← Back to FitPro

FitPro Privacy Policy

This policy explains what FitPro collects, why, who we share it with, and the choices you have. We've tried to write it in plain English. If anything is unclear, email us at the address at the bottom.

Information We Collect

FitPro collects only what it needs to run your training, nutrition, and progress features. Depending on what you use, that can include:

1. Identity & account

• Name, email address, gender, and your date of birth (collected once at signup to confirm you are 18 or older)
• Profile photo (optional). Profile photos — including a coach's photo shown to their clients — are stored at an unlisted web address viewable by anyone who has the exact link; do not use a photo you would not want visible outside the app. It is deleted with your account.

2. Body & health metrics

• Current weight, start weight, goal weight, and your full weight history
• Height and body measurements

3. Wellness tracking

• Mood logs
• Water intake (daily total, goal, and history)
• Active calories burned and step count (on iOS these can come from Apple Health — see the Apple Health section below)

4. Nutrition

• Meal logs, meal diary, and diary history
• Custom calorie targets and dietary restrictions
• Meals you've marked as made
• Grocery ZIP code and weekly food budget (used for budget meal suggestions)

5. Workout activity

• Your workout plan and workout history
• Set-by-set logs, completed days, current streak, and total workouts completed
• Recorded activities (walk, run, ride and similar): when you record an activity in the iOS app, the GPS route, distance, pace and elevation are stored on your device only and are never uploaded to our servers. To draw the map behind your route, your device loads map images from Esri ArcGIS Online (see Third-Party Sub-processors), so Esri receives your IP address and the map area of your activity — never your account details.

6. Meal photos (for macro tracking)

• Photos of meals you choose to take so the app can estimate calories and macros. The image is sent to our AI provider to analyze the food. We do not keep the full-resolution photo. We do save a small thumbnail of it (208 pixels) to that day's diary entry so you can see what you logged; the thumbnail is stripped from the entry the next time you open the app on a later day.

7. AI Coach conversations

• Your conversations with the AI Coach — including content and timestamps. These are stored for as long as your account exists (see Retention below).

8. Technical & device

• Timezone and unit preference (metric/imperial)
• Device session tokens
• Push notification tokens (to deliver reminders you opt into)
• IP address and browser or device user-agent — captured by our authentication provider, and recorded by us alongside your consent and legal-acceptance records as proof of what you agreed to and when

9. Consent records

• The date you accepted our policies, the version you accepted, a record of which consents you checked, and the date of birth you gave at signup

10. Payment

• Your payment processor customer ID and subscription status. We never see or store your full card number — our payment processor handles card details directly.

11. Analytics & error monitoring

• Product analytics — first-party only. To see which features are used and where the app fails, FitPro records a short, fixed list of named in-app events (for example "workout completed", "meal saved", "food scan failed"). Each event carries the feature it belongs to, whether it succeeded or failed (a category such as "timed out" — never the content), how long the request took, your app version and platform, and your plan type (visitor, free, trial, premium, coached, coach, or owner). Activity distance and duration are recorded only as coarse ranges (for example "3–5 km"). These events are tied to your account so we can help you when something goes wrong and understand how members on each plan use FitPro. They never include your location or routes, meal photos, food descriptions, AI Coach conversations, body measurements, or anything you type.
• Where it goes. Events are stored on our own servers (Supabase, listed under Third-Party Sub-processors). We do not use any third-party analytics, advertising, or cross-app tracking service, and we never share or sell this data. Raw events are deleted after 90 days; only counts without personal identifiers are kept beyond that. Deleting your account deletes the events tied to it immediately; anonymous events recorded before you signed up are not linked to you and expire on the same 90-day schedule.
• Crash and error reports, collected by Sentry — our only third-party monitoring service — without personal identifying information. Reports carry the app version and platform so a problem can be pinned to a specific release.

12. AI processing (third-party AI service: Anthropic PBC, USA)

FitPro's AI features are powered by Anthropic PBC, a U.S. AI provider. Nothing is sent to Anthropic until you grant permission in the in-app consent prompt shown before your first AI feature use (withdrawable anytime in Settings › Your Data). When you use an AI feature, the following is transmitted to Anthropic solely to generate your response:

• Your messages and questions — what you type to the AI Coach, and food descriptions you ask it to estimate.
• Fitness profile — your name, age, weight, height, sex, goals, activity level, and dietary preferences, used to address you and to personalize plans and macro targets.
• Recent activity — logged meals, workouts, water, and weight trends the AI needs for context.
• Grocery ZIP code and weekly food budget — only when you generate a grocery plan, so the AI can suggest local, in-budget groceries.
• Meal photos — only when you use photo macro scanning; analyzed for nutrition estimation. FitPro does not keep the full-resolution photo, only the small same-day diary thumbnail described above.

