Privacy Policy
This policy explains what personal data the FitAgain app and the website fitagain.app collect, why we collect it, who receives it, how long we keep it, and the choices and rights you have.
The short version
- We collect what we need to build and adjust your training plan, run your AI coach and keep your subscription working.
- Some of it is health data: your body measurements, sleep, injuries and training. We give it extra protection (section 3).
- We never sell your data. We don't show ads, and we don't track you across other companies' apps or websites.
- Your coach messages go to OpenAI, our AI provider, only to write the coach's replies, and only after you agree. They are never used to train AI models.
- Apple Health data is only read, never written. We never use it for advertising or marketing, and we never send it to analytics.
- You can download your data or delete your account at any time in the app.
1. Who we are
FitAgain is made by an independent developer ("FitAgain", "we", "us"). We decide how and why your personal data is used.
Questions about this policy or your data: support@fitagain.app.
2. What we collect
2.1 Your account
You sign in with Apple, with Google, or continue as a guest.
- Sign in with Apple: an Apple user identifier, your email address (or the private relay address Apple creates if you choose Hide My Email) and your name, if you share it.
- Sign in with Google: your Google account identifier, email address, name and the basic profile details Google shares.
- Guest: an anonymous account with a random identifier. It isn't linked to an email address.
- Bot check: when the app creates your account, hCaptcha checks that a person, not a bot, is signing up. hCaptcha receives signals from your device for this check.
We also keep the dates you signed in.
2.2 Your profile
Your name, profile photo (if you add one), sex, birth year, height, body weight, units (kg or lb), time zone, and your choices in the app, such as the app style, the coach's look, appearance, reminder times and notification settings.
Your profile photo is stored at a long, random web address that only your app receives. It isn't listed or searchable anywhere, but anyone who had that exact address could open it.
2.3 Your onboarding answers
The answers you give when you set up your plan: your goal (including whether you want to lose, keep or gain weight), your training experience, which days and how long you can train, where you train and what equipment you have, the areas you want to focus on, how active your daily life is, the obstacles you pick (such as "Pain or injury"), and the habits you choose.
2.4 Your training
Your program and plan, every workout and cardio session you log (exercises, sets, reps, weights, duration and how hard it felt), changes to your plan and why they were made, your habits and when you checked them, body weight entries, goals, your answers to injury check-ins, and the figures we work out from these, such as strength estimates, points, streaks and forecasts.
2.5 Sleep
How many hours you slept each night, from Apple Health or from your answer to the morning sleep question. We don't collect sleep stages or scores.
2.6 Apple Health
Only if you allow it, FitAgain reads your steps, workouts and sleep from Apple Health. We use them to fit your plan and cardio to how you already move, and to show your sleep. FitAgain never writes data to Apple Health.
Apple Health data is never used for advertising, marketing or data mining, never sold, and never sent to our analytics or crash-report tools. It reaches OpenAI only as part of what the coach reads to answer you, after you have agreed to the coach's use of your data (section 5).
You can stop access at any time in iOS: Settings → Health → Data Access & Devices → FitAgain. Data that was already imported stays in your account until you delete your account.
2.7 Your AI coach
If you use the coach, and only after you agree to how it uses your data:
- Your messages: what you type, and your voice messages. A voice message is sent to OpenAI to be turned into text. We don't keep the recording. We keep only when each voice message was sent and its size, for 24 hours, to apply the daily voice limit.
- The coach's replies, and the cards it shows you (such as charts, workouts and proposed plan changes), with whether you accepted them.
- Chat summaries: a short summary of each chat, so the coach remembers earlier conversations.
- Memories: up to 30 facts you tell the coach about yourself, such as the equipment you have.
- Injury notes: when you tell the coach about pain or an injury, a note of the area, the side, since when, and how it's going, plus your answers to the check-ins before workouts.
- Your ratings and reports: your 👍 or 👎 on a reply, the reason you give, and replies you report.
