FiTracker Privacy Policy

1. INTRODUCTION

FiTracker, Inc. ("FiTracker," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and related services (collectively, the "Service").

By using FiTracker, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Service.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

Account Information:

• Name and email address
• Username and password
• Date of birth
• Profile photo (optional)
• Phone number (optional)

Health and Fitness Information:

• Height, weight, and body measurements
• Fitness goals and preferences
• Workout history and performance data
• Nutrition and meal information
• Water intake and sleep data
• Health conditions and injuries (optional)
• Progress photos (optional)

Payment Information:

• Credit/debit card details (processed by secure third-party payment processors)
• Billing address
• Transaction history

User Content:

• Posts, comments, and messages
• Challenge participation
• Social interactions

2.2 Information Collected Automatically

Device Information:

• Device type and model
• Operating system and version
• Unique device identifiers
• Mobile network information
• IP address

Usage Information:

• App features used
• Interaction with AI coach
• Time spent in app
• Click paths and navigation
• Search queries
• Crash reports and performance data

Location Information:

• GPS location (with permission) for outdoor workout tracking
• Time zone information

2.3 Information from Third Parties

Connected Devices:

• Data from fitness trackers (Fitbit, Garmin, etc.)
• Apple Health and Google Fit data
• Smart scale measurements

Social Media:

• Basic profile information if you sign up via social login
• Friends list (with permission) for social features

Analytics Partners:

• Aggregated demographic information
• Interest categories
• Behavioral insights

3. HOW WE USE YOUR INFORMATION

3.1 To Provide and Improve Our Service

• Create and manage your account
• Provide personalized AI coaching
• Track your fitness progress
• Generate meal plans and workout recommendations
• Process payments and subscriptions
• Send service-related communications

3.2 To Personalize Your Experience

• Customize AI responses based on your goals
• Recommend relevant features and content
• Adjust difficulty based on performance
• Provide targeted motivation

3.3 For Research and Development

• Improve AI accuracy and relevance
• Develop new features
• Analyze usage patterns
• Conduct A/B testing
• Create aggregated insights

3.4 For Marketing and Communication

• Send promotional emails (with consent)
• Notify about new features
• Share fitness tips and content
• Conduct surveys and collect feedback

3.5 For Safety and Security

• Detect and prevent fraud
• Monitor for prohibited content
• Enforce Terms of Service
• Protect user safety
• Comply with legal obligations

4. HOW WE SHARE YOUR INFORMATION

4.1 We DO NOT Sell Your Personal Information

4.2 Service Providers

We share information with trusted third-party service providers who assist us in:

• Payment processing (Stripe)
• Cloud hosting (Amazon Web Services)
• Analytics (Google Analytics, Mixpanel)
• Email services (SendGrid)
• Customer support (Zendesk)

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

4.3 AI Technology Partners

We share limited data with AI providers (OpenAI, Anthropic) to power our coaching features. This data is anonymized and subject to their privacy policies.

4.4 Business Transfers

If FiTracker is acquired, merged, or sells assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4.5 Legal Requirements

We may disclose information if required by law or if we believe disclosure is necessary to:

• Comply with legal process
• Protect our rights or property
• Prevent fraud or crime
• Protect user safety

4.6 Aggregated Information

We may share aggregated, non-identifiable information publicly or with partners for research, marketing, or business purposes.

4.7 With Your Consent

We may share information for other purposes with your explicit consent.

5. DATA RETENTION

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy:

• Active Account Data: Retained while account is active
• Deleted Account Data: Removed within 30 days of deletion request
• Backup Data: May persist in backups for up to 90 days
• Legal Compliance: Retained as required by law
• Aggregated Data: May be retained indefinitely

6. DATA SECURITY

6.1 Security Measures

We implement appropriate technical and organizational measures to protect your information:

• Encryption in transit (TLS/SSL)
• Encryption at rest (AES-256)
• Secure data centers with physical access controls
• Regular security audits and penetration testing
• Employee access controls and training
• Incident response procedures

6.2 Your Responsibilities

You are responsible for:

• Keeping your password secure
• Not sharing your account credentials
• Logging out of shared devices
• Notifying us of suspected unauthorized access

6.3 No Absolute Security

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. YOUR PRIVACY RIGHTS

7.1 Access and Portability

You can access and download your data through account settings or by contacting support@fitracker.ai.

7.2 Correction

You can update inaccurate information through your profile settings or contact us for assistance.

