Privacy Policy

Fitoor ("the app," "we," "us") is operated from Almere, the Netherlands. It is a personal fitness app that helps you turn workouts you find or perform into structured, trackable training sessions. This policy explains what data the app handles, where it goes, and why.

We designed Fitoor to require no account and to keep as much as possible on your device. This policy is written to reflect that honestly — including the parts where your data does leave your device, and who it goes to.

Summary

• Fitoor does not require an account, login, or sign-up.
• Your workout history, templates, and logged sessions are stored locally on your device and, if you turn on iCloud Backup, a copy in your own iCloud Drive.
• When you use an AI-powered feature (Import with AI, Track with AI), the content you submit passes through a lightweight relay server we operate and on to our AI processing provider to be interpreted. The relay's only role is to forward the request without exposing our provider credentials directly in the app — it is not used to store your content.
• When you import a video or social media URL, the app retrieves the publicly available content from that link, also via our relay, using a third-party content-retrieval service.
• You can also send content to Fitoor from other apps using the iOS Share Sheet — this is handled the same way as content you paste or attach directly inside Fitoor.
• We use a privacy-focused analytics service to understand anonymous, aggregate app usage (for example, how many people use a given feature) — this is never linked to you individually. See "Analytics" below.
• We do not sell your data. We do not use your data for advertising. We do not build an advertising profile of you.

Data we do not collect

Fitoor has no user accounts. We do not collect your name, email, or any account-linked identifier unless you voluntarily type a name into the Profile screen — which is stored locally on your device and is never transmitted to us. If you turn on iCloud Backup, it is included in the copy saved to your own iCloud Drive, which Apple stores and Fitoor cannot access.

We do not use analytics that build cross-app advertising profiles, and we do not integrate advertising networks. We do use a privacy-focused, anonymous analytics service to understand aggregate feature usage — see "Analytics" below for what that actually involves.

Data stored locally on your device

The following stays on your device and is not transmitted to us:

• Saved workout templates (name, exercises, sets, reps, weight, notes)
• Workout session history (what you actually logged during training)
• Fito conversation history
• Your Profile name and weight-unit preference (kg/lbs)
• The seeded exercise reference catalog

If you turn on iCloud Backup, a copy is also saved to your own iCloud Drive, which Fitoor cannot access.

If you delete the app or use the "Reset local data" option in Profile, this data is permanently removed from your device. We do not retain a copy, because we never had one. If you turned on iCloud Backup, your backup stays in your iCloud Drive until you delete it.

Our relay server

Fitoor operates a lightweight relay server (built on Cloudflare Workers) that sits between the app and our third-party AI and content-retrieval providers. Its only purpose is to hold our provider credentials server-side, rather than embedding them in the app itself where they could be extracted — this is a security measure, not a data-collection mechanism.

The relay forwards your request to the relevant provider (OpenAI or Supadata, described below) and returns the result to your device. It does not maintain a database of your workouts, images, or import content, and is not used to build a profile of you.

Data sent to third parties for AI processing and import

Certain features require sending content off your device so it can be interpreted. This only happens when you actively use one of these features — not in the background, and not continuously. As of this update, these requests are routed through Fitoor's relay server described above, rather than going directly from your device to the provider.

OpenAI

When you use Import with AI or Track with AI, the workout text, description, or image you provide is sent — via our relay — to OpenAI's API to extract and structure workout information (exercise names, sets, reps, weight, and similar). This is also used for AI exercise matching — proposing the correct canonical exercise name for what you described.

• What's sent: the text, image(s), or content you submit for import; text you type while logging a set with Track with AI.
• Why: this is the core mechanism that turns unstructured input into a structured workout.
• OpenAI processes this data under its own API data-use terms, which (at the time of writing) do not use API-submitted content to train their models by default. We encourage you to review OpenAI's API privacy policy for current details, as their terms may change independently of this policy.