2.8 Purchases
Your subscription's status, product, purchase and renewal dates, and the store's transaction identifiers. Apple handles the payment. We never see your card or bank details.
2.9 How you use the app (analytics)
We use PostHog to understand how people use FitAgain and to test changes (A/B tests). PostHog receives events tied to your user identifier: which screens you open and what you do, such as finishing onboarding, starting a workout or opening the coach. It also receives the A/B test groups you're in, your subscription events, your device model, iOS version and app version, and your country.
- We never send what you type, your name, your body measurements, your sleep, your injury areas or other health figures. How hard a workout felt goes only as easy, moderate or hard.
- PostHog works out your country from your IP address. The IP address itself is discarded, and the city, region and postal code are dropped, so only the country is kept.
- Session recording is off.
You can turn analytics off at any time: Settings → Privacy → Share usage data. It is on until you turn it off.
2.10 Crash reports and remote settings
When the app crashes, Firebase Crashlytics (Google) receives a crash report: your device model, iOS version, app version, technical details of the crash, the names of the screens and events just before it, and your user identifier. Crash reports aren't affected by the "Share usage data" switch, because we need them to keep the app working.
Firebase Remote Config sends the app settings we can change without an update (for example, the minimum app version or notification rules). It uses an installation identifier that Firebase creates for the app on your phone.
2.11 Device and technical data
- Notifications: workout reminders and progress notifications are scheduled on your phone. To do this, the app keeps the dates of your recent workouts and of the notifications it sent on your phone. We also store the notification token Apple gives your phone, so our server can send you notifications.
- Requests to our server: every request carries the app's version. Our providers (Cloudflare and Supabase) log requests, including your IP address, the time and what was requested, to keep the service secure and to fix problems. Our own server's log contains no user identifier.
2.12 When you contact us
If you email us, we receive your email address, your message and anything you attach. Emails to support@fitagain.app pass through Cloudflare's email routing and are stored in our Proton Mail mailbox.
2.13 Our website
The website uses no cookies, no local storage, no web fonts from other sites and no tracking. Cloudflare, which serves it, processes your IP address to deliver the pages and protect the site. If we turn on Cloudflare Web Analytics, it counts page views without cookies and without identifying you.
3. Your health data
Some of what you give us is health data under many laws: your sex, height, body weight and its history, your sleep, your Apple Health data, injury notes and check-ins, the "Pain or injury" obstacle, how hard your workouts felt, your weight goal, and anything about your health you tell the coach.
We protect it in these ways:
- We use it only to provide FitAgain to you: to build and adjust your plan, show your progress and, if you agree, let the coach answer you.
- We never sell it, never use it for advertising, and never send health figures to analytics.
- Only you can read it in the app. Each request to our server is checked against your account, and our database only lets an account read its own records.
- The coach reads it only after you agree, and you can withdraw that agreement at any time (section 9).
If you live in Washington, Nevada or another US state with a consumer health data law, our Consumer Health Data Privacy Policy also applies to you.
4. How we use your data
| What we do | Data used |
|---|---|
| Create your account, build and adjust your plan, log your workouts, habits and sleep, show your progress, send the reminders you ask for, keep your data in sync | Account, profile, onboarding answers, training, sleep, Apple Health, notification token |
| Run the AI coach, only after you agree | Coach data, and what the coach reads to answer you |
| Manage your subscription | Purchases |
| Understand how the app is used and test improvements, unless you turn it off | Analytics |
| Find and fix crashes | Crash reports |
| Keep FitAgain secure and stop abuse: the bot check, checking coach messages for harmful content, usage limits, server logs | Technical data, coach messages |
| Improve how plans progress, using records combined across many users | Training records, as totals only |
| Answer your questions | Your emails |
| Meet legal duties and defend legal claims | What the duty or claim needs |
Automatic plan changes. Your plan adjusts itself to the workouts you log, for example by raising a weight after two good sessions. These decisions don't have legal or similarly significant effects on you, and you can change your plan at any time.
