Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email address, and password — or a profile from Apple, Google or Facebook if you sign in with them)
• Fitness data (workouts, exercises, sets, reps, weight lifted, programs)
• Nutrition data (meals, food logs, water intake, recipes, meal plans)
• Body and health data (body weight, measurements, sleep logs)
• Steps, sleep and workouts you choose to import from Apple Health or Health Connect
• Preferences and settings (units, timezone, coach personality, language)
• AI Coach conversations and chat history, including photos you attach

We also collect limited technical data automatically (such as your IP address, device and browser type, and basic usage logs) to operate and secure the Service, and usage data (the pages and screens you use) and reports of errors and crashes.

2. How We Use Your Information & Legal Basis

We use your information to:

• Provide, maintain, and improve FitJur's features (legal basis: performance of our contract with you)
• Power the AI Coach's chat and daily briefing (consent)
• Personalize your experience (contract)
• Analyze trends and generate insights about your progress (legitimate interests)
• Keep the Service secure and prevent abuse (legitimate interests)
• Understand how FitJur is used and fix errors and crashes (legitimate interests)
• Communicate with you about your account and important changes (contract / legitimate interests)
• Send you occasional product updates and training tips, but only if you ask us to (consent)
• Tell you when the iPhone and Android apps launch, and invite you to the beta if you asked for it, when you join the app waitlist and confirm your address (consent)

The app waitlist keeps only your email address, language, phone platform and whether you want the beta. We delete addresses that are not confirmed within 30 days, and every waitlist email has a link to leave the list.

Product-update emails are optional and off by default. You can turn them on when you sign up, or at any time under Settings → Profile → Product updates and tips — and turn them off again in the same place, or from the unsubscribe link in any such email. Essential account emails — password resets, security notices, and changes to the Service — are part of providing the Service and are sent regardless.

The AI Coach's chat and daily briefing send your data to our AI providers to write their replies. The chat only runs when you write to it, and the daily briefing is on by default; you can turn the briefing off at any time in Settings. The iOS app also asks for your permission before the coach first uses your data, and you can withdraw it there under Coach data access in Settings, which stops both.

We do not sell your personal data, and we do not use it for third-party advertising.

3. Health & Sensitive Data

Some of the data you enter — such as body weight, measurements, and sleep — may be considered health data ("special category" data under the GDPR). We process this data solely to provide the fitness-tracking features you request, on the basis of your explicit consent, which you give by entering the data and using these features. You can withdraw consent at any time by deleting the data or your account.

Data imported from Apple Health or Health Connect is only read, never written back. We use it to fill in your steps, sleep and cardio in FitJur and, if you use the AI Coach, to inform its replies and daily briefing. We never use it for advertising and never sell it.

4. How We Share Data (Service Providers)

We share data only with the providers needed to run FitJur, under contracts that require them to protect it:

• AI providers (Anthropic, OpenAI and Google Gemini) — to power the AI Coach.
  • For the chat and the daily briefing: your name, profile and coach settings, your goals, the workout, nutrition, weight, sleep and step data relevant to the reply (including data imported from Apple Health or Health Connect), your messages, and any photos you attach.
  • When you ask FitJur to rewrite a recipe's steps or scale its ingredients: that recipe's text and ingredients.
  • If you work with a coach in FitJur: your weekly check-in answers and notes, to write a summary for your coach.
• Sign-in providers (Apple, Google, Facebook) — if you choose social login, they share your basic profile (name, email) with us.
• Usage analytics & error reports (PostHog, hosted in the EU) — usage and error data linked to your account and, on the website, recordings of your visits with all text, images and typing hidden. Never your workout, nutrition, body or health data.
• Infrastructure & email — hosting, database, and transactional email providers that store data and deliver messages on our behalf.
• Security — Google reCAPTCHA helps protect sign-up from abuse and is subject to Google's privacy policy.

5. International Data Transfers

Some of our providers (for example, certain AI or infrastructure services) are located outside the European Economic Area, including in the United States. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Data Retention & Deletion

We retain your data for as long as your account is active. You can delete your account at any time from the Settings page, which permanently removes your personal data from our systems, except where we must retain limited records to comply with legal obligations. Backups are purged on a rolling basis.

7. Your Rights

Depending on where you live, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Object to or restrict certain processing, and withdraw consent

To exercise these rights, use the tools in your account settings or contact us at [email protected]. If you are in the EU, you also have the right to lodge a complaint with your local data-protection authority (in Romania, the ANSPDCP).

8. Data Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

9. Cookies & Local Storage

FitJur uses cookies only for authentication and session management, and local storage for preferences and offline functionality. For analytics, PostHog keeps a random identifier in your browser or the app. We do not use advertising cookies or track you across other websites or apps. The Google reCAPTCHA used on sign-up may set its own cookies for security purposes.

10. Children's Privacy

FitJur is not intended for anyone under 16, and we do not knowingly collect data from children under that age. If you believe a child has provided us personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new version here with an updated date and, for significant changes, notify you in the app or by email.

12. Contact Us

Questions about this Privacy Policy or your data? Contact us at [email protected].