Privacy Policy

This Privacy Policy explains how Fitsana ("we", "us", or "our") collects, uses, shares, and protects information when you use our mobile apps, website, and related services (the "Services"). Fitsana helps you train with guided workouts, wind down with sleep sounds, and track nutrition in one place.

By using the Services, you agree to this policy. If you do not agree, please do not use the Services. Questions: [email protected].

We collect information you provide, information generated by your use of the Services, and information from optional integrations.

• Account information. Email address, name, and authentication details when you sign up with email/password, Google, or Apple Sign In.
• Profile and onboarding. Goals, experience level, equipment access, training schedule preferences, focus areas, injuries you choose to share, age or birth year, height, weight, target weight, and unit preferences.
• Workout activity. Plans, completed sessions, exercise logs, duration, volume, estimated calories burned, streaks, and related progress data.
• Nutrition data. Meal logs, calories and macros, nutrition goals, meal-plan usage, and photos you upload for AI meal estimates.
• Body metrics. Weight entries and activity goals such as daily steps and active energy targets.
• Sleep usage. Tracks you play or download, listening activity needed to operate players and offline downloads, and related preferences.
• Health integrations. If you connect Apple Health (or similar platform health APIs), we may read and display data you authorize—such as steps, heart rate, workouts, active energy, and weight—to show progress in the app.
• Purchases and subscriptions. Product identifiers, subscription status, customer email associated with the purchase, and billing metadata from Polar (web) or RevenueCat / App Store / Google Play (mobile). We do not store full payment card numbers.
• Uploads and media. Files you upload (for example meal photos) stored via our cloud storage providers.
• Device and technical data. App version, device type, operating system, approximate locale/language, crash and diagnostic logs, and basic usage events needed to keep the Services reliable.
• Communications. Messages you send to support, and optional feedback or ratings you submit.
• Notifications. Device permission status and push notification tokens when you enable reminders or alerts.

• Provide, personalize, and improve workouts, sleep, and nutrition features
• Generate adaptive plans, progress insights, and AI meal estimates
• Sync data across your signed-in devices in real time
• Process subscriptions, credits, and restore purchases
• Authenticate accounts and prevent fraud or abuse
• Send transactional messages and, with permission, reminders or product updates
• Diagnose issues, analyze aggregate usage, and maintain security
• Comply with law and enforce our Terms of Service

Some information we process—such as workout history, nutrition logs, body weight, and Apple Health metrics—may be considered health-related. We use this data to operate the features you request. Fitsana is not a medical device and does not provide medical advice, diagnosis, or treatment. Always consult a qualified professional before changing diet or exercise routines.

Health integrations are optional. You can revoke Apple Health permissions in your device settings at any time. Revoking access stops future reads; previously synced data already stored in your Fitsana account remains until you delete it or delete your account.

Certain features (for example AI meal photo estimates or AI-assisted planning) send the inputs you provide—such as images or text—to AI providers so we can return results. We use those inputs to generate estimates and improve feature reliability. AI outputs can be inaccurate; treat nutrition estimates as approximate and verify when it matters.

We do not sell your personal information. We share information only as needed to run the Services:

• Infrastructure providers. Backend hosting and database services (including Convex), file storage (including Cloudflare R2), and related cloud infrastructure.
• Authentication providers. Google and Apple when you choose those sign-in methods.
• Payment processors. Polar, RevenueCat, Apple, and Google to manage subscriptions and purchases.
• AI and analytics vendors. Providers that process requests or diagnostics strictly to deliver requested features and keep the app stable.
• Legal and safety. When required by law, or to protect the rights, safety, and integrity of Fitsana, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

We retain account and activity data while your account is active and for a reasonable period afterward as needed for backups, dispute resolution, security, and legal compliance. You may request deletion of your account; we will delete or de-identify personal data associated with the account except where we must keep limited records (for example completed transactions or legal obligations).

• Access and update. Review and update profile details in the app settings.
• Permissions. Control camera, notifications, and health permissions in your device settings.
• Marketing and reminders. Opt out of non-essential notifications where offered.
• Account deletion. You can delete your account from the app where available, or by contacting [email protected].
• Region-specific rights. Depending on where you live (for example the EEA, UK, or California), you may have rights to access, correct, delete, restrict, or export personal data, or to object to certain processing. Contact us to exercise these rights.

The Services are not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

We use industry-standard safeguards such as encrypted transport (HTTPS) and access controls. No method of transmission or storage is 100% secure. Please use a strong unique password and protect access to your devices and connected accounts.

We may process information in the United States and other countries where we or our providers operate. Where required, we use appropriate transfer mechanisms and contractual protections.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Continued use of the Services after changes become effective constitutes acceptance of the updated policy.

For privacy questions or requests, email [email protected] or visit our Help Center.