Improving plans. We may study training records combined across many users, as totals, to improve how plans progress. We never report on a group of fewer than 10 people, and the results never identify anyone.
5. Your AI coach and OpenAI
The coach is an AI. Its replies are written by models from OpenAI, our AI provider.
- What OpenAI receives: your messages and voice messages, and what the coach reads to answer you: your plan, workouts, progress, body weight, sleep, habits, goals, injury notes and memories. Each message is first checked by OpenAI's moderation model for harmful content.
- How OpenAI may use it: only to write the coach's replies and to check messages for harmful content. Data sent through OpenAI's API isn't used to train its models. We ask OpenAI not to store our requests. OpenAI may keep them for up to 30 days to monitor for abuse, then deletes them.
- Your identifier: OpenAI receives a scrambled version of your user identifier, not your name or email.
- Who at FitAgain reads chats: only in three cases: when you report a reply, when you rate a reply 👎, and when you ask us for help with a chat. Chats are never sent to analytics.
- Your choice: the coach asks for your agreement the first time you open it. Without it, the coach doesn't answer. You can withdraw your agreement at any time: Settings → Privacy → Coach and your data → Turn off and delete. This deletes your chats, chat summaries, memories and injury notes. Your workouts, plan and progress stay.
- Clear chat: clearing a chat hides it in the app but doesn't delete it straight away. It is deleted with the other chats after 90 days, or at once when you turn off the coach's data or delete your account.
6. Who receives your data
We share personal data only with the service providers that run FitAgain for us. They act on our instructions, under contracts that require them to protect it.
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Supabase | Database, sign-in, profile photo storage | Everything we store | United States |
| Cloudflare | Runs our server, serves images and the website, routes support emails | Every request to our server; support emails in transit | Global |
| OpenAI | Writes the coach's replies, turns voice messages into text, checks messages for harmful content | Coach data, as in section 5 | United States |
| PostHog | Analytics and A/B tests | Usage events, as in section 2.9 | United States |
| RevenueCat | Manages subscriptions | Your user identifier and purchases | United States |
| Google Firebase | Crash reports and remote settings | Crash reports, installation identifier | United States |
| Sign in with Google, if you choose it | What sign-in needs | United States | |
| hCaptcha | The bot check when your account is created | Device signals, IP address | United States |
| Proton | Our support mailbox | Your emails to us | Switzerland |
Apple handles payments, Sign in with Apple, push notifications and the App Store under its own privacy policy, as an independent controller.
We also share personal data:
- when the law requires it, for example in response to a valid court order, and only what is required;
- to protect the rights, safety or property of our users, the public or FitAgain;
- with a buyer or successor if FitAgain is sold or transferred. They must keep to this policy, and we will tell you before your data falls under a different policy.
We don't sell personal data, share it for targeted advertising, or give it to data brokers.
7. International transfers
Your data is stored by our providers, mainly in the United States (section 6). We may access it from outside the United States, over encrypted connections.
8. How long we keep your data
| Data | How long |
|---|---|
| Account, profile, onboarding answers, plan, workouts, habits, sleep, body weight | Until you delete your account |
| Profile photo | Until you remove it or delete your account |
| Coach chat messages | 90 days, or less if you turn off the coach's data or delete your account |
| Chat summaries, memories, injury notes (healed ones too) | Until you delete them, turn off the coach's data or delete your account |
| Voice recordings | Not kept by us. The record of when and how large each was: 24 hours |
| Unused guest accounts | Deleted after 30 days unseen, if they have no workout, no habit checked and no purchase that ended in those 30 days |
| Other guest accounts | Deleted after 12 months unseen, if no purchase is active or ended within that year |
| Subscription record at RevenueCat | Until you delete your account |
| Analytics events at PostHog | Until you delete your account |
| Crash reports | 90 days |
| OpenAI's abuse-monitoring records | Up to 30 days |
| Our server logs | 3 to 7 days |
| Notification token | Until you sign out or delete your account |
| Support emails | Until your question is resolved, then up to 2 years |
| Backups | When we keep them, they rotate out within 30 days. We never restore deleted accounts into use |
| Record that an account was deleted | Your user identifier for 30 days after the last deletion step, then no personal data |
Accounts that sign in with Apple or Google are never deleted for being inactive. Anonymous totals that don't identify anyone, such as counts of 👍 and 👎, may be kept after your account is deleted.
