Privacy Policy

Effective Date: April 23, 2026  ·  Last Updated: April 23, 2026

1. Information We Collect

1.1 Information You Provide

• Account information: First name, last name, email address, and password (stored as a secure hash).
• Profile information: Profile photo, bio/description, height, and weight.
• Fitness activities: Route names, descriptions, activity type (e.g., running, cycling), and notes.
• Social content: Posts, comments, replies, and likes you create within the App.
• GPX files: Route files you import or export.

1.2 Information Collected Automatically

• Location data: GPS coordinates (latitude, longitude, and timestamps) collected during active workout recording sessions. Background location is collected only while a route recording is in progress — a foreground notification is always displayed while this occurs.
• Device information: Device type, OS version, and app version, used for diagnostics and compatibility.
• Usage data: Features you use and interactions within the App, collected for analytics and improvement.

1.3 Information from Third Parties

• Google Sign-In: If you authenticate with Google, we receive your name and email address.
• Mapbox & OpenStreetMap: We send GPS coordinates to render maps and calculate route distances. These services may log requests per their own privacy policies.

2. How We Use Your Information

3. Location Data

Location is core to FitUp's tracking functionality:

• Foreground location: Collected continuously while a route recording session is active and the app is in the foreground.
• Background location: Collected while a route recording session is active and the app is in the background. A persistent notification ("Running in Background") is shown on your device whenever this occurs.
• Update frequency: Location is sampled approximately every 100 meters of movement.
• Storage: Coordinates are stored locally on your device during a session, then uploaded to our secure servers when you save the activity.

You can revoke location permissions at any time in your device settings. Without location access, route tracking will not be available.

4. How We Store Your Data

• Remote storage: Your account, profile, activity, and social data are stored on Supabase servers with encryption at rest and in transit (TLS).
• Local storage: During an active workout, GPS coordinates are cached locally using an encrypted local database to prevent data loss if connectivity drops.
• Media files: Images and videos you upload are stored in Supabase Storage.
• Authentication tokens: Session tokens (JWT) are stored in your device's secure storage (Keychain on iOS, Keystore on Android).

5. Data Sharing

5.1 With Other Users

• Your profile (name, photo, bio, stats) is visible to other FitUp users.
• Posts and activities you share are visible to your followers and, depending on settings, other users.
• Your follower/following lists are visible on your profile.

5.2 With Service Providers

5.3 Legal Requirements

We may disclose your information if required by law, regulation, court order, or governmental authority.

5.4 Business Transfers

If FitUp is acquired or merges with another entity, your data may be transferred as part of that transaction.

6. Deep Links

FitUp supports deep links (fit:// scheme and https://fitappsolution.com URLs) for navigating directly to posts and user profiles. No personal data is transmitted via deep links beyond the identifiers embedded in the link (e.g., a post ID or profile ID).

7. Data Retention

• Active accounts: We retain your data for as long as your account is active.
• Deleted accounts: Upon deletion, your personal profile data is removed within 30 days. Aggregate or anonymized data may be retained for analytics.
• Shared content: Posts and activities may be deleted or anonymized when your account is deleted. Interactions tied to other users' content may be anonymized rather than deleted.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and personal data.
• Portability: Request your activity data in a portable format (GPX export is available in the App).
• Objection / Restriction: Object to or request restriction of certain processing.

To exercise any of these rights, contact us at support@fitappsolution.com.

9. Children's Privacy

FitUp is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has created an account, we will delete their information promptly.

10. Security

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted using TLS/HTTPS.
• Data at rest is encrypted by our storage providers.
• Authentication tokens are stored in device-level secure storage.
• Passwords are never stored in plain text.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

11. International Data Transfers

Your data may be stored and processed in countries outside your own. By using FitUp, you consent to the transfer of your data to these locations. We ensure appropriate safeguards are in place, such as relying on providers with standard contractual clauses or equivalent protections.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by updating the "Last Updated" date at the top of this page. Your continued use of the App after changes constitutes acceptance of the updated Policy.

13. Contact Us