FitMe AI · Legal

Privacy Policy

Last updated: 31 July 2026

We try to collect the minimum needed to make the App work and to keep your data on your device wherever possible.

What we collect

• Account data — the email address (and name, if you give one) used to sign in, and a hashed password if you use email + password. If you sign in with Google, your Google ID, email, and display name.
• Onboarding data — goal, experience, equipment, training days, body metrics (height, weight, etc.) and pain points you enter so the AI can build a plan that fits you.
• Workout data — sets, reps, weights, and rest you log; completed plan days; body measurement entries.
• Device data — basic crash diagnostics + anonymised analytics events (screens visited, features used) via Firebase. No ads, no third-party trackers.

What we don't collect

• Location.
• Contacts, photos, or microphone audio (unless you explicitly opt in to a future voice feature).
• Anything from other apps.

How we use it

• Generate and update your workout plan.
• Persist your data across your devices when you're signed in.
• Improve the App via aggregate analytics.

Where it lives

• Locally on your device first (offline-first).
• Synced to our backend so you can move to a new device without losing data. Backend is encrypted in transit (HTTPS) and at rest.
• A trimmed subset is sent to the AI model provider (OpenRouter) to generate plans and coach replies. We do not send your real name, email, or any direct identifier to the model.

Sharing

We don't sell your data. We share only what's strictly needed with:

• Firebase (Google) — auth, analytics, crash reporting.
• OpenRouter — to run AI generations.
• RevenueCat & your app store — subscription billing and receipt validation.

Data retention

We keep your data only for as long as it is needed to run the App for you, and we tell you exactly how long below.

• Account, profile and onboarding data — retained for as long as your account exists. It is deleted when you delete your account.
• Training data (plans, logged sets and reps, body measurements, coach chat history) — retained for as long as your account exists, because the App and the AI coach use your history to build and adjust your plan. Deleted when you delete your account.
• On deletion — Account → Delete account removes every record listed above from our live database immediately, in a single operation.
• Database backups — we keep daily backups of the database on a rolling 30-day window: each day's backup replaces the one from 30 days earlier. A deleted account can therefore still exist inside an older backup file, and is gone from every backup within 30 days of deletion at the latest. Backups are access-restricted and are never used to restore an account you deleted.
• Password reset tokens — expire 24 hours after they are issued and are deleted with your account.
• Crash diagnostics — held by Firebase Crashlytics for up to 90 days, then deleted by Google.
• Analytics events — held by Firebase Analytics for a maximum of 14 months, then deleted by Google. These are not linked to your name or email.
• AI generation data — the trimmed, de-identified prompt we send to OpenRouter is not stored by us after your plan or reply is returned. Retention on OpenRouter's side is governed by their own policy.
• Purchase and billing records — kept by RevenueCat and your app store, and by us only where tax and accounting law requires it (generally up to 7 years), then deleted.

We do not delete active accounts automatically, and we do not keep a shadow copy of an account you have deleted. Deleting from inside the App takes effect straight away. If you ask us by email at contact@devcenter.dev instead, we verify that the account is yours and complete the deletion within 30 days.

Your rights

• Access / export — contact us and we'll send you everything we hold about you.
• Delete — Account → Delete account wipes your server data and signs you out. Local app data also clears when you do this.
• Correct — edit anything from the Account screen, or contact us.

Children

FitMe AI is not directed at children under 13 (or 16 in the EU). Don't use the App if you're under that age.

Changes

We may update this policy. Material changes will be flagged in-app before they take effect.