Anthropic processes this data under its commercial API terms: it does not train its models on your data, and it applies data-protection safeguards equivalent to those described in this policy. We never send your password, payment details, or account credentials to Anthropic.

Apple Health (HealthKit)

On iPhone, FitPro can read health data from Apple Health. It only does so after you grant permission in Apple's HealthKit prompt, and it reads three categories:

• Active Energy Burned — your active calories, shown in the app alongside what you've logged
• Step Count — your daily steps, shown as part of your activity
• Workouts — sessions recorded by your Apple Watch or other Health-connected apps, so activity you did outside FitPro still counts toward your daily burn

These values are saved to your FitPro account in our database so they appear in your history. We use Apple Health data only to power the fitness and nutrition features you're using. We do not use it for advertising, we do not sell it, and we do not share it with anyone beyond the infrastructure providers listed in this policy. You can turn FitPro's access off at any time in the iOS Health app's sharing settings; if you do, we stop receiving new values, and you can delete what we already hold by deleting your account. FitPro does not write any data back to Apple Health.

Coaching — Sharing With a Coach You Choose

FitPro works fully without a human coach. If you choose to connect your account to a coach using their invitation code, the following applies:

• What is shared — after you accept five separate consent checkboxes, your coach can see the information you log in FitPro: meals and food diary, workouts, weight, body measurements, water, mood, progress entries, goals, notes, the messages you send them, and your name, email, and profile basics.
• What is never shared — your payment details, subscription information, and data read from Apple Health are never shared with any coach.
• Invitation data — your coach may provide your name, email address, and training goal when creating your invitation, so FitPro holds that information before you sign up. If you never accept the invitation, it expires, and you can ask us to delete it at privacy@getfitpro.app.
• Access log — every time your coach opens your detail view, FitPro records the access in a log you can read in the app (the app shows your 500 most recent records; email privacy@getfitpro.app for the full log). Your coach cannot edit or erase it.
• Purpose limits — coaches agree to use your information only to coach you, and to stop using it when you disconnect.
• Withdrawal — disconnect from your coach at any time in the Coach tab (Privacy & sharing → Leave this coach); their access ends immediately and your data stays in your account. Your coach can also end the connection from their side — if that happens, FitPro notifies you right away, active program assignments end, and everything you logged stays in your account.

Sensitive Information

Some of what FitPro collects is treated as sensitive personal information under the California Privacy Rights Act (CPRA) and similar laws. Specifically:

• Biometric / health data — weight and body measurements
• Apple Health data — active energy burned and step count read from Apple Health on iOS, with your permission
• Wellness data — mood logs
• Approximate location — grocery ZIP code

We use this information only to provide the features you've asked for. We do not use it to infer characteristics about you, and we never sell it.

How We Use Information

We use your information to:

• provide and personalize your workouts, meal plans, and tracking
• calculate your calorie and protein targets
• show your progress over time
• let you message your coach and the AI Coach
• process your subscription
• keep the app working and fix problems
• see which features are used and where they fail, using the first-party product analytics described in section 11

Data Security

FitPro takes reasonable measures to protect your information but cannot guarantee absolute security. Traffic between your device and our servers is encrypted with HTTPS/TLS. Our infrastructure providers (Supabase and Vercel) encrypt stored data at the platform level; FitPro does not add its own application-level encryption on top of individual records. Your sign-in session token is kept in your browser's local storage on the device you signed in with, not in your device's operating-system credential store — so anyone with access to your unlocked device may be able to reach your session.

