Your data,your rights.

Information We Collect

To provide you with the best fitness tracking experience, we collect certain information from and about you.

Personal Information

When you create an account, we may collect:

• Name & Display Name — Shown in your account and used to address you in the app.
• Email Address — To identify and manage your account. If you use Sign in with Apple and choose "Hide My Email", we store the anonymous @privaterelay.appleid.com forwarding address Apple gives us instead of your real address. It is treated as your email everywhere in this policy, and is deleted with your account.
• Phone Number — Collected if you choose to authenticate via SMS/Phone verification.
• Profile Picture — If you sign in via Google, we may access your profile picture URL.
• Feedback — If you send us feedback or report a problem with an exercise, we receive your message together with your account ID.

Fitness and Activity Data

As a core part of our Service, we store:

• Workout Logs — Exercises performed, weight lifted, repetitions, sets, and duration.
• Workout Programs — Custom fitness routines created or saved by you.
• Personal Records — Milestones and achievements reached during your workouts.
• Timestamps — Start and end times of your workout sessions.
• Body Metrics You Choose to Enter — Body weight, body-fat percentage, and measurements for chest, waist, hips, arms and thighs, along with any notes you attach. These are optional — the app works fully without them — and they are deleted with your account.
• Onboarding Answers — Your training goal, experience level, training days per week and available equipment, if you answer the optional questions after sign-up. We use them to recommend programs.

Device and Usage Data

• Device Identifiers — A per-install app instance ID created by Firebase, used for analytics, crash diagnostics, remote configuration and sign-in security. FitJot shows no ads and does not track you across other companies' apps or websites. On iOS, FitJot does not ask for permission to track you. On Android, Google Analytics for Firebase may read your device's advertising ID; we do not use it for advertising. A per-install identifier is also attached to crash and error reports while you are signed out.
• Operating System — To ensure compatibility and troubleshoot issues.
• Usage Logs — Information on how you interact with the app (e.g., screens visited, features used).
• Crash Reports and Performance Data — Crash logs, device model, operating system version and app performance measurements, used to find and fix problems. On Android, a crash or error also captures a short screen recording of the moments leading up to it, with text and images masked.

How We Use Your Information

We use the collected data for the following purposes:

• To Provide the Service — Tracking your workouts, calculating volume, and syncing your data across devices.
• Account Management — Authenticating users and providing account security.
• Improvement — Analyzing usage trends to fix bugs and develop new features.
• Communication — Sending important notifications related to your account or workout sessions.

Data Storage & Third-Party Services

We utilize reputable third-party providers to help us run our Service:

• Firebase Authentication and Phone Authentication (Google LLC) — Sign-in and account security. For phone sign-in, Google sends the one-time SMS code and processes your phone number, including to prevent spam and abuse. A Google reCAPTCHA check may be shown.
• Sign in with Apple (Apple Inc.) and Google Sign-In (Google LLC) — Optional sign-in methods. When you delete your account, we revoke FitJot's Sign in with Apple token.
• Google Analytics for Firebase, Firebase Performance Monitoring and Firebase Remote Config (Google LLC) — Usage analytics, app performance measurements and remote app configuration. They receive a per-install identifier, device and operating-system details, and approximate location derived from your IP address. They are not used for advertising.
• Sentry (Functional Software, Inc.) — Crash and error reporting, processed in Sentry's European Union region. Sentry receives the crash or error itself, your device model, operating-system and app versions, and either a per-install identifier or your FitJot account identifier. On Android only, and only when an error occurs, it also receives a short screen recording of the moments leading up to it: text and images in that recording are masked automatically, but charts the app draws — such as your body-stat and progress graphs — are not.
• Hostinger — Hosts the server we operate, where your profile and workout data are stored in a MongoDB database.
• FormSubmit (formsubmit.co) — Delivers deletion requests sent through our web form to our support inbox.

These providers process your data only to provide their services to us, under terms that protect your data to the same or an equal standard as this policy.

App Permissions

The FitJot app may request the following permissions:

• Internet Access — Required to sync your data with our servers.
• Notifications — To send workout reminders or timer updates.
• Foreground Service (Android only) — Used on Android to keep your workout session active and accurate while the app is in the background. The iOS app does not run any background services.

Security

We implement industry-standard security measures to protect your data:

• Secure Authentication — Via Firebase's trusted auth protocols.
• Encrypted Transmission — All data between your device and our server is transmitted over HTTPS.

Your Rights & Choices

You have the following rights regarding your data:

• Access & Export — View your workout history and profile within the app.
• Correction — Update your profile information and edit workout logs at any time.
• Deletion and Withdrawing Consent — Delete your account and your workout data at any time, from inside the app. Deleting your account is also how you withdraw your consent to our processing of your data.

Delete your account from inside the app

Open the Settings tab (bottom right) → scroll to the bottom → Delete account → type DELETE in capital letters to confirm. This immediately and permanently removes your profile, workout logs, routines and programs, personal records and body metrics from our servers, deletes your sign-in account, and revokes FitJot's access to your Sign in with Apple account. It is a deletion, not a deactivation.

How long we keep your data

We keep your account and workout data for as long as your account exists, and delete it as described above when you delete your account. Feedback and problem reports you sent us are kept after your account is deleted so we can fix the issues they describe. Analytics, crash and performance data are kept by Google under the retention settings of those Firebase services.

Children's Privacy

FitJot is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child has provided us with data, we will take immediate steps to delete it.

Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. Continued use of FitJot after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please reach out: