Privacy Policy

Last updated: August 11, 2026

This privacy policy describes how Fitlas ("we", "our", "the app") collects, uses, and protects your information when you use our mobile application.

Information We Collect

• Account information: Email address, display name, and username when you create an account.
• Workout data: Exercises, sets, reps, weights, and workout duration you log.
• Nutrition data: Meals, food items, and macro totals you log.
• Social data: Friend connections, feed posts, likes, and comments.
• Device information: Push notification tokens for delivering notifications you opt into.
• Subscription information: If you subscribe to Fitlas Pro, we receive your subscription status, product, and expiry date from our subscription provider (RevenueCat) and store them with your account. Payment is processed entirely by Apple — we never see or store your payment card details.

Subscriptions & Payments

Fitlas Pro purchases are made through Apple's App Store. Apple processes the payment as merchant of record. We use RevenueCat to manage subscription entitlements: it receives your app account ID (a random identifier tied to your Fitlas account), purchase history for this app, and basic device metadata in order to validate purchases and keep your Pro access in sync across devices. RevenueCat acts as our data processor and does not use this data for its own purposes (RevenueCat privacy policy).

Website Waitlist (closed)

Before Fitlas launched, our website offered a waitlist that collected your email address only, used solely to notify you about early access (TestFlight) and the app's launch, based on your consent. The waitlist is now closed, those emails were never shared with anyone or used for any other marketing, and the list is being deleted now that launch notifications are complete. If you were on it and want confirmation of removal, email us at the contact address below.

Contributing Products to Open Food Facts

Fitlas uses the open Open Food Facts database for food search and barcode scanning. Their data is made available under the Open Database License (ODbL). If you scan or enter a barcode that isn't in that database yet, we offer you the option to add it — this is always opt-in and never happens automatically.

If you choose to share, the product information is sent: barcode, product name, brand, nutrition values per 100g and — if you fill them in — the optional sugar, saturated fat, salt, fibre and category fields. Your name, email and account ID are not sent, and the contribution is credited to Fitlas rather than to you.

Alongside the product we send a pseudonymous contributor code. It is a one-way cryptographic hash of your account ID, created with a secret key that only we hold, so Open Food Facts cannot reverse it or link it to you. It exists so that their moderators can act on a single contributor who submits bad data, instead of having to block every Fitlas user at once. The same account always produces the same code.

Contributed product data becomes part of a public, openly licensed database and cannot realistically be withdrawn once published, so please only share products you are happy to make public. We keep an internal record of which products were contributed so we can avoid duplicates and report totals; you can request deletion of that record at any time (see Your Rights).

Artificial Intelligence

Fitlas contains no AI features, and we do not use your personal data to train, fine-tune or evaluate AI models — our own or anyone else's. We do not share your data with AI providers. If we ever add an AI-powered feature, we will disclose it in the app before you use it and update this policy first. See our AI Transparency Statement for the full picture.

How We Use Your Information

• To provide and personalize the app experience (progress tracking, streaks, insights).
• To enable social features (feed, likes, comments) visible only to your friends.
• To send notifications you've opted into (streak reminders, social activity).
• To improve the app through aggregated, anonymized usage patterns.

Data Storage & Security

Your data is stored securely on Supabase (hosted on AWS) with row-level security policies ensuring you can only access your own data. All data is transmitted over HTTPS. We do not sell your data to third parties.

Data Sharing

• Workout and meal posts you share to the feed are visible to your friends.
• Your profile (display name, username) is visible to other users during friend search.
• We do not share your data with advertisers or third-party data brokers.

Your Rights

• Access: You can view all your data within the app.
• Deletion: You can permanently delete your account and all associated data from Settings → Danger Zone → Delete Account. Deletion is immediate and irreversible. All workout data, nutrition logs, social connections, posts, comments, and profile information are permanently erased from our servers.
• Export: You can export a copy of your data as a JSON file from Settings → Export My Data, or contact us to request it.
• Block & Report: You can block any user to prevent them from seeing your content or contacting you. You can report posts, comments, or users for violating community standards.

Analytics & Crash Reporting

We use privacy-friendly analytics (PostHog, hosted in the EU) to understand how the app is used — for example which features are opened and where people drop off during onboarding — so we can improve it. This data is tied to a random identifier, not to your name or email, and we never sell it. We also use Sentry to capture crash and error reports so we can fix problems. You can request deletion of this data at any time (see Your Rights).

Third-Party Services

• Supabase: Database and authentication (their privacy policy).
• Expo: Push notification delivery (their privacy policy).
• PostHog: Product analytics — anonymous usage and interaction data, hosted in the EU (their privacy policy).
• Sentry: Crash and error reporting to help us fix bugs (their privacy policy).
• Apple Sign In: Authentication (if used).
• RevenueCat: Subscription management and purchase validation for Fitlas Pro (their privacy policy).
• Apple App Store: Payment processing for Fitlas Pro subscriptions.
• Open Food Facts: Open food database used for food search and barcode lookup, and the destination for opt-in product contributions — product data plus a pseudonymous contributor code, never your name, email or account ID (their privacy policy).

Children's Privacy

The app is not intended for children under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted in the app and on this page with an updated date.

Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently erased within 24 hours. Aggregated, anonymized usage statistics (which cannot identify you) may be retained indefinitely for app improvement purposes.

Legal Basis for Processing (GDPR)

We process your data based on:

• Contract performance: To provide the app services you signed up for (account, tracking, social features, and managing your Fitlas Pro subscription if you have one).
• Legitimate interest: To improve the app, prevent abuse, and ensure security.
• Consent: For optional features like push notifications and social feed sharing, which you can opt out of at any time.

Contact

If you have questions about this privacy policy, contact us at: support@fitlas.app

Home · Terms of Service · AI Transparency · Download on the App Store