Third-Party Sub-processors

FitPro relies on these providers to function. Each only receives the data it needs to do its job:

• Supabase — authentication, database, and file storage, including our own product analytics
• Vercel — application hosting
• Stripe — payment processing (we never see your full card number)
• Apple — app distribution via the App Store, push-notification delivery on Apple devices (Apple Push Notification service, for reminders you opt into), and payment processing for subscriptions purchased inside the iOS app via In-App Purchase (we never see your payment details)
• Anthropic — AI Coach replies, plan generation and meal-photo macro estimation (your messages and any meal photos you take are sent to generate responses; Anthropic does not train on your data, and FitPro keeps only the small diary thumbnail of a meal photo, never the full-resolution image)
• Sentry — crash and error monitoring (no personal identifying information). On the web, your browser also sends network-error and security-policy reports to Sentry.
• Browser push services — if you enable notifications in a browser, your browser vendor's Web Push service receives your push endpoint and the contents of the notifications we send you, in order to deliver them.
• ExerciseDB (via RapidAPI) — exercise demonstration media, requested by our servers only; no personal information is sent.
• Pexels — food photography. The photo itself loads from Pexels in your app, so Pexels receives your IP address and browser user-agent, never your account details.
• GitHub — hosts the open-source exercise image library. Exercise images load from GitHub in your app, so GitHub receives your IP address and the exercise being viewed, never your account details.
• Esri ArcGIS Online — map images behind your recorded routes in the iOS app. Your device requests map tiles for the area of your activity, so Esri receives your IP address and that map area, never your account details.

No Sale of Personal Information

FitPro does not sell your personal information, and we do not share it for cross-context behavioral advertising.

Retention

We retain your data until you delete your account in Settings → Your Data → Delete my account. Deletion is immediate and permanent. There is no grace period, and there is no way to sign back in and cancel it — once you confirm, your profile, login, and the data associated with your account are removed and cannot be restored by us.

Some things are retained on their own schedule while your account is open:

• AI Coach conversations are kept for the life of your account. We do not expire them on a schedule; they are deleted when you delete your account.
• Meal photo thumbnails in your diary are stripped the next time you open the app on a later day.
• Product analytics events (section 11) are deleted 90 days after they are recorded; only aggregate counts without personal identifiers are kept beyond that.

What remains after deletion. Payment records held by Stripe and in our billing records are kept for up to 7 years to comply with tax law; anonymized error reports may persist in Sentry for up to 90 days; anonymous analytics events recorded before you signed up expire on the 90-day schedule.

Our infrastructure providers keep their own routine backups of the systems FitPro runs on. Those backups are managed by the providers on their own schedule; FitPro does not configure them and cannot remove individual records from them, so a copy of your data may persist in provider backups for a period after deletion before it is cycled out.

Your Rights

Wherever you live, you can:

• Access and export a copy of your data — Settings → Your Data → "Download my data". The export covers your profile and your logged data; it does not include your AI Coach conversation history. Email privacy@getfitpro.app and we'll send you anything the export leaves out.
• Delete your account and associated data — Settings → Your Data → "Delete my account" (immediate and permanent)
• Correct inaccurate information by editing your profile
• Opt out of sale — we don't sell your data, so there's nothing to opt out of, but you have the right regardless
• Withdraw consent — turn off AI processing in Settings → Your Data, or delete your account to withdraw consent entirely

For any request we can't handle through the in-app controls, contact us at the address below and we'll respond within the timeframe required by your local law.

Geographic Scope

FitPro is available in the United States and Canada. We do not knowingly offer services to or process personal information of individuals located in the European Economic Area, the United Kingdom, or other jurisdictions outside the United States and Canada. If you are located outside the United States and Canada, please do not use this service.

Wherever you use FitPro from, your personal information is stored and processed in the United States.

State Privacy Rights

If you are a resident of one of the states listed in this section, you have specific privacy rights described below. To exercise any of these rights, email privacy@getfitpro.app with the subject line "Privacy Request" and the state in which you reside. We may need to verify your identity before fulfilling a request.

For California Residents

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California residents have the following rights:

• Right to know what personal information we collect, use, disclose, and the categories of sources and recipients.
• Right to delete personal information we have collected about you, subject to certain exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising.
• Right to limit use and disclosure of sensitive personal information to purposes necessary to provide the requested service.
• Right to non-discrimination for exercising any of these rights.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

For Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Delaware, New Hampshire, New Jersey, Nebraska, Minnesota, and Rhode Island

Residents of these states have the right to:

• Access the personal data we hold about you.
• Delete personal data we have collected from you.
• Correct inaccuracies in your personal data.
• Receive a portable copy of your personal data in a readily usable format.
• Opt out of targeted advertising and profiling in furtherance of decisions that produce legal or similarly significant effects.

