Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email address, and password — or a profile from Google/Facebook if you sign in with them)
• Fitness data (workouts, exercises, sets, reps, weight lifted, programs)
• Nutrition data (meals, food logs, water intake, recipes, meal plans)
• Body and health data (body weight, measurements, sleep logs)
• Preferences and settings (units, timezone, coach personality, language)
• AI Coach conversations and chat history

We also collect limited technical data automatically (such as your IP address, device and browser type, and basic usage logs) to operate and secure the Service.

2. How We Use Your Information & Legal Basis

We use your information to:

• Provide, maintain, and improve FitJur's features (legal basis: performance of our contract with you)
• Personalize your experience and power the AI Coach (consent / contract)
• Analyze trends and generate insights about your progress (legitimate interests)
• Keep the Service secure and prevent abuse (legitimate interests)
• Communicate with you about your account and important changes (contract / legitimate interests)

We do not sell your personal data, and we do not use it for third-party advertising.

3. Health & Sensitive Data

Some of the data you enter — such as body weight, measurements, and sleep — may be considered health data ("special category" data under the GDPR). We process this data solely to provide the fitness-tracking features you request, on the basis of your explicit consent, which you give by entering the data and using these features. You can withdraw consent at any time by deleting the data or your account.

4. How We Share Data (Service Providers)

We share data only with the providers needed to run FitJur, under contracts that require them to protect it:

• AI providers (such as Anthropic, OpenAI, or Google) — to power the AI Coach. We send only the data needed to generate a response (for example, your message and relevant fitness context).
• Sign-in providers (Google, Facebook) — if you choose social login, they share your basic profile (name, email) with us.
• Infrastructure & email — hosting, database, and transactional email providers that store data and deliver messages on our behalf.
• Security — Google reCAPTCHA helps protect sign-up from abuse and is subject to Google's privacy policy.

5. International Data Transfers

Some of our providers (for example, certain AI or infrastructure services) are located outside the European Economic Area, including in the United States. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Data Retention & Deletion

We retain your data for as long as your account is active. You can delete your account at any time from the Settings page, which permanently removes your personal data from our systems, except where we must retain limited records to comply with legal obligations. Backups are purged on a rolling basis.

7. Your Rights

Depending on where you live, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Object to or restrict certain processing, and withdraw consent

To exercise these rights, use the tools in your account settings or contact us at [email protected]. If you are in the EU, you also have the right to lodge a complaint with your local data-protection authority (in Romania, the ANSPDCP).

8. Data Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

9. Cookies & Local Storage

FitJur uses only strictly necessary cookies for authentication and session management, and local storage for preferences and offline functionality. We do not use tracking, analytics, or advertising cookies. Because we use only essential cookies, no cookie-consent banner is required; the Google reCAPTCHA used on sign-up may set its own cookies for security purposes.

10. Children's Privacy

FitJur is not intended for anyone under 16, and we do not knowingly collect data from children under that age. If you believe a child has provided us personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new version here with an updated date and, for significant changes, notify you in the app or by email.

12. Contact Us

Questions about this Privacy Policy or your data? Contact us at [email protected].