FitTrack

Privacy Policy

Last Updated: September 29, 2026

This Privacy Policy explains how Belal Embaby, operating as FitTrack ("FitTrack," "we," "us," or "our"), collects, uses, shares, and protects information when you use the FitTrack iOS app, Apple Watch app and widgets, and the FitTrack website and web app at fitstrack.com and any other website we operate for FitTrack (together, the "App"). We are the controller of your information.

We are based in New Jersey, United States. Questions about this policy or your data: support@fitstrack.com.

FitTrack is a health and fitness app, so some of what we handle is sensitive — for example Apple Health data, body measurements, and how you feel. This policy describes what we collect, where it goes, who can see it, how long we keep it, and the choices you have. Washington and Nevada residents should also read Consumer Health Data.

1. Information We Collect

a. Account and profile

• Email address, name, username, and password (stored only as a one-way hash). Accounts created with Sign in with Apple or Google have no usable password until you set one.
• Every account has a username, and it appears on your public profile (see People Who Can See Your Data). If you sign up with Apple or Google, we give you a random username (such as athlete_k7m2q9xa) that contains nothing from your email address. Accounts created with Apple or Google before September 24, 2026 were given a username based on the part of the email address before the "@". You can change your username at any time in your Profile.
• Optional profile details: bio, profile picture, birth year, sex, height, and your training goals, experience, and preferences.

b. Sign-in

• Sign in with Apple: an Apple user identifier, and the name and email Apple shares (which may be a private relay address).
• Google Sign-In: a Google account identifier, name, and email address.

c. Apple Health (HealthKit)

Only with your permission. What the App reads, and which parts are sent to our servers, is described in Apple Health.

d. Body, wellness, and training data you enter

• Body weight, body measurements, and body-fat estimates.
• Wellness and recovery check-ins: energy, fatigue, soreness, stress, mood, sleep quality, symptoms, and free-text notes.
• Workouts: splits, exercises, sets, reps, weights, effort ratings (RPE/RIR), rest times, cardio sessions, notes, and personal records. Workouts you import from another app are stored with a record of where they came from.
• Habits and goals you track.

e. Nutrition and supplements

Food and water logs, nutrition goals, custom foods and recipes, favorite foods, and supplements you track. When you search for a food or scan a barcode, the search text or barcode is sent to the food and supplement databases listed in Service Providers and Other Services. If you turn on AI meal logging, the meal photos, descriptions, and voice recordings you submit are handled as described in AI meal logging.

f. Photos and videos

Profile pictures, progress ("transformation") photos, and lift videos that you choose to upload.

g. AI Coach

Messages you send to the AI Coach, and the account data it uses to answer — see AI Coach.

h. Trainer programs, sharing, and community

If you join a trainer's program, create share codes, make splits public, or report content, we store that relationship, what you shared, and what you reported — see People Who Can See Your Data.

i. Purchases

If you subscribe to FitTrack Pro, we receive and store the App Store transaction details needed to provide it (product, transaction identifiers, purchase and expiry dates, and status). Apple processes the payment; we never see your card details.

j. Support requests

The category, message, app version, and platform of support requests you send us.

k. Device, usage, and diagnostic information

• Server logs. Our hosting providers (Railway and Vercel) log the IP address, time, and path of requests to our servers. Our own server logs record the request path — which can include a username, barcode, or share code — and your user ID when something goes wrong. The computer that runs the AI Coach keeps operational logs of request timing and errors; they do not include your messages. We use logs to operate, secure, and debug the service.
• Product analytics, if you turn them on — see Product Analytics.
• Website cookies and storage. Sign-in cookies (jwt and refreshToken) keep you signed in until 30 days after you last use the website. A few preferences (for example favorite foods and your water unit) are saved in your browser's local storage and stay in that browser after you sign out. We do not use advertising cookies or third-party trackers on the website.

We do not collect precise location, and we do not use advertising identifiers or advertising networks.

2. How We Use Your Information

We use your information to:

• Provide the App's training, nutrition (including AI meal logging, if you turn it on), recovery, progress, and AI Coach features;
• Personalize your experience and calculate insights, streaks, levels, and statistics;
• Sync your data across your iPhone, Apple Watch, widgets, and the website;
• Provide FitTrack Pro and verify purchases;
• Let trainers you choose, and people you share with, see what you shared;
• Communicate with you about your account (for example email verification and password resets);
• Answer support requests;
• Find and fix problems, and understand how features are used (see Product Analytics);
• Keep the service secure and prevent abuse; and
• Comply with legal obligations.

