← Back to FitPro

FitPro Privacy Policy

This policy explains what FitPro collects, why, who we share it with, and the choices you have. We've tried to write it in plain English. If anything is unclear, email us at the address at the bottom.

Information We Collect

FitPro collects only what it needs to run your training, nutrition, and progress features. Depending on what you use, that can include:

1. Identity & account

• Name, email address, gender, and your date of birth (collected once at signup to confirm you are 18 or older)
• If you choose Sign in with Apple: the name and email address Apple shares with us (which can be a private relay address that forwards to you) and the Apple account identifier that links your sign-in. When you delete your account from the iOS app, we also ask Apple to revoke FitPro's access to your Apple sign-in.
• Profile photo (optional). Profile photos — including a coach's photo shown to their clients — are stored at an unlisted web address viewable by anyone who has the exact link; do not use a photo you would not want visible outside the app. It is deleted with your account.

2. Body & health metrics

• Current weight, start weight, goal weight, and your full weight history
• Height and body measurements

3. Wellness tracking

• Mood logs
• Water intake (daily total, goal, and history)
• Active calories burned and step count (on iOS these can come from Apple Health — see the Apple Health section below)

4. Nutrition

• Meal logs, meal diary, and diary history
• Custom calorie targets and dietary restrictions
• Meals you've marked as made
• Grocery ZIP code and weekly food budget (used for budget meal suggestions)

5. Workout activity

• Your workout plan and workout history
• Set-by-set logs, completed days, current streak, and total workouts completed
• Your training goal, activity level, the equipment you have, and the answers you give during setup
• Recorded activities (walk, run, ride and similar): when you record an activity in the iOS app, the GPS route, distance, pace and elevation are stored on your device only and are never uploaded to our servers. The maps behind your routes are drawn from map images your device requests: route maps in the app use Esri ArcGIS Online, and on iOS the share images you create are drawn with Apple Maps (Esri ArcGIS Online is used instead if Apple Maps cannot draw one). Apple and Esri receive the map area and your IP address, never your account details (see Third-Party Sub-processors).

6. Meal photos (for macro tracking)

• Photos of meals you choose to take so the app can estimate calories and macros. The image is sent to our AI provider to analyze the food. We do not keep the full-resolution photo. We do save a small thumbnail of it (208 pixels) to that day's diary entry so you can see what you logged; the thumbnail is stripped from the entry the next time you open the app on a later day.

7. AI Coach conversations

• Your conversations with the AI Coach — including content and timestamps. These are stored for as long as your account exists (see Retention below).

8. Technical & device

• Timezone, unit preference (metric/imperial) and app language
• Before you create an account, the setup answers you give (goal, training days, where you train, experience, sex, height, weight and goal weight) stay on your device only, for up to 30 days, and are added to your account when you create it.
• Device session tokens
• Push notification tokens (to deliver reminders you opt into)
• When you last opened the app, and the app version and platform (iPhone or web) you used
• A record of the notifications we send you, whether each one was sent, and whether you opened it
• IP address and browser or device user-agent: captured by our authentication provider when you sign in. We also record your IP address and user-agent with the consent records created when you connect to a coach, acknowledge an AI feature your coach turns on, or start a coach account; your sign-up record stores your device user-agent.

9. Consent records

• The date you accepted our policies, the version you accepted, a record of which consents you checked, and the date of birth you gave at signup

10. Payment

• Your payment processor customer ID and subscription status. We never see or store your full card number — our payment processor handles card details directly.
• For App Store purchases: the Apple original transaction ID, your plan, and renewal status.
• If you start the free Premium week: the date it started and the date it ends.

