchase functionality where available.
• If you subscribed on an Android device, you may manage or cancel your subscription through the Google Play Store (Google Play → Profile → Payments & subscriptions → Subscriptions) and use in-app restore purchase functionality where available.
• You may download a copy of your data at any time from Profile → Data → Export My Data. The export is a JSON file containing your profile and weekly goals, your custom exercises, your templates, and your workout, HIIT and cardio sessions with every set, split and route.
• You may delete your account and all associated data directly from the app via Profile → Account details → Delete account. Deletion is permanent and immediate.

Children's Privacy

FitTrack is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

International Data Processing

Your information may be processed in the United States and other countries where our service providers (Supabase, RevenueCat, Resend, Apple, and Google) operate their infrastructure.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date on this page.

Contact Us

If you have questions about this Privacy Policy or FitTrack's data practices, contact us at:

Email: [email protected]