We do not sell your personal information, we do not use it for advertising, and we do not share it for cross-context behavioral advertising. We do not use your personal information to train AI models.

3. Apple Health (HealthKit)

With your permission, the App reads from and writes to Apple Health. Some Health data is only read on your device to show activity, sleep, and recovery screens. Other Health data is sent to our servers and stored with your account:

• nightly sleep start and end times, sleep stages, and sleep quality;
• heart-rate variability and sleeping heart rate;
• daily steps, sleep minutes, and cardio totals used for habits and streaks;
• heart rate and active calories for workouts (including workouts recorded on Apple Watch);
• the name of the device or app that recorded the data (for example "Alex's Apple Watch"), and your time zone;
• the last 42 nights of recovery data, which the App sends when you first connect Apple Health and again after each sign-in; and
• a device identifier: a random ID stored in your iPhone's Keychain that keeps recovery data consistent. It stays the same if you reinstall the App or sign in to a different account on the same iPhone, and it is replaced only when you delete your account.

AI Coach requests also carry up to 90 days of daily activity (steps, active energy, distance, exercise minutes, stand hours) and up to 250 of your Apple Health cardio workouts (type, start and end times, duration, distance, calories, and their Health identifiers). This is used to answer that request and is not stored.

We do not use Apple Health data for advertising or marketing, we do not sell it, and we do not send it to product analytics. We share it only with the service providers that host our systems and, if you join a trainer's program, with that trainer (workout heart rate and calories — see People Who Can See Your Data). You can review or revoke the App's access at any time in the Health app or in Settings; revoking access stops new reads but does not delete data already stored with your account (delete your account for that).

4. AI Coach

The AI Coach runs on AI models that we operate on a computer we own; our servers reach it over an encrypted connection. The coach does not send your conversations, or the account data it reads to answer them, to third-party AI providers, and we do not use them to train AI models. If that ever changes, we will update this policy first and, where required, ask for your consent. AI meal logging is a separate, optional feature that does use third-party AI providers, as described in AI meal logging below.

What the coach uses. To answer, the coach can read any of the data in your FitTrack account. That includes your first name, username, birth year, sex, and height; your training profile, goals, and habits; your workouts, sets, personal records, and notes; saved splits; body weight, measurements, and body-fat estimates; sleep, heart-rate variability, sleeping heart rate, and recovery scores; wellness check-ins (including mood, stress, soreness, symptoms, and notes); nutrition, custom foods, recipes, and supplement logs; cardio; details of photos or videos you logged (not the images themselves); your time zone; the last few messages of the conversation; and the Apple Health activity described in Apple Health.

Research. Answers draw on a library of published research that we curated and host ourselves. The coach searches it on our own systems; it does not send your question to outside research or search services.

Nutrition goals. If you ask the App to suggest nutrition goals, your age, sex, weight, height, activity level, goal, and diet preference are sent to the coach to calculate them, and the suggested goals are saved to your account.

Where conversations are kept. Coach conversations are stored only on your device, excluded from iCloud and computer backups, and deleted from the device when you sign out or delete your account. Our servers process each message to generate the reply and do not store the conversation. We keep a record of when you made each coach request and its type, to apply usage limits. The coach computer's operational logs are described in section 1k.

AI meal logging (photo, voice and text)

AI meal logging lets you log a meal by taking a photo, speaking, or typing a description. It is optional and off until you agree to it in the App, and you can withdraw your agreement at any time in More → Settings → Data & Privacy. Searching for foods and scanning barcodes keep working without it.

What is sent. When you use it, we send only what is needed to identify the food, and never your name, email, or other profile details:

• Photo: the meal photo you take or choose, resized to a small JPEG without location or camera information, and any note you add.
• Text: the description you type, or the text of what you said.
• Voice: on the free plan, speech is turned into text on your iPhone and only that text is sent. For FitTrack Pro members, the recording itself (up to 30 seconds) is also sent to be transcribed more accurately.
• Food matches: to pick the right food database entry for each item, the names and nutrition values of the candidate foods. These can include foods you have logged before that match the item.

