FitLife Privacy Policy

FitLife — Privacy Policy

Last updated: September 20, 2026 Effective date: September 20, 2026

This Privacy Policy explains how the operator of the FitLife mobile application ("FitLife," "we," "us," or "our") collects, uses, discloses, and protects information about you when you use the FitLife application and related services (the "Service"). FitLife is operated as a sole proprietorship based in the State of Illinois, United States. By using the Service, you agree to this Privacy Policy and to our Terms of Service. If you do not agree, do not use the Service.

The Service is intended only for users who are at least 18 years old (see Section 9).

1. Information We Collect

We collect the following categories of information.

1.1 Information you provide directly

  • Account information. When you create an account, we collect your email address and a password (passwords are handled by our authentication provider and stored in hashed form — we do not have access to your plaintext password).
  • Profile information. A display name, profile photo or avatar, and any other details you add to your profile.
  • Fitness and activity data. Workouts you log (exercises, sets, reps, weights, duration, notes), custom routines, and outdoor cardio activities (including route and GPS/location data you record).
  • Nutrition and body data. Food and calorie/macronutrient entries, nutrition goals, body weight, body-composition entries, and related measurements you enter.
  • Social and user content. Posts, comments, "live workout" activity, friend connections, invitations, messages, reports you submit, and other content you share through the Service ("User Content").
  • AI interactions. The messages, questions, and context you submit to our AI coaching feature ("Livia"), and the health/activity summaries the app sends with them so Livia can respond.
  • Communications. Information you provide when you contact us for support or otherwise communicate with us.

1.2 Apple Health (HealthKit) data — only with your permission

If you grant permission, the Service reads certain data from Apple Health (HealthKit), which may include steps, active energy, sleep, resting heart rate, VO₂ max, and body-fat percentage. This access is read-only — we do not write data back to Apple Health. You can grant or revoke this permission at any time in your device's Settings or Health app. Data obtained through HealthKit is handled as described in Section 4.

1.3 Information collected automatically

  • Device and app data. Device model, operating-system version, app version, language and regional settings, and similar technical information.
  • Diagnostics and usage. Crash logs, error reports, and basic usage information used to keep the Service working and to improve it.
  • Approximate/technical data from your network. Such as an IP address processed by our infrastructure providers to deliver the Service.

1.4 Location data

If you use outdoor GPS cardio features, we collect precise location (GPS) data while you record an activity, so we can map your route, measure distance and pace, and generate your activity and share cards. Route and location data are stored on your device and, where you choose to share an activity, as part of that User Content. You control location permission in your device Settings.

We do not collect information from anyone we know to be under 18 (see Section 9).

2. How We Use Information

We use the information we collect to:

  • provide, operate, and maintain the Service and your account;
  • log and display your workouts, nutrition, weight, and activity, and calculate features such as the Health Index, Daily Score, calorie/TDEE estimates, and weight and body-composition analytics;
  • power the social features you choose to use (friends, feed, live workouts, invitations, and messaging);
  • provide the AI coaching feature (Livia), including generating responses based on your inputs and activity summaries;
  • send you notifications you have enabled (for example, local reminders and streak or check-in prompts);
  • personalize your experience and remember your settings and preferences;
  • maintain the security and integrity of the Service, prevent fraud and abuse, and enforce our Terms of Service (including moderating reported content);
  • diagnose and fix problems, and analyze and improve the Service; and
  • comply with legal obligations and respond to lawful requests.

We do not use Apple Health (HealthKit) data, or any other health data, to serve you advertising, and we do not sell your personal information.

3. How the AI Feature (Livia) Handles Your Data

The AI coaching feature (Livia) is powered in part by a third-party AI provider (currently Google, via its Gemini models). When you use Livia, the content of your prompts and the health/activity summary the app includes are transmitted to Google so it can generate a response. We currently use Google's free Gemini API tier. This means Google may use the content you submit to Livia — including your prompts and the activity and health information sent with them — to provide, maintain, and improve its products and services and its machine-learning models, and this content may be reviewed by human reviewers, in accordance with Google's applicable terms and privacy policy. For this reason, do not enter anything in Livia that you would not want shared with Google or used to improve its models, including sensitive personal or health details. Your use of Livia is also subject to Google's terms. AI output may be inaccurate and is not medical or professional advice, as described in our Terms of Service.