Supadata (video and social media imports)

When you import a URL — from YouTube, Instagram, TikTok, X, or Facebook — Fitoor uses Supadata, accessed via our relay, to retrieve the publicly available content from that link: the video description, transcript/captions, or post caption, depending on what's needed and available.

• What's sent: the URL you provide, sent from your device to Fitoor's relay, which requests the corresponding content from Supadata on your behalf. The URL does not go directly from your device to Supadata.
• Why: to extract the workout content — spoken instructions, on-screen text, or captions — from the video or post you're importing.
• Supadata's handling of this data is subject to Supadata's own privacy policy.

Fito

Fito is an AI feature that lets you ask questions about your own training history, grounded in what you've actually logged in Fitoor.

• What's sent: your question, plus the specific data needed to answer it (for example, how many sessions you've logged, or which muscle groups are due for training) — pulled from your local history and sent via our relay to OpenAI. Only the most recent portion of a conversation (the last 24 hours) is sent as context for a new message; older messages stay stored on your device but aren't resent.
• Sent to: OpenAI, via Fitoor's relay, the same as our other AI features.
• Why: to answer your question about your own training data. Fito doesn't request or require any personal or sensitive information to do this.
• Stored locally: your Fito conversations are saved on your device so you can revisit them, the same as your workout history. They are not stored on any server we operate.

A note on what you choose to share: Fito is a free-text conversation, so you're free to type anything. If you choose to voluntarily share personal or sensitive information, health details, for example, in a message to Fito, that information is sent to OpenAI as part of your message, the same as any other text you type. We'd recommend not including anything you wouldn't want processed by a third-party AI provider; Fito doesn't need this kind of information to answer questions about your training.

iCloud Backup

If you turn on iCloud Backup in Profile, Fitoor saves a copy of your workouts, workout history, imported sources and a few preferences to your own iCloud Drive. This copy is stored in your Apple account and is not sent to or accessible by Fitoor. You can turn backup off, delete the backup, or remove the Fitoor folder in the Files app at any time. Fitoor does not back up your conversations with Fito.

Analytics

Fitoor uses TelemetryDeck, a privacy-focused analytics service, to understand how the app's features are used in aggregate — for example, how often a particular import source is used, or how often a workout session is completed. This helps us find bugs and prioritize what to build next.

• What's sent: anonymous usage events — which feature or screen was used, and non-identifying counts or categories associated with that event (for example, that an import happened and what type of source it came from). We do not send the content of your workouts, imports, or any text you've typed.
• What's not sent: your name, any account identifier (Fitoor has none), advertising identifiers, or anything that ties usage back to you as an individual. TelemetryDeck signals are sent directly from your device to TelemetryDeck — not via Fitoor's relay — and are anonymized using differential privacy techniques designed so they cannot be traced back to a specific person or device.
• TelemetryDeck's handling of this data is subject to TelemetryDeck's own privacy policy.

Importing via the Share Sheet

Fitoor can also receive content shared directly from other apps using Apple's Share Sheet — for example, sharing a screenshot from Photos, a video link from the YouTube app, or a copied workout from a notes app. This content is handled identically to content you paste or attach inside Fitoor directly, and is processed by the same providers described above, via the same relay.

Content shared this way is briefly held in an app-group storage area shared between Fitoor and its share extension — accessible only to Fitoor on your own device — until it's picked up by the main app for import. It is not transmitted anywhere as part of this handoff step; transmission to OpenAI or Supadata only happens once you proceed with the import inside the app, same as any other import.

Images and PDFs you import

If you attach a photo, screenshot, or PDF for import — whether directly in the app or via the Share Sheet — that file is sent via our relay to OpenAI to extract workout content, as described above. Our relay does not retain a copy of images or PDFs after forwarding them; we do not operate a database or file store for this content.