Who receives it. Our servers send these requests through OpenRouter, which routes each request to the AI model that handles it:

• Google (Gemini) analyzes meal photos and descriptions, with zero data retention: Google does not keep the request after answering it.
• Other AI models on OpenRouter. From time to time we may have a different AI model analyze meal photos and descriptions or pick the matching foods, including pre-release models whose developer is not publicly named. We use one only when OpenRouter can send the request to a provider that has agreed to zero data retention and not to use the data to train AI models. If that model is unavailable, fails, or doesn't answer in time, Google (Gemini) handles the request instead, and a model that keeps having problems is set aside.
• OpenAI transcribes FitTrack Pro voice recordings. OpenAI does not use them to train its models, but may keep them for up to 30 days to monitor for abuse before deleting them.
• If OpenAI is unavailable, Mistral AI transcribes the recording instead, with zero data retention.

Every request tells OpenRouter to use only providers that do not use the data to train AI models, and we do not use it to train AI models either. The names of the foods the AI finds are looked up in FatSecret, like any food search.

What we keep. FitTrack does not store your meal photos or voice recordings: they are held in memory only while your request is processed. The AI's analysis is kept in our server's memory for up to 15 minutes so you can review and log it; nothing is added to your food log until you choose Log. The items you log are stored like any other food log, together with the AI's name for each item and its estimate of the amount and calories. If an item has no match in the food database, it is saved in your account as a custom food marked "AI estimate". We also keep a daily count of your AI meal-logging requests and their monthly cost, to apply usage limits, and a record of each request: when it was made, whether it worked or was turned away at a limit, which AI model answered, how many foods it found, what it cost, and how long each step took. We use that record to see how the feature is used and to keep it fast and affordable; it never includes your photo, description, recording, or the foods themselves. All of this is deleted with your account.

AI estimates can be wrong, especially portion sizes. Please check each item before you log it.

5. Product Analytics

Product analytics help us find bugs and see which features are used. They are collected only after you agree, as described under "Your choice" below.

What is sent: that you opened the App, switched tabs, viewed the Pro screen, or moved through setup (step names only, never your answers); whether saving a workout or food entry, a coach request, or a purchase succeeded, failed, or was saved to send later, with a general error type (such as "offline"), a retry count range, and a rough response-time range for coach requests; whether a workout was started on iPhone or Apple Watch; whether a food entry was a meal, a drink, or a recipe; whether a coach request was a chat or a split design; whether the App was in the foreground; a random ID for each save or request; your app version, build, and install channel (App Store or TestFlight); your device's operating system and version; and whether the account belongs to our team. Each event is time-stamped, so analytics show when you use the App — for example when you start and finish a workout or log food.

What is not sent: the contents of your workouts (exercises, sets, reps, weights), Apple Health data, body measurements, what you eat, photos or videos, coach messages, your name, or your email.

Identifiers: a random analytics ID created for your account only for this purpose, a session ID, and a device ID created by the analytics software. When analytics start, the analytics software also fetches its settings from PostHog, sending these IDs and your device's time zone. The device ID and all analytics data stored on your device are deleted when you sign out, turn analytics off, or delete your account. If you turn analytics off and later turn them back on, your account keeps the same analytics ID, so new analytics are linked to earlier ones.

IP address: PostHog receives your IP address with each request and may use it briefly to process that request. Our PostHog project is set to discard IP addresses from stored analytics, and we do not use them to determine your location.

Who processes it: PostHog, Inc., in the United States, processes analytics for us. Analytics are not used for advertising and are never sold.

Your choice:

• Nothing is collected until you answer the analytics screen the App shows when you start using it.
• Where the App asks first — the EU, the EEA, Switzerland, the United Kingdom, and anywhere we cannot tell the country — analytics start only if you choose Allow analytics. Don't allow keeps them off.
• Everywhere else, the App tells you what is collected. Continue turns analytics on, and Turn off analytics, shown on the same screen, keeps them off.
• The App decides which screen to show from your App Store country, or your device's region if that is unavailable — not from where you physically are. A Continue answer is not used on a device whose App Store country or region is one where the App asks first; there you are asked again.
• You can change your choice at any time in More → Settings → Data & Privacy → Share Usage Analytics. The choice is saved to your account. It takes effect immediately on the device where you change it. Your other devices pick it up when the App is next opened or brought back to the screen, checking at most every 15 minutes, so a device that stays open can keep sending analytics until then. Turning analytics off deletes analytics data that has not yet been sent from that device. It does not delete data already sent — email us to have that deleted.

Deletion and retention: when you delete your account, we delete analytics data stored on your device and ask PostHog to delete your analytics data about an hour later, and again about a week later; PostHog completes deletion on its own schedule. Otherwise, PostHog keeps analytics data for 1 year.