11. Analytics & error monitoring

• Product analytics — first-party only. To see which features are used and where the app fails, FitPro records a short, fixed list of named in-app events (for example "workout completed", "meal saved", "food scan failed"). Each event carries the feature it belongs to, whether it succeeded or failed (a category such as "timed out" — never the content), how long the request took, your app version and platform, and your plan type (visitor, free, trial, premium, coached, coach, or owner). Activity distance and duration are recorded only as coarse ranges (for example "3–5 km"). A few events also record simple choices you make in the app, such as the goal and training days you pick during setup, or whether you allowed Apple Health or notifications. These events are tied to your account so we can help you when something goes wrong and understand how members on each plan use FitPro. Each event also carries a random ID created on your device and a session ID that changes each time you open the app. Before you have an account, these two IDs are the only identifiers, and they are not linked to your account (see the note on iPhone app versions before 1.7.2 below). Events never include your location or routes, meal photos, food descriptions, AI Coach conversations, body measurements, or anything you type.
• Where it goes. Events are stored on our own servers (Supabase, listed under Third-Party Sub-processors). We do not use any third-party analytics, advertising, or cross-app tracking service, and we never share or sell this data. Raw events are deleted after 90 days; only counts without personal identifiers are kept beyond that. Deleting your account deletes the events tied to it immediately; events recorded before you create your account are stored without it, are not linked to you, and expire on the same 90-day schedule. (In iPhone app versions before 1.7.2, events from the minute you created your account could be stored with it.)
• Crash and error reports, collected by Sentry, our only third-party monitoring service. Reports carry error details, the app version and platform. Sentry also receives your IP address (used by Sentry to estimate a rough location, not stored by FitPro), your device and browser type, the screen where the error happened, and, for a small sample of sessions, how long screens and requests took to load. Reports never include your name, email, health data or anything you type.

12. AI processing (third-party AI service: Anthropic PBC, USA)

FitPro's AI features are powered by Anthropic PBC, a U.S. AI provider. Nothing is sent to Anthropic until you grant permission in the in-app consent prompt shown before your first AI feature use (withdrawable anytime in Settings › Your Data). When you use an AI feature, the following is transmitted to Anthropic solely to generate your response:

• Your messages and questions — what you type to the AI Coach, and food descriptions you ask it to estimate.
• Fitness profile — your name, age, weight, height, sex, goals, activity level, and dietary preferences, used to address you and to personalize plans and macro targets.
• Recent activity — logged meals, workouts, water, and weight trends the AI needs for context.
• Grocery ZIP code and weekly food budget — only when you generate a grocery plan, so the AI can suggest local, in-budget groceries.
• Meal photos — only when you use photo macro scanning; analyzed for nutrition estimation. FitPro does not keep the full-resolution photo, only the small same-day diary thumbnail described above.

Anthropic processes this data under its commercial API terms: it does not train its models on your data, and it applies data-protection safeguards equivalent to those described in this policy. We never send your password, payment details, or account credentials to Anthropic.

Apple Health (HealthKit)

On iPhone, FitPro can read health data from Apple Health. It only does so after you grant permission in Apple's HealthKit prompt, and it reads four categories:

• Active Energy Burned — your active calories, shown in the app alongside what you've logged
• Step Count — your daily steps, shown as part of your activity
• Workouts — sessions recorded by your Apple Watch or other Health-connected apps, so activity you did outside FitPro still counts toward your daily burn and your runs, walks and rides appear in your Activity history
• Workout Routes — the GPS route saved with an outdoor workout, used only to draw its map in your Activity history

Active energy and step count are saved to your FitPro account in our database so they appear in your history. Workouts and workout routes read from Apple Health stay on your device, like the activities you record in FitPro, and are not uploaded to our servers. We use Apple Health data only to power the fitness and nutrition features you're using. We do not use it for advertising, we do not sell it, and we do not share it with anyone beyond the infrastructure providers listed in this policy. You can turn FitPro's access off at any time in the iOS Health app's sharing settings; if you do, we stop receiving new values, and you can delete what we already hold by deleting your account. The FitPro iPhone app does not write any data to Apple Health. If you use the FitPro Apple Watch app, it asks separately for permission to read your heart rate, walking, running and cycling distance, and active energy during a workout, so it can show live stats on your watch, and to save the finished workout to Apple Health. Those readings stay on your watch and in Apple Health, and are never uploaded to our servers.

