Your data, your rights.

Information We Collect

To provide and improve FitJot, we collect certain information from and about you.

Personal Information

When you create an account, we may collect:

• Name & Display Name — Shown in your account and used to address you in the app.
• Email Address — To identify and manage your account. If you use Sign in with Apple and choose "Hide My Email", we store the anonymous @privaterelay.appleid.com forwarding address Apple gives us instead of your real address. It is treated as your email everywhere in this policy, and is deleted with your account.
• Phone Number — Collected if you choose to authenticate via SMS/Phone verification.
• Profile Photo — Optional. If you add one in Edit profile (Take photo or Choose from library), the app crops it to a small square image, saves it without the original file's location or camera details, and stores it on our server with your account so it appears on your other devices. It is not shown on shared workout links. Remove photo deletes it from our server, and it is deleted with your account. If you sign in with Google, Google may also give our sign-in provider, Firebase Authentication, a link to your Google profile picture; FitJot does not use it.
• Gender and Birthday — Optional, if you add them in Edit profile. They are stored with your account so they follow you to a new device. Choosing Male or Female also sets the body diagram used for your muscle map. Your birthday is not shown on your profile. You can change both in Edit profile at any time; the app cannot yet clear them once saved, so email us if you want them removed. Both are deleted with your account.
• Feedback — If you send us feedback or report a problem with an exercise, we receive your message together with your account ID.

Fitness and Activity Data

As a core part of our Service, we store:

• Workout Logs — Exercises performed, weight lifted, repetitions, sets, and duration, and for timed or cardio exercises, the time and distance of each set.
• Workout Programs — Custom fitness routines created or saved by you.
• Personal Records — Milestones and achievements reached during your workouts.
• Timestamps — Start and end times of your workout sessions.
• Body Metrics You Choose to Enter — Body weight, body-fat percentage, and measurements for chest, waist, hips, arms and thighs, along with any notes you attach. These are optional — the app works fully without them — and they are deleted with your account.
• Training Settings — Your weight and distance units (kg or lb, km or mi) and training preferences such as Auto Pilot, saved with your account so they follow you to a new device.
• Onboarding Answers — Your training goal, experience level, training days per week and available equipment, if you answer the optional questions after sign-up. We use them to recommend programs.

Device and Usage Data

• Device Identifiers — A per-install app instance ID created by Firebase, used for analytics, crash diagnostics, remote configuration and sign-in security. FitJot shows no ads and does not track you across other companies' apps or websites. On iOS, FitJot does not ask for permission to track you. On Android, Google Analytics for Firebase and our subscription processor Adapty may read your device's advertising ID; we do not use it for advertising. A per-install identifier is also attached to crash and error reports while you are signed out.
• Operating System — To ensure compatibility and troubleshoot issues.
• Usage Logs — Information on how you interact with the app (e.g., screens visited, features used).
• Crash Reports and Performance Data — Crash logs, device model, operating system version and app performance measurements, used to find and fix problems. On Android, a crash or error also captures a short screen recording of the moments leading up to it, with text and images masked.

How We Use Your Information

We use the collected data for the following purposes:

• To Provide the Service — Tracking your workouts, calculating volume, and syncing your data across devices.
• Account Management — Authenticating users and providing account security.
• Improvement — Analyzing usage trends to fix bugs and develop new features.
• Communication — Sending important notifications related to your account or workout sessions.

Data Storage & Third-Party Services

We utilize reputable third-party providers to help us run our Service:

• Firebase Authentication and Phone Authentication (Google LLC) — Sign-in and account security. For phone sign-in, Google sends the one-time SMS code and processes your phone number, including to prevent spam and abuse. A Google reCAPTCHA check may be shown.
• Sign in with Apple (Apple Inc.) and Google Sign-In (Google LLC) — Optional sign-in methods. When you delete your account, we revoke FitJot's Sign in with Apple token.
• Google Analytics for Firebase, Firebase Performance Monitoring and Firebase Remote Config (Google LLC) — Usage analytics, app performance measurements and remote app configuration. They receive a per-install identifier, device and operating-system details, and approximate location derived from your IP address. They are not used for advertising.
• Sentry (Functional Software, Inc.) — Crash and error reporting, processed in Sentry's European Union region. Sentry receives the crash or error itself, your device model, operating-system and app versions, and either a per-install identifier or your FitJot account identifier. On Android only, and only when an error occurs, it also receives a short screen recording of the moments leading up to it: text and images in that recording are masked automatically, but charts the app draws — such as your body-stat and progress graphs and the muscle map — are not.
• Adapty (Adapty Tech Inc.) — Our subscription processor for FitJot Plus. What it receives is described in section 03b.
• Apple App Store and Google Play — Take payment for FitJot Plus. We never receive your card or payment details.
• Hostinger — Hosts the server we operate, where your profile and workout data are stored in a MongoDB database.
• FormSubmit (formsubmit.co) — Delivers deletion requests sent through our web form to our support inbox.