For Maryland Residents

In addition to the access, deletion, correction, and portability rights above, Maryland residents are entitled to the following under the Maryland Online Data Privacy Act:

• We do not sell sensitive personal data.
• We limit collection of sensitive personal data to what is strictly necessary to provide the product or service you have requested.

Washington Consumer Health Data Notice

This notice is provided to comply with the Washington My Health My Data Act. It supplements the rest of this Privacy Policy for Washington residents whose consumer health data we process.

Categories of consumer health data we collect:

• Body measurements: weight, height, body measurements
• Fitness activity data: workouts, sets, reps
• Nutrition data: meal logs, calorie tracking, macros
• Mood and wellness logs
• Meal photos you take for macro estimation (sent to our AI provider for analysis; the full-resolution photo is not stored, and the small diary thumbnail is stripped when the day rolls over)
• Active energy burned and step count read from Apple Health on iOS, with your permission
• AI Coach conversations relating to health and fitness
• Recorded activity routes (walk/run GPS data) — stored on your device only, never uploaded to our servers

Sources: directly from the user via in-app input, and — on iOS, with your permission — from Apple Health.

Purposes: to provide fitness coaching, nutrition tracking, AI Coach responses, and progress visualization.

Categories of third parties with whom this data may be shared:

• Supabase — database hosting
• Anthropic — AI Coach replies and meal-photo macro estimation; Anthropic does not train on user data

Rights. Washington residents may request access to, deletion of, and withdrawal of consent for processing of their consumer health data by emailing privacy@getfitpro.app.

Appeals. If we deny a request, Washington residents may appeal by emailing privacy@getfitpro.app with the subject line "Privacy Appeal — Washington".

No sale. We do not sell consumer health data. We will not sell consumer health data without separate, valid authorization.

Canada

This section applies to you if you use FitPro in Canada. Throughout it we use "personal information" in the sense Canadian privacy law uses that term. FitPro handles personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, substantially similar provincial laws, including Quebec's private-sector privacy law as amended by Law 25.

What we collect and why. We collect the personal information described in "Information We Collect" above: your account details, body and health metrics, nutrition and workout logs, wellness logs, AI Coach conversations, technical and device information, payment identifiers, and — on iOS, if you grant permission — active energy burned and step count from Apple Health. We collect it to provide the training, nutrition, and progress features you ask for, to personalize your plans and targets, to run your subscription, and to keep the app working and fix problems. We ask for your consent before any of your information is sent to our AI provider, and you can withdraw that consent at any time in Settings → Your Data.

Where your personal information is stored. FitPro stores and processes personal information in the United States, and the service providers listed in this policy are located in the United States. While your personal information is there, it is subject to United States law, and it may be accessed by U.S. courts, law enforcement, and government authorities under lawful access requests, without notice to you.

Access and correction. You may ask us for access to the personal information we hold about you, and you may ask us to correct it if it is inaccurate. You can do much of this yourself: edit your profile in the app to correct your details, and use Settings → Export my data to get a copy of your profile and logged data. Email us for anything the in-app tools don't cover.

Person responsible. The person in charge of the protection of personal information at FitPro App LLC can be reached at privacy@getfitpro.app.

Questions and complaints. Privacy questions, access and correction requests, and complaints go to privacy@getfitpro.app. We will respond to you directly. If you are not satisfied with our response, you may also bring a complaint to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information du Québec.

Request Timelines and Appeals

We will respond to verifiable privacy requests within 45 days. If we need additional time, we will notify you and may extend by up to an additional 45 days. If we deny a request, you may appeal by emailing privacy@getfitpro.app with the subject "Privacy Appeal" and the state in which you reside. We will respond to appeals within 60 days.

Children's Data

FitPro is intended only for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18, including children under 13 covered by the Children's Online Privacy Protection Act (COPPA). If we learn we have collected personal information from a person under 18, we will delete it. Users under 18 who have inadvertently created an account may request deletion by emailing privacy@getfitpro.app.

Changes to This Policy

FitPro may update this Privacy Policy periodically. Continued use of the app means acceptance of the updated policy. The "Effective Date" above reflects the most recent revision. If we make significant changes we will notify you in the app and may require you to accept the updated version before continuing.

Contact

FitPro is operated by FitPro App LLC, an Ohio limited liability company, 6203 Lakota Dr, Cincinnati, OH 45243.

Privacy requests, appeals, and Washington consumer health data requests: privacy@getfitpro.app

General questions: support@getfitpro.app

Last updated: September 1, 2026