Privacy Policy
1. Who we are
This policy explains how FITRIA ("we") processes personal data when you use the FITRIA app, its Apple Watch app and widgets. Contact: support@fitria.app.
2. What data we collect
Account data: email, name, password (stored only as a secure hash), profile photo if you add one.
Profile and questionnaire: gender, date of birth, height, weight, goal weight, goals, experience, activity level, preferred training days, equipment, units.
Activity data: workouts you complete (date, duration, exercises, sets, repetitions, weights, calories, heart rate), plans and settings.
Nutrition data: meal plans, logged meals, water, protein shakes, recipes you open.
Body measurements: weight, body fat and circumferences you enter or import from smart scales via Apple Health.
Photos you choose to scan (a plate of food or a product label). They are sent for recognition and are not added to your public profile.
Device data: push notification token, language, time zone offset, app version.
Purchases: Apple processes payments. We never receive your card details; we only receive the status of your subscription.
3. Apple Health (HealthKit)
With your permission the app reads steps, heart rate, active energy, workouts, body weight, body fat and waist circumference, and the Apple Watch app may save workouts to Health. You can change permissions any time in the Health app.
Health data is used only to provide features to you (live heart rate, calories, progress charts, smart-scales sync). It is never used for advertising or marketing, never sold, and never shared with third parties except the service providers listed below that are needed to operate the app.
4. Why we use data
To provide the Service: build workout and meal plans, track progress, show statistics, sync with Apple Watch and widgets (contract performance).
To send reminders and notifications you have allowed (consent — you can turn them off in Settings or iOS settings).
To keep the Service secure and fix errors (legitimate interest).
We do not use your data for third-party advertising and we do not sell personal data.
5. Service providers
Hosting and database: Railway (servers may be located in the USA or the EU).
Content generation service: OpenAI — to generate plans and recipes and to recognise food and product labels from photos you choose to scan. Data is sent via API and, under OpenAI's API terms, is not used to train their models.
Apple — App Store purchases, push notifications (APNs), Apple Health.
Machine translation of our own content (programs and recipes) is performed without your personal data.
Where data is transferred outside your country, we rely on appropriate safeguards such as the providers' standard contractual clauses.
6. How long we keep data
We keep your data while your account exists. When you delete your account (Settings → Delete my account), your profile, logs, measurements, plans and notifications are deleted from our database within 30 days, except where we must keep data by law. Backups are overwritten within 30 days.
7. Your rights
You can access, correct, export or delete your data, withdraw consent and object to processing. Most actions are available directly in the app; for anything else write to us. If you are in the EU/EEA or the UK you may also complain to your data protection authority.
8. Children
The app is not intended for children under 16 and we do not knowingly collect their data.
9. Security
Data is transmitted over encrypted connections (HTTPS), passwords are hashed, and access to the database is restricted.
10. Changes
We may update this policy. The date at the top shows the latest version; significant changes will be announced in the app.