Children's privacy

Fitoor is not directed at children under 13 (or the relevant minimum age in your region), and we do not knowingly collect data from children. If you believe a child has used the app in a way that involves data being sent to a third-party provider listed above, contact us at hello@fitoor.fit and we'll assist with next steps.

Data retention

Fitoor's relay server does not store copies of your workout data, images, or import content — it forwards requests and returns results without persisting them. We do not operate a database of user content. Retention of the data sent to OpenAI and Supadata is governed by their respective policies, linked above. Anonymous analytics events sent to TelemetryDeck are retained according to TelemetryDeck's own retention policy, and are not linked to an individual in the first place.

Your rights under the GDPR (EU/EEA users)

Fitoor is operated from Almere, the Netherlands, and we comply with the EU General Data Protection Regulation (GDPR) for users in the European Union and European Economic Area.

Legal basis for processing. Because Fitoor has no accounts, almost everything you do stays on your device. When you actively trigger Import with AI, Track with AI, Fito, or a URL/social import, we rely on your consent (given by the act of using the feature) as the legal basis for the resulting transfer — via our relay — to OpenAI and Supadata. Our relay briefly handles your request in transit as part of providing this feature, but does not store it. You can withdraw this consent at any time simply by not using those features — core manual tracking works without it. For anonymous analytics (TelemetryDeck), we rely on legitimate interest in understanding aggregate app usage, since this data is anonymized and not linked to you individually.

Your rights. Subject to the limitations described below, you have the right to: - Access the data concerning you - Rectify inaccurate data - Erase your data ("right to be forgotten") - Restrict or object to processing - Data portability - Lodge a complaint with your national Data Protection Authority (in the Netherlands, the Autoriteit Persoonsgegevens)

A practical note on these rights: because Fitoor stores your workout data locally on your device rather than on a server we control, you already hold direct, immediate control over access, rectification, and erasure — via the app itself and Profile → Reset local data — without needing to contact us. If you turned on iCloud Backup, use Delete iCloud backup in Profile, or remove the Fitoor folder in the Files app, to erase the backup as well. For data that briefly passes through our relay to OpenAI or Supadata during an AI/import request, those providers act as independent processors/controllers for that transient processing; you can also exercise rights directly with them, and we're happy to help route a request if you contact us at the email below.

International transfers. OpenAI and Supadata may process data outside the EU/EEA (for example, in the United States). Each of these providers maintains its own safeguards for international transfers (such as Standard Contractual Clauses); see their respective privacy policies linked above for specifics.

Your rights under the CCPA/CPRA (California users)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you the right to: - Know what personal information is collected, used, or disclosed - Delete personal information (again, largely self-service via Profile → Reset local data, since we hold no server-side copy). If you turned on iCloud Backup, use Delete iCloud backup in Profile, or remove the Fitoor folder in the Files app, to erase the backup as well. - Correct inaccurate personal information - Opt out of the sale or sharing of personal information — we do not sell or share your personal information, as defined under the CCPA, and never have - Non-discrimination for exercising any of these rights

To exercise a CCPA request, contact us at the email below. We do not currently need to verify your identity for most requests, since we hold no account-linked data server-side to look up in the first place.

Your choices

• You can use Fitoor's core tracking features (creating and logging workouts manually) without ever triggering a network request to a third party — only Import with AI, Track with AI, and related AI/import features send data off-device. If you turn on iCloud Backup, your device also saves a copy to your own iCloud Drive, which Apple stores and Fitoor itself cannot access.
• You can delete all local app data at any time via Profile → Reset local data.
• You can delete the app entirely to remove all locally stored data.

Changes to this policy

This policy was last updated to reflect the introduction of iCloud Backup, an optional copy of your data saved to your own iCloud Drive. The previous update reflected the introduction of Fito, our AI training-history feature. If this policy changes further — for example, if we add a new import source — we'll update the "Last updated" date above. Material changes will be reflected here before they take effect.

Contact

Questions about this policy or how your data is handled: hello@fitoor.fit