Coaching — Sharing With a Coach You Choose

FitPro works fully without a human coach. If you choose to connect your account to a coach using their invitation code, the following applies:

• What is shared — after you accept five separate consent checkboxes, your coach can see the information you log in FitPro: meals and food diary, workouts, weight, body measurements, water, mood, progress entries, goals, notes, the messages you send them, and your name, email, and profile basics.
• What is never shared — your payment details, subscription information, and data read from Apple Health are never shared with any coach.
• Invitation data — when creating your invitation, your coach may enter your name, email address, a short note, and basic profile details (training goal, sex, height, current and goal weight, activity level). FitPro holds this before you sign up and uses it only to deliver your invitation, make sure only you can accept it, and pre-fill your profile, without overwriting anything you set yourself. If you never accept the invitation, it expires, and you can ask us to delete it at privacy@getfitpro.app.
• Profile and targets. Your coach can also fill in or correct your basic profile details (goal, sex, height, weight, goal weight, activity level), and you can change them anytime in Settings. Your coach can also set your nutrition targets, which take the place of the app's own targets while you are connected to them.
• Access log — every time your coach opens your detail view, FitPro records the access in a log you can read in the app (the app shows your 500 most recent records; email privacy@getfitpro.app for the full log). Your coach cannot edit or erase it (the log is removed if your coach deletes their FitPro account).
• Purpose limits — coaches agree to use your information only to coach you, and to stop using it when you disconnect.
• Withdrawal — disconnect from your coach at any time in the Coach tab (Privacy & sharing → Leave this coach); their access ends immediately and your data stays in your account. Your coach can also end the connection from their side — if that happens, FitPro notifies you right away, active program assignments end, and everything you logged stays in your account.

Sensitive Information

Some of what FitPro collects is treated as sensitive personal information under the California Privacy Rights Act (CPRA) and similar laws. Specifically:

• Biometric / health data — weight and body measurements
• Apple Health data — active energy burned and step count read from Apple Health on iOS, with your permission
• Wellness data — mood logs
• Approximate location — grocery ZIP code

We use this information only to provide the features you've asked for. We do not use it to infer characteristics about you, and we never sell it.

How We Use Information

We use your information to:

• provide and personalize your workouts, meal plans, and tracking
• calculate your calorie and protein targets
• show your progress over time
• let you message your coach and the AI Coach
• process your subscription
• keep the app working and fix problems
• see which features are used and where they fail, using the first-party product analytics described in section 11

Data Security

FitPro takes reasonable measures to protect your information but cannot guarantee absolute security. Traffic between your device and our servers is encrypted with HTTPS/TLS. Our infrastructure providers (Supabase and Vercel) encrypt stored data at the platform level; FitPro does not add its own application-level encryption on top of individual records. Your sign-in session token is kept in your browser's local storage on the device you signed in with, not in your device's operating-system credential store — so anyone with access to your unlocked device may be able to reach your session.

Third-Party Sub-processors

FitPro relies on these providers to function. Each only receives the data it needs to do its job:

• Supabase — authentication, database, and file storage, including our own product analytics
• Vercel — application hosting
• Stripe — payment processing (we never see your full card number)
• Apple — app distribution via the App Store, Sign in with Apple (if you choose it), push-notification delivery on Apple devices (Apple Push Notification service, for reminders you opt into), and payment processing for subscriptions purchased inside the iOS app via In-App Purchase (we never see your payment details); on iOS, Apple Maps also draws the map behind the share images you create, so Apple receives that map area and your IP address, never your account details
• Anthropic — AI Coach replies, plan generation and meal-photo macro estimation (your messages and any meal photos you take are sent to generate responses; Anthropic does not train on your data, and FitPro keeps only the small diary thumbnail of a meal photo, never the full-resolution image)
• Sentry — crash and error reports: error details, the app version and platform, your IP address (used by Sentry to estimate a rough location, not stored by FitPro), your device and browser type, the screen where the error happened and, for a small sample of sessions, how long screens and requests took to load; never your name, email, health data or anything you type. On the web, your browser also sends network-error and security-policy reports to Sentry.
• Browser push services — if you enable notifications in a browser, your browser vendor's Web Push service receives your push endpoint and the contents of the notifications we send you, in order to deliver them.
• Pexels — food photography. The photo itself loads from Pexels in your app, so Pexels receives your IP address and browser user-agent, never your account details.
• Esri ArcGIS Online — map images behind your recorded routes in the iOS app, and behind a share image whenever Apple Maps cannot draw it. Your device requests map tiles for the area of your activity, so Esri receives your IP address and that map area, never your account details.
• Cloudflare: email routing. Messages you send to our @getfitpro.app addresses (such as privacy@ or support@) pass through Cloudflare on their way to us, so Cloudflare handles your email address and the message contents.
• Resend: email delivery. The account emails we send you (sign-up confirmation, password reset, email change) go out through Resend, so Resend handles your email address and the contents of that email.

