Privacy Policy

1. Introduction

Welcome to FitCircle. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, share, and protect your information when you use the FitCircle website and the FitCircle mobile apps for iOS and Android (together, the "Service").

Data Controller: FitCircle Inc.
Contact: privacy@fitcircle.ai

2. Data We Collect

2.1 Account Information

• Email address (required for account creation)
• Display name, username, and optional profile details (bio, photo, gender, height)
• If you sign in with Apple or Google: the identifier, name, and email address that the provider shares with us. With Sign in with Apple you may choose to hide your email address.
• Account preferences (unit system, timezone, notification settings)

2.2 Health and Fitness Data

Depending on what you choose to log or connect, we collect:

• Weight, body measurements, and body composition values
• Step counts, workouts, and other physical activity data
• Food, water, and supplement logs, including calories and macronutrients
• Mood and energy level ratings
• Goals, streaks, and challenge participation and progress

2.3 Apple Health and Health Connect

If you give permission, the iOS app reads steps, workouts, weight, and body measurements from Apple Health, and can write the meals, weight, and body measurements you log in FitCircle back to Apple Health. The Android app can read similar data from Health Connect. Connecting is optional and you can withdraw permission at any time in your device settings. Data obtained from Apple Health or Health Connect is used only to provide FitCircle's health and fitness features. It is never used for advertising or marketing, never sold, and never shared with data brokers.

2.4 Photos, Voice, and Messages

• Photos you take or choose: meal photos, body composition reports, and chat photos
• Voice logging: speech is transcribed using your device's speech recognition service (Apple on iOS; the configured speech provider on Android). Depending on your device and provider, audio may be processed on the device or sent to that provider's servers. FitCircle receives the resulting transcript, not the audio recording. You can type a meal instead of using voice logging.
• Messages and reactions you post in FitCircle chats
• Messages you send to the Fitzy assistant

2.5 Technical and Usage Data

• IP address (for security, rate limiting, and approximate location in analytics)
• Device and app information (model, operating system, app version, language)
• Device identifiers, including a push notification token if you allow notifications
• Advertising identifiers and other device identifiers used by our advertising providers, subject to your device settings and applicable consent choices (see section 5)
• Usage data (screens viewed, features used) and crash and performance diagnostics
• On the website: browser type and cookie identifiers
• Purchase history for FitCircle Pro (we never receive your card details)

3. How We Use Your Data

3.1 Providing the Service

• Provide logging, tracking, streaks, trends, and insights
• Manage your account and authentication
• Enable FitCircles, chat, challenges, and leaderboards
• Estimate nutrition from photos and voice, and answer your questions to Fitzy
• Send notifications you have enabled and essential service communications
• Process purchases and provide FitCircle Pro features
• Keep the Service safe: prevent abuse, review reports, and enforce our Terms

3.2 Analytics and Diagnostics

We use usage analytics and crash reports to:

• Understand how people use FitCircle
• Improve features and user experience
• Identify and fix bugs and crashes

On the website, analytics cookies and session replay are used only with your consent, which you can withdraw at any time in your Privacy Settings. In the mobile apps, analytics record which features are used, not the health values you log.

3.3 Advertising

The free version of the mobile apps shows ads. FitCircle Pro removes them. See section 5 for what is and is not used for advertising.

4. Artificial Intelligence Features

Some features use artificial intelligence models operated by third parties. When you use these features, and only after you have given permission in the app, we send the following to AI models provided by Anthropic and Google, through Vercel's AI Gateway:

• Meal photos, and any note you add, to estimate calories and macronutrients
• The text of your voice log, to turn it into a food entry
• Photos of body composition reports, to read the values from them
• Your messages to Fitzy, together with a summary of your recent workouts, weight trend, and body measurements, so that Fitzy can answer questions about your own logs

We do not include your name or email address in these requests. A random account identifier is attached so that we can apply usage limits and prevent abuse. You can withdraw permission at any time in the app under Settings → AI Data Sharing. Without it you can still log everything by hand. Results produced by AI are estimates and are not medical or dietary advice.

5. Advertising and Tracking

Ads in the free version of the mobile apps are served by Google AdMob.