7.3 Deletion

You can request account deletion through settings or by emailing privacy@fitracker.ai. Some information may be retained for legal or legitimate business purposes.

7.4 Opt-Out

You can opt-out of:

• Marketing emails (via unsubscribe link)
• Push notifications (via device settings)
• Location tracking (via device permissions)
• Analytics tracking (via settings)

7.5 Do Not Track

Our Service does not currently respond to Do Not Track signals.

8. CALIFORNIA PRIVACY RIGHTS (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

8.1 Right to Know

You can request information about:

• Categories of personal information collected
• Sources of information
• Business purposes for collection
• Categories of third parties we share with

8.2 Right to Delete

You can request deletion of your personal information, subject to certain exceptions.

8.3 Right to Non-Discrimination

We will not discriminate against you for exercising privacy rights.

8.4 Sale of Personal Information

We do not sell personal information as defined by CCPA.

To exercise these rights, contact privacy@fitracker.ai or call (513) 957-5001.

9. EUROPEAN PRIVACY RIGHTS (GDPR)

If you are in the European Economic Area, you have additional rights:

9.1 Legal Basis

We process personal data based on:

• Consent: For marketing communications
• Contract: To provide our Service
• Legitimate Interests: For business operations and improvement
• Legal Obligation: To comply with laws

9.2 Additional Rights

• Right to object to processing
• Right to restrict processing
• Right to lodge a complaint with supervisory authorities
• Right to withdraw consent

9.3 International Transfers

We transfer data to the US using appropriate safeguards including Standard Contractual Clauses.

10. CHILDREN'S PRIVACY

10.1 Age Requirements

FiTracker is not intended for children under 13. Users aged 13-18 require parental consent.

10.2 Parental Rights

Parents can:

• Review their child's information
• Request deletion of their child's data
• Revoke consent for data collection

Contact privacy@fitracker.ai to exercise parental rights.

11. THIRD-PARTY SERVICES

11.1 Third-Party Integrations

When you connect third-party services (Apple Health, Fitbit, etc.), their privacy policies apply to data they collect.

11.2 Social Features

Information shared through social features may be visible to other users and subject to their use.

11.3 External Links

Our Service may contain links to external sites. We are not responsible for their privacy practices.

12. COOKIES AND TRACKING TECHNOLOGIES

12.1 Types of Technologies

We use:

• Essential Cookies: For Service functionality
• Analytics Cookies: To understand usage
• Preference Cookies: To remember settings
• Marketing Cookies: For relevant advertising

12.2 Managing Cookies

You can control cookies through browser settings. Disabling cookies may limit Service functionality.

12.3 Mobile Analytics

We use mobile analytics to understand app usage. You can opt-out through device settings.

13. INTERNATIONAL DATA TRANSFERS

FiTracker is based in the United States. By using our Service, you consent to the transfer of your information to the US and other countries where we operate.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Email notification
• In-app notification
• Prominent notice on our website

Your continued use after changes constitutes acceptance of the updated Privacy Policy.

15. DATA BREACH NOTIFICATION

In the event of a data breach that compromises your personal information, we will:

• Notify affected users within 72 hours
• Provide information about the breach
• Offer guidance on protective measures
• Cooperate with regulatory authorities

16. AI AND AUTOMATED DECISION-MAKING

16.1 How AI Uses Your Data

Our AI uses your data to:

• Generate personalized recommendations
• Predict fitness plateaus
• Customize coaching style
• Optimize workout difficulty

16.2 Human Oversight

Significant decisions affecting your account always involve human review.

16.3 AI Data Minimization

AI processes only necessary data for specific functions and doesn't retain conversation history beyond necessary periods.

17. HEALTH INFORMATION SPECIAL PROVISIONS

17.1 Sensitive Data

Health and fitness data is treated as sensitive. We implement additional safeguards including:

• Enhanced encryption
• Strict access controls
• Regular audits
• Limited retention periods

17.2 Not Medical Records

FiTracker is not a covered entity under HIPAA. Information is not treated as protected health information unless specifically required by law.

18. CONTACT INFORMATION

For privacy-related questions or to exercise your rights, contact us:

19. SPECIFIC STATE PRIVACY RIGHTS

19.1 Nevada

Nevada residents can opt-out of sale of personal information (though we don't sell personal information) by emailing privacy@fitracker.ai.

19.2 Virginia, Colorado, Connecticut, Utah

Residents of these states have rights similar to California residents. Contact privacy@fitracker.ai to exercise your rights.

20. PRIVACY POLICY ACCEPTANCE

By using FiTracker, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.