6. People Who Can See Your Data

Public profile. Every account has a public profile page that anyone on the internet can view without signing in. It shows your username, bio, profile picture, the date and time you joined, your level and power level, the number of workouts you completed, featured badges, the progress photos you choose to showcase (with the date each was taken), and the splits you make public. Anyone can also check whether a username exists. There is currently no setting to make a profile private: don't put details in your username, bio, or showcase that you don't want to be public, and email us if you want your profile hidden.

Trainers. If you join a trainer's program with a program code, that trainer can see what you log from the day you join until you leave or the program ends: your workouts (exercises, sets, reps, weights, effort ratings, rest times, and workout and set notes), workout heart rate (average, peak, per-set peak, and recovery) and active calories, nutrition, body weight and notes, and supplements and notes. Leaving stops new sharing, but the trainer can still see what you logged during the program. Trainers are independent users of FitTrack, not our service providers, and their use of what they see is their responsibility.

Share codes and public splits. Anyone with a split or recipe code you share can see that item and your username. Splits you make public can be copied by other users, and your username stays on their copies.

Community safety. If you report content or someone reports yours, we review what was reported and the report's text.

7. Service Providers and Other Services

Service providers process data only to run the App for us:

Other services that the App contacts on your behalf. Each is an independent company whose own privacy policy applies to what it receives:

We may also disclose information if required by law, to enforce our terms, to protect the rights and safety of our users, or in connection with a merger, acquisition, or sale of assets, in which case we will notify you and the successor will be bound by this policy.

8. Users in the EEA, UK, and Switzerland

If you use the App in the EEA, the United Kingdom, or Switzerland, the GDPR, the UK GDPR, or the Swiss FADP applies to how we handle your information. We rely on:

• Contract — to provide your account and the features you use;
• Consent — for health data, product analytics, and AI meal logging. You agree to this policy when you create your account; health data is collected only when you connect Apple Health or enter it yourself; product analytics start only if you choose Allow analytics; and AI meal logging is used only after you agree to it in the App. You can withdraw consent at any time — disconnect Apple Health, delete that data, turn analytics off, withdraw AI meal logging, or delete your account — without affecting processing before you withdrew it;
• Legitimate interests — to keep the service secure, prevent abuse, and fix problems; and
• Legal obligation — to comply with the law.

Some data (your email and password) is needed to create an account; everything else is optional, but features that depend on it won't work without it. We do not make decisions with legal or similarly significant effects about you by automated means. We have not appointed a representative in the EU or the UK; contact us directly at support@fitstrack.com. You have the right to lodge a complaint with your local data protection authority.

9. Where Your Data Is Processed

We are based in the United States, and our service providers process data in the United States; Mistral AI, the backup transcription provider for AI meal logging, processes recordings in the European Union, and the other AI model providers we sometimes use for AI meal logging through OpenRouter may process requests outside the United States, with zero data retention. If you use the App from outside the United States, your information is transferred to and processed in the United States. Where the law requires a transfer mechanism, we rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses in their data processing terms.

10. Data Retention

• Account data — profile, workouts, nutrition, body, wellness, Apple Health data you synced, photos and videos, support messages, reports you filed, coach usage records, and suggested nutrition goals — is kept while your account exists and deleted when you delete your account (see Account Deletion). We do not currently delete inactive accounts automatically.
• Sign-in sessions last until 30 days after you last use them.
• Database backups, automatic and the ones we make before maintenance, are deleted within 90 days, so deleted data leaves backups within that time.
• Server logs are kept for up to 30 days. The exception is the operational log on the AI Coach computer (timing and errors only, see section 1k), which is not yet deleted on a schedule.
• Analytics are kept by PostHog for 1 year (see Product Analytics).
• Coach conversations are only on your device (see AI Coach).
• AI meal logging: meal photos and voice recordings are not stored; the AI's analysis is kept in server memory for up to 15 minutes, and the items you log are account data (see AI meal logging).

11. Your Rights and Choices

Depending on where you live, you may have the right to:

• know what personal information we hold and receive a copy;
• correct inaccurate information;
• delete your account and data;
• export your data — your workout history can be exported in the App (More → Settings → Data & Privacy → Workout Data); for anything else, email us;
• withdraw consent, including revoking Apple Health access, turning off product analytics, or withdrawing AI meal logging; and
• object to or restrict certain processing.