4. Apple Health (HealthKit) — Specific Commitments

Consistent with Apple's requirements, we commit that:

  • we use HealthKit data only to provide and improve health- and fitness-management features within the Service (for example, showing your steps and feeding your scores and calorie estimates);
  • we do not use HealthKit data for advertising, marketing, or other use-based data-mining purposes other than improving your health or fitness, or for health research (which we do not currently perform);
  • we do not sell HealthKit data to any third party, and we do not disclose HealthKit data to third parties except to provide you a service you requested, or as required by law with your prior permission where applicable; and
  • HealthKit data is stored on your device and is not shared with other users unless you choose to share content that reflects it.

5. How We Share Information

We share information only as described below. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

  • With other users. Content you choose to make social — your display name, profile photo, posts, live-workout activity, and activity you share with friends or the feed — is visible to other users as enabled by the features you use. Please share only what you're comfortable making visible.
  • Service providers. We use trusted third parties to run the Service, who may process information on our behalf under contract, including: Supabase (authentication, database, and backend hosting), Google (Gemini AI models for Livia), and Apple (app distribution and, if we offer purchases in the future, payment processing). These providers are permitted to use the information only to provide services to us.
  • Legal and safety. We may disclose information if we believe in good faith it is necessary to comply with a law, regulation, legal process, or governmental request; to enforce our Terms of Service; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of FitLife, our users, or others.
  • Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.
  • With your consent. We may share information for other purposes with your consent or at your direction.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, and for a reasonable period afterward to comply with our legal obligations, resolve disputes, prevent abuse, and enforce our agreements. Much of your fitness and nutrition data is also stored locally on your device. When you delete your account (see Section 7), we delete or de-identify your associated personal information held on our systems, except where we are required or permitted by law to retain it (for example, in backups for a limited period, or as needed for legal compliance).

7. Your Choices and Rights

  • Account deletion. You can delete your account at any time from within the app (Settings → account deletion). This deletes your account and associated remote data (your profile, social content, and other records tied to your account) and signs you out; it also removes locally stored app data on that device.
  • Permissions. You control Apple Health, location, notifications, and photo permissions in your device Settings, and can change them at any time. Revoking a permission may limit related features.
  • Notifications. You can turn off local notifications and reminders in the app or in device Settings.
  • Access and correction. You can view and edit much of your information directly in the app. For other requests, contact us at info@gyfrapp.com.

7.1 U.S. state privacy rights (including California)

Depending on where you live, you may have rights under applicable U.S. state privacy laws (such as the California Consumer Privacy Act, as amended by the CPRA), including the right to: know or access the personal information we have collected about you; request deletion of your personal information; request correction of inaccurate personal information; and be free from discrimination for exercising your rights. We do not sell personal information and do not share it for cross-context behavioral advertising, so there is no "Do Not Sell or Share" action needed — but you may still exercise the rights above. To make a request, email us at info@gyfrapp.com; we will verify and respond as required by applicable law. You may use an authorized agent where the law permits.

7.2 Biometric information (Illinois)

We do not collect, capture, or store biometric identifiers (such as fingerprints, faceprints, or voiceprints) as defined by the Illinois Biometric Information Privacy Act (BIPA). Body-composition figures such as body-fat percentage that you enter or that we read from Apple Health are health/fitness data, not biometric identifiers used to identify you.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect your information, including encryption in transit, access controls, and row-level security on our backend. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and device secure. If we become aware of a security breach affecting your personal information, we will notify you and the authorities as required by applicable law.

9. Children's Privacy

The Service is intended only for individuals who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you are under 18, do not use the Service or provide any information to us. If we learn that we have collected personal information from a person under 18, we will delete it and terminate the associated account. If you believe a person under 18 has provided us information, contact us at info@gyfrapp.com.

10. International Users

The Service is operated from the United States and is intended for users in the United States. If you access the Service from outside the United States, you understand that your information will be processed and stored in the United States and other locations where we or our service providers operate, which may have data-protection laws different from those in your jurisdiction. By using the Service, you consent to this transfer and processing.

11. Third-Party Services and Links

The Service integrates with and relies on third-party services (including Apple, Apple Health, Google/Gemini, and Supabase) and may contain links to third-party sites or content. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice, such as by updating the "Last updated" date above, posting the revised policy in the Service, or notifying you through the Service or by email. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your information, contact us at:

Email: info@gyfrapp.com

This Privacy Policy is incorporated into and forms part of the FitLife Terms of Service.