9. Your choices in the app
| What | Where |
|---|---|
| Correct your profile | Settings → your profile |
| Download a copy of your data (a ZIP of CSV files with your profile photo) | Settings → Privacy → Download your data |
| Turn analytics off | Settings → Privacy → Share usage data |
| See and delete what the coach remembers, or turn off the coach's data and delete it | Settings → Privacy → Coach and your data |
| Close or delete an injury note | Settings → Training → Injury notes |
| Turn workout reminders and other notifications on or off | Settings → Preferences → Reminders |
| Turn the morning sleep question on or off | Settings → Preferences → Morning sleep question |
| Stop Apple Health access | iOS Settings → Health → Data Access & Devices → FitAgain |
| Delete your account | Settings → Delete account |
The data download doesn't include analytics events or crash reports. You can ask us for them by email.
10. Your rights
You can ask us to:
- tell you whether we hold your personal data, and give you a copy;
- correct it;
- delete it;
- give it to you in a portable format;
- stop or limit a use of it;
- stop using it for analytics;
- withdraw a consent you gave, without affecting what was done before.
Most of these you can do yourself in the app (section 9). For anything else, email support@fitagain.app. We may ask for details to confirm the account is yours, for example by writing from the email address linked to your account. We answer within 45 days, or within the time your local law sets if shorter. Using your rights is free.
United States. Depending on your state, you may have the right to know what we collect, to access, correct and delete it, to opt out of its sale or use for targeted advertising (we do neither), to limit the use of sensitive data (we use it only to provide FitAgain to you), and not to be treated differently for using these rights. If we refuse a request, you can appeal by replying to our answer with "Appeal" in the subject. We'll answer the appeal within 45 days. If you disagree with the result, you can contact your state's attorney general.
11. Deleting your account
Settings → Delete account deletes your account and everything tied to it:
- At once: your account and every record in our database, and your profile photo.
- Within minutes: your subscription record at RevenueCat. If you use Sign in with Apple, we also ask Apple to remove FitAgain's access to your Apple ID.
- Within 30 days: your person and events in PostHog.
- As they expire: crash reports after 90 days, OpenAI's abuse-monitoring records after 30 days, our server logs after 3 to 7 days, and backups as they rotate out.
- On your phone: the app erases its stored data, reminders and downloaded images.
Deleting your account doesn't cancel your App Store subscription. Cancel it in your iPhone's Settings → your name → Subscriptions. If you can't open the app, email us from the address linked to your account and we'll delete it for you.
12. Guest accounts
A guest account lives on our server like any other account, but it isn't linked to Apple or Google. If you delete the app or lose your phone without saving your account (Settings → Save your account), you can't sign back in, and we can't recover your data. Unused guest accounts are deleted automatically, as section 8 describes.
13. Children and teenagers
FitAgain isn't for children under 13, and we don't knowingly collect their personal data. If you believe a child under 13 has given us personal data, email us and we'll delete it.
If you're under 18, we don't show you weight-loss forecasts.
14. Security
We protect your data with encryption in transit (HTTPS), checks that tie every request to the signed-in account, database rules that let each account read only its own records, and access to the systems limited to the people who run FitAgain. Our providers' secret keys stay on our server, never in the app. No system is completely secure, but if a breach affects your data, we'll tell you and the authorities as the law requires.
15. Changes to this policy
We'll update this policy when FitAgain changes, and change the date at the top. If a change matters, for example a new kind of data or a new provider, we'll tell you in the app before it applies. If the change affects something you agreed to, such as the coach's use of your data, we'll ask for your agreement again.