No Sale of Personal Information

FitPro does not sell your personal information, and we do not share it for cross-context behavioral advertising.

Retention

We retain your data until you delete your account in Settings → Your Data → Delete my account. Deletion is immediate and permanent. There is no grace period, and there is no way to sign back in and cancel it — once you confirm, your profile, login, and the data associated with your account are removed and cannot be restored by us.

Some things are retained on their own schedule while your account is open:

• AI Coach conversations are kept for the life of your account. We do not expire them on a schedule; they are deleted when you delete your account.
• Meal photo thumbnails in your diary are stripped the next time you open the app on a later day.
• Product analytics events (section 11) are deleted 90 days after they are recorded; only aggregate counts without personal identifiers are kept beyond that.

What remains after deletion. Payment records held by Stripe and in our billing records are kept for up to 7 years to comply with tax law; anonymized error reports may persist in Sentry for up to 90 days; anonymous analytics events recorded before you signed up expire on the 90-day schedule.

Our infrastructure providers keep their own routine backups of the systems FitPro runs on. Those backups are managed by the providers on their own schedule; FitPro does not configure them and cannot remove individual records from them, so a copy of your data may persist in provider backups for a period after deletion before it is cycled out.

Your Rights

Wherever you live, you can:

• Access and export a copy of your data — Settings → Your Data → "Download my data". The export covers your profile, your logged data and your AI Coach conversation history. Email privacy@getfitpro.app and we'll send you anything the export leaves out.
• Delete your account and associated data — Settings → Your Data → "Delete my account" (immediate and permanent)
• Correct inaccurate information by editing your profile
• Opt out of sale — we don't sell your data, so there's nothing to opt out of, but you have the right regardless
• Withdraw consent — turn off AI processing in Settings → Your Data, or delete your account to withdraw consent entirely

For any request we can't handle through the in-app controls, contact us at the address below and we'll respond within the timeframe required by your local law.

Geographic Scope

FitPro is available in the United States and Canada. We do not knowingly offer services to or process personal information of individuals located in the European Economic Area, the United Kingdom, or other jurisdictions outside the United States and Canada. If you are located outside the United States and Canada, please do not use this service.

Wherever you use FitPro from, your personal information is stored and processed in the United States.

State Privacy Rights

If you are a resident of one of the states listed in this section, you have specific privacy rights described below. To exercise any of these rights, email privacy@getfitpro.app with the subject line "Privacy Request" and the state in which you reside. We may need to verify your identity before fulfilling a request.

For California Residents

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California residents have the following rights:

• Right to know what personal information we collect, use, disclose, and the categories of sources and recipients.
• Right to delete personal information we have collected about you, subject to certain exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising.
• Right to limit use and disclosure of sensitive personal information to purposes necessary to provide the requested service.
• Right to non-discrimination for exercising any of these rights.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

For Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Delaware, New Hampshire, New Jersey, Nebraska, Minnesota, and Rhode Island

Residents of these states have the right to:

• Access the personal data we hold about you.
• Delete personal data we have collected from you.
• Correct inaccuracies in your personal data.
• Receive a portable copy of your personal data in a readily usable format.
• Opt out of targeted advertising and profiling in furtherance of decisions that produce legal or similarly significant effects.

For Maryland Residents

In addition to the access, deletion, correction, and portability rights above, Maryland residents are entitled to the following under the Maryland Online Data Privacy Act:

• We do not sell sensitive personal data.
• We limit collection of sensitive personal data to what is strictly necessary to provide the product or service you have requested.

Washington Consumer Health Data Notice

This notice is provided to comply with the Washington My Health My Data Act. It supplements the rest of this Privacy Policy for Washington residents whose consumer health data we process.