How to make a request. Email support@fitstrack.com from the address on your account (or tell us how to reach you). We may ask you to confirm your identity before acting. We respond within 45 days, or tell you if we need more time where the law allows. You may use an authorized agent; we may ask the agent for proof of authorization and ask you to confirm your identity.

Appeals. If we decline your request, you can appeal by replying to our decision or emailing support@fitstrack.com with "Privacy appeal" in the subject. We answer appeals within 45 days. If you are not satisfied, you can contact your state attorney general (in Washington, through the Attorney General's consumer complaint form) or your data protection authority.

California residents. We do not sell or share personal information as those terms are defined under California law, and we use sensitive personal information (including health data) only to provide the App. We will not discriminate against you for exercising your rights.

Nevada residents. We do not sell covered information. No third party collects information about your online activities over time and across different websites when you use our website.

Do Not Track and Global Privacy Control. We do not respond to Do Not Track signals, because we do not track you across other websites or apps. We also do not sell or share personal information for cross-context behavioral advertising, so there is nothing for Global Privacy Control to opt you out of.

12. Account Deletion

You can delete your account at any time in the App: More → Settings → Delete Account (also in your Profile). On the website, email us from your account's address and we will delete it.

When you delete your account, we delete from our database your profile, workouts, nutrition, body, wellness, and Apple Health data, trainer enrollments and share codes, purchase records, support messages, reports you filed, and your other account data. We ask our storage provider to delete your photos and videos; if a file cannot be deleted at that moment it can remain in storage, so email us if you want us to confirm it is gone. We delete analytics stored on the device and ask PostHog to delete your analytics data (see Product Analytics). On the device, we delete coach conversations and replace the device identifier described in Apple Health.

Deleted data leaves our database backups within the backup period in Data Retention. A trainer who could see your data during a program no longer can once your account is deleted. Your username stays on splits other users copied from you. Your App Store subscription is managed by Apple: cancel it in your Apple ID settings before deleting your account if you don't want to keep paying.

13. Security

We use encryption in transit (HTTPS/TLS), store sign-in tokens in the device Keychain in the apps and in secure, HTTP-only cookies on the website, store passwords only as one-way hashes, and limit access to your data. The AI Coach runs on a computer we own, which our servers reach over an encrypted connection. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.

14. Consumer Health Data (Washington and Nevada)

This section is our consumer health data privacy policy under the Washington My Health My Data Act, which covers consumer health data collected in Washington, and Nevada law.

• What we collect: Apple Health data; body weight, measurements, and body-fat estimates; wellness and recovery check-ins (energy, fatigue, soreness, stress, mood, sleep quality, symptoms, notes); workouts, cardio, and workout heart rate; nutrition and supplement logs, including meal photos, descriptions, and voice recordings you submit for AI meal logging (photos and recordings are not stored); information you give the AI Coach about your health; and, if you turn on product analytics, events that show when you log workouts or food.
• Where it comes from: you, and Apple Health with your permission.
• Why: to provide the App's features described in section 2, and, only if you turn them on, to understand how features are used through product analytics. We do not use it for advertising and do not sell it.
• Who we share it with: the service providers in section 7 that host and process it for us; PostHog, for product analytics, only if you turn them on; OpenRouter, Google, OpenAI, Mistral AI, and the other AI model providers described there, for AI meal logging, only if you turn it on (see AI meal logging); and trainers you choose to share it with by joining their program (section 6). The AI Coach runs on our own computer, not a third party's.
• Consent: we collect consumer health data to provide the features you ask for. Product analytics are collected only after you choose Continue or Allow analytics, and you can turn them off at any time in Settings. AI meal logging sends meal data to its AI providers only after you agree to it in the App, and you can withdraw at any time in Settings. Sharing with a trainer happens only when you join their program.
• Your rights: to confirm whether we collect, share, or sell your consumer health data; to access it, including a list of the third parties and service providers we share it with and how to contact them; to withdraw consent; and to have it deleted, including from backups. Use the request and appeal process in section 11.

15. Children and Teens

FitTrack is not directed to children under 13, and you must be at least 13 to use it. If you are under 18, use FitTrack only with a parent's or guardian's permission, and remember that profiles are public (section 6). We do not knowingly collect personal information from children under 13; if you believe a child has given us information, contact us and we will delete it.

16. Changes to This Policy

If we change this policy, we will post the new version here and update the "Last Updated" date. For material changes we will tell you in the App or by email and, where the law requires, ask for your consent.

17. Contact Us

Belal Embaby, operating as FitTrack New Jersey, United States Email: support@fitstrack.com