• On iOS, the app asks for your permission before tracking (the App Tracking Transparency prompt). If you allow it, Google may use your device's advertising identifier to show more relevant ads and measure their performance. If you do not allow it, you still see ads, but they are not personalized using that identifier.
• You can change this choice at any time in your device settings (on iOS: Settings → Privacy & Security → Tracking).
• On Android, AdMob may collect and share advertising and other device identifiers, IP addresses (which can indicate approximate location), ad and app interactions, and diagnostic information to serve ads, measure performance, and prevent fraud. Collection and personalization depend on your device settings and applicable consent choices. You can reset or delete your advertising ID in Android settings and revisit available consent choices under Privacy & Ad Choices in FitCircle.
• Where required by law, the app asks for your advertising consent choices through Google's consent form before any ad is requested.
• We never use or share your health and fitness data, food logs, photos, or messages for advertising. We do not sell your personal information.

6. Who We Share Data With

We share data only with the service providers below, each for the purpose stated, and with other users as described in section 7.

We may also disclose information when required by law, or to protect the rights and safety of our users and the Service.

7. What Other Users Can See

FitCircle is a social service. Members of the FitCircles you join can see your display name, username, profile photo, check-ins, streak, challenge progress, and the chat messages you post. Meals you log are shared with your FitCircles by default, and you can change what each FitCircle sees, or keep meals private, from the sharing controls in the app. People outside your FitCircles cannot see your logs.

8. Cookie Policy (Website)

8.1 Essential Cookies (No Consent Required)

• sb-access-token - Supabase authentication (session management)
• sb-refresh-token - Supabase authentication (persistent login)
• fc_consent - Stores your cookie preferences

8.2 Analytics Cookies (Consent Required)

• amplitude_* - Amplitude tracking (usage analytics, session replay)

You can manage cookie preferences at any time in your Privacy Settings.

9. Your Choices and Rights

9.1 In the Mobile Apps

• Delete your account: Profile → Settings → Delete Account. This permanently deletes your account and the data associated with it.
• Export your data: Profile → Settings → Export Data
• AI data sharing: Profile → Settings → AI Data Sharing
• Block or report a user: from any chat message or profile
• Health, camera, microphone, notifications, tracking: your device settings

9.2 GDPR Rights (EU/EEA Residents)

• Right to Access: Request a copy of your data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Delete your account and data
• Right to Data Portability: Export your data in JSON format
• Right to Object: Opt-out of analytics and processing
• Right to Restrict Processing: Limit how we use your data
• Right to Withdraw Consent: Change your consent choices at any time

9.3 CCPA Rights (California Residents)

• Right to Know: What personal information we collect
• Right to Delete: Request deletion of your data
• Right to Opt-Out: Do not sell or share my personal information
• Right to Non-Discrimination: Equal service regardless of privacy choices

10. Data Retention

• Active Account Data: Retained while your account is active
• Deleted Account Data: Erased within 30 days of deletion request
• Consent Records: Retained while your account is active and removed as part of account deletion
• Aggregate Analytics: Anonymized data may be retained indefinitely

Deleting your account does not cancel a subscription bought through the App Store or Google Play. Subscriptions are managed in your store account settings.

11. Data Security

We implement industry-standard security measures to protect your data:

• Encryption for data in transit (HTTPS/TLS)
• Encryption at rest for stored data
• Row-level security (RLS) policies in database
• Regular security updates
• Limited employee access to personal data

12. International Data Transfers

FitCircle is hosted in the United States. If you are accessing from the EU/EEA, your data will be transferred to the US. We rely on:

• EU-US Data Privacy Framework, where our providers are certified
• Standard Contractual Clauses (SCCs) where applicable
• Your explicit consent for health data processing

13. Children's Privacy

FitCircle is not intended for users under 18 years of age. We do not knowingly collect data from children. If we discover that we have collected data from a child, we will delete it immediately.

14. Changes to This Policy

We may update this privacy policy from time to time. Material changes will require re-consent. You will be notified via:

• Email notification (for significant changes)
• Cookie consent banner (for cookie-related changes)
• In-app notification

15. Contact Us

For privacy-related questions or to exercise your rights, contact us:

You also have the right to lodge a complaint with your local data protection authority.