Categories of consumer health data we collect:

• Body measurements: weight, height, body measurements
• Fitness activity data: workouts, sets, reps
• Nutrition data: meal logs, calorie tracking, macros
• Mood and wellness logs
• Meal photos you take for macro estimation (sent to our AI provider for analysis; the full-resolution photo is not stored, and the small diary thumbnail is stripped when the day rolls over)
• Active energy burned and step count read from Apple Health on iOS, with your permission
• AI Coach conversations relating to health and fitness
• Recorded activity routes (walk/run GPS data) — stored on your device only, never uploaded to our servers

Sources: directly from the user via in-app input, and — on iOS, with your permission — from Apple Health.

Purposes: to provide fitness coaching, nutrition tracking, AI Coach responses, and progress visualization.

Categories of third parties with whom this data may be shared:

• Supabase — database hosting
• Anthropic — AI Coach replies and meal-photo macro estimation; Anthropic does not train on user data
• Vercel: application hosting
• Your coach, only if you connect to one and consent (see Coaching)

Rights. Washington residents may request access to, deletion of, and withdrawal of consent for processing of their consumer health data by emailing privacy@getfitpro.app.

Appeals. If we deny a request, Washington residents may appeal by emailing privacy@getfitpro.app with the subject line "Privacy Appeal — Washington".

No sale. We do not sell consumer health data. We will not sell consumer health data without separate, valid authorization.

Canada

This section applies to you if you use FitPro in Canada. Throughout it we use "personal information" in the sense Canadian privacy law uses that term. FitPro handles personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, substantially similar provincial laws, including Quebec's private-sector privacy law as amended by Law 25.

What we collect and why. We collect the personal information described in "Information We Collect" above: your account details, body and health metrics, nutrition and workout logs, wellness logs, AI Coach conversations, technical and device information, payment identifiers, and — on iOS, if you grant permission — active energy burned and step count from Apple Health. We collect it to provide the training, nutrition, and progress features you ask for, to personalize your plans and targets, to run your subscription, and to keep the app working and fix problems. We ask for your consent before any of your information is sent to our AI provider, and you can withdraw that consent at any time in Settings → Your Data.

Where your personal information is stored. FitPro stores and processes personal information in the United States, and the service providers listed in this policy are located in the United States. While your personal information is there, it is subject to United States law, and it may be accessed by U.S. courts, law enforcement, and government authorities under lawful access requests, without notice to you.

Access and correction. You may ask us for access to the personal information we hold about you, and you may ask us to correct it if it is inaccurate. You can do much of this yourself: edit your profile in the app to correct your details, and use Settings → Your Data → Download my data to get a copy of your profile, logged data and AI Coach conversations. Email us for anything the in-app tools don't cover.

Person responsible. The person in charge of the protection of personal information at FitPro App LLC can be reached at privacy@getfitpro.app.

Questions and complaints. Privacy questions, access and correction requests, and complaints go to privacy@getfitpro.app. We will respond to you directly. If you are not satisfied with our response, you may also bring a complaint to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information du Québec.

Request Timelines and Appeals

We will respond to verifiable privacy requests within 45 days. If we need additional time, we will notify you and may extend by up to an additional 45 days. If we deny a request, you may appeal by emailing privacy@getfitpro.app with the subject "Privacy Appeal" and the state in which you reside. We will respond to appeals within 60 days.

Children's Data

FitPro is intended only for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18, including children under 13 covered by the Children's Online Privacy Protection Act (COPPA). If we learn we have collected personal information from a person under 18, we will delete it. Users under 18 who have inadvertently created an account may request deletion by emailing privacy@getfitpro.app.

Changes to This Policy

FitPro may update this Privacy Policy periodically. Continued use of the app means acceptance of the updated policy. The "Effective Date" above reflects the most recent revision. If we make significant changes we will notify you in the app and may require you to accept the updated version before continuing.

Contact

FitPro is operated by FitPro App LLC, an Ohio limited liability company, 6203 Lakota Dr, Cincinnati, OH 45243.

Privacy requests, appeals, and Washington consumer health data requests: privacy@getfitpro.app

General questions: support@getfitpro.app

Last updated: October 23, 2026