These providers process your data only to provide their services to us, under terms that protect your data to the same or an equal standard as this policy.

Subscriptions, Shared Links, Gym Profiles & Feedback

FitJot Plus subscriptions (Adapty)

FitJot Plus is sold through the App Store and Google Play. Apple or Google handle the payment; we never receive your card or payment details. We use Adapty as our subscription processor to check which purchases belong to your account and to show the subscription screen. Adapty receives:

• Your FitJot account identifier, so a purchase is linked to your account on every device.
• Your purchase history for FitJot Plus from the App Store or Google Play: which subscription you bought, when, and whether it is active, renewed, cancelled or refunded.
• Your onboarding answers (training goal, experience level, training days per week and equipment), because the optional questions after sign-up are shown through an Adapty screen.
• Device identifiers: the Firebase per-install ID, so subscription events can be matched with app analytics, and on Android your device's advertising ID. On iOS, FitJot does not ask for permission to track you, so Adapty does not receive your iPhone's advertising identifier. None of these are used for advertising.
• Your IP address, from which Adapty derives your approximate country, used for subscription analytics and to show the subscription screen for your region.

Our server stores whether your account has an active FitJot Plus subscription. That record is deleted when you delete your account. Deleting your account does not cancel a subscription; cancel it in your App Store or Google Play subscription settings. Adapty keeps its own record of your purchases after you delete your FitJot account; to have that record deleted too, email us after deleting your account and we will ask Adapty to delete it.

Crash reports and error replays (Sentry)

As described in section 03, crash and error reports go to Sentry, including reports from the Wear OS app. The short screen recording ("session replay") is made only when an error occurs. Ordinary sessions without an error are not recorded.

Shared workout links

When you share a workout, we create a public link at fitjot.tech/w/…. Anyone who has the link can see the workout (its name, exercises, sets, reps and rest times) and your display name, in a browser or in the FitJot app, and can save a copy. Links are not listed on our site, but anyone you send the link to can pass it on. You cannot yet remove a single shared link; all of your shared links are removed when you delete your account.

Gym profiles (FitJot Plus)

If you set up a gym profile, we store its name, your weight unit, and the bars, plates, dumbbells, kettlebells, cable stack and Smith machine you have available, so FitJot can suggest weights you can actually load. It is stored with your account on our server and deleted with your account.

Feedback

When you send feedback or report a problem with an exercise, we receive your message, its category, an optional 1–5 rating, the exercise you reported (if any), your app version, platform, language, device model and whether you use FitJot Free or Plus, together with your account ID. Our replies are stored with it. As section 06 explains, feedback is kept after you delete your account.

App Permissions

The FitJot app may request the following permissions:

• Internet Access — Required to sync your data with our servers.
• Notifications — To send workout reminders or timer updates.
• Photos, add only (iOS) — Requested only when you choose Save Image on a shared workout card, so the image can be saved to your photo library. FitJot cannot read your photos.
• Camera (iOS) — Requested only when you choose Take photo for your profile photo. On Android, Take photo opens your camera app and FitJot asks for no camera permission. Choose from library uses the system photo picker on both platforms, which gives FitJot only the photo you pick.
• Foreground Service (Android only) — Used on Android to keep your workout session active and accurate while the app is in the background. The iOS app does not run any background services.

Security

We implement industry-standard security measures to protect your data:

• Secure Authentication — Via Firebase's trusted auth protocols.
• Encrypted Transmission — All data between your device and our server is transmitted over HTTPS.

Your Rights & Choices

You have the following rights regarding your data:

• Access & Export — View your workout history and profile within the app.
• Correction — Update your profile information and edit workout logs at any time.
• Deletion and Withdrawing Consent — Delete your account and your workout data at any time, from inside the app. Deleting your account is also how you withdraw your consent to our processing of your data.

Delete your account from inside the app

Open the Profile tab (bottom right) → Settings (the gear, top right) → scroll to the bottom → Delete account → type DELETE in capital letters to confirm. In app versions before 1.2.2, open the Settings tab (bottom right) instead. This immediately and permanently removes your profile (including your profile photo, gender and birthday), workout logs, routines and programs, personal records, body metrics and gym profiles from our servers, deletes your sign-in account, and revokes FitJot's access to your Sign in with Apple account. It is a deletion, not a deactivation.

How long we keep your data

We keep your account and workout data for as long as your account exists, and delete it as described above when you delete your account. Feedback and problem reports you sent us are kept after your account is deleted so we can fix the issues they describe. Analytics and performance data are kept by Google under the retention settings of those Firebase services, and crash and error reports by Sentry under its retention settings. Purchase records kept by Adapty are described in section 03b.

Children's Privacy

FitJot is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child has provided us with data, we will take immediate steps to delete it.

Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. Continued use of FitJot after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please reach out: