Privacy Policy

FitBook (operated by FitBook; hereinafter “FitBook”, “we”) is the controller of the personal data we collect through the application and the website.

For any privacy matter you can write to us at soporte@fitbook.app.

We collect only the data needed for the app to work and to give you a better experience:

• Account data: your name, email address, password (stored encrypted, never in plain text) and your date of birth, which we ask for at signup to check that you meet the minimum age of 16.
• Profile and goals: the details you enter voluntarily to calculate calories and macros — sex, age, weight, height, activity level and goal.
• Training data: your routines, exercises, sets (weight, reps, time, distance, RPE), favorites, custom exercises, records, notes and session dates.
• Nutrition data: the meals you log (name, category, calories and macros), your calorie and macro goals, and your saved food library.
• Food photos (optional): if you use photo analysis, the image is sent to our AI provider solely to estimate the food and its macros. The photo is not published and is not used to identify you.
• Conversations with the AI coach (Wallace): the messages you write to it, in order to generate a response for you.
• Fit Wall content (if you post): your public name and @nickname, your bio, and the posts, comments, reactions and reports you make.
• Coach application (if you send one): your public name, your specialties, your format and, if you write them, your city, a link to your Instagram or website, your certification and an introduction. Only the FitBook team sees it, to decide whether to approve your coach account; if it is rejected, we keep the reason so you can read it.
• Messages: the text messages you exchange with your coach or with the FitBook team inside the app, with their date and how far each person has read. Only the people in that conversation see them; the FitBook team does not read conversations between a coach and their client.
• Health form (optional, only if you fill it in): your answers to the PAR-Q questionnaire, your injuries, medical conditions, medication, surgery, food allergies or intolerances and whether you are pregnant or postpartum. This is sensitive data and its legal basis is your explicit consent: without it nothing is stored, and we keep the date and version of the text you accepted. Only your coach sees it, and only if you give them the “Health form” permission; the FitBook team does not see it. You can delete it at any time from Profile → Health form, which withdraws your consent and erases it entirely.
• Invitations: if you share your invite link, we store the code, who created it and which accounts joined with it. This is used to grant access during the beta and to cap how many times each link can be used. We do not store who you sent it to, or through which app.
• Technical data: session identifiers, sign-up and last-login dates, and basic browser/device information needed to operate and secure the service.

We do not ask for card details or identity documents. We do not collect precise location.

We use your data exclusively to:

• Provide the service: store and show you your progress, routines, records and statistics.
• Personalize your recommendations and the AI coach’s responses.
• Calculate metrics such as calories, macros, 1RM and medals.
• Maintain, secure, back up and improve the application and its database.
• Send you essential service communications (security, important changes or support you request).

Your data is used only to give you a better service and to maintain the database. We do not sell, rent or disclose your personal data, and we do not share it with third parties for advertising or marketing purposes.

• Performance of the contract: processing your data is necessary to provide the service you requested when creating your account.
• Your consent: for the profile, health and physical-activity data you enter voluntarily. You may withdraw it at any time (for example, by deleting that data or your account).
• Legitimate interest: to maintain security, prevent abuse and improve the service, always respecting your rights.

Physical-activity data may be considered sensitive information in some jurisdictions. You provide it voluntarily and it is processed only for the purposes described here.

When you chat with Wallace, your message is sent to our AI providers to generate the response. These providers process the message solely to produce the output and are governed by their own privacy policies.

We do not use those conversations for advertising purposes. We recommend not sharing sensitive or directly identifying information in the chat (documents, passwords, detailed medical data). The coach’s responses are guidance only and do not constitute medical advice.

We do not sell your data or hand it over to advertisers. It is processed, on our behalf and under contract, only by infrastructure providers strictly necessary to operate the app:

• Supabase — authentication, database and storage.
• Vercel — hosting and delivery of the application.
• Google (Gemini) and Groq — processing of AI coach messages and food photo analysis.

Data you share yourself: beyond the processors above, there are two cases where other people see your data because you decide so:

• Fit Wall: anything you post with “Public” visibility is visible to other FitBook users alongside your name and @nickname. Anything marked “Only me” is shown to nobody else. You can delete your posts at any time.
• Your coach: a trainer can invite you by your username or email; until you accept they see nothing about you, and if you decline the invitation is deleted. If you accept a trainer’s invitation, they will be able to see the data you authorize when linking (for example your workouts, your nutrition, your weight or your health form), and generate a PDF report of a period from that same data —and only that data— to review it with you. You can review those permissions and end the link whenever you want, and their access stops immediately.

We would only disclose data if legally required to (for example, a valid court order) or to protect rights, safety or prevent fraud.

Some of our providers operate servers outside your country (for example, in the United States). Where this happens, the transfer takes place with the contractual and security safeguards offered by those providers.

We keep your data for as long as your account remains active. If you delete your account, we erase the personal data associated with it, except what we must retain to meet a legal obligation or to resolve disputes. Some backups may persist for a limited period before being fully deleted.

You can delete your account and your data yourself, from the app: Settings → Danger zone → “Delete my account”. Deletion is immediate and irreversible and removes your workouts, achievements, routines, photos, Wall posts and comments, your link with your coach or students, your Messages conversations, your health form, and your meals and chats with Wallace. We keep only the feedback you sent us, anonymized; if purchases ever exist, their receipts would be kept for legal reasons, unlinked from your identity. Backups are purged within a maximum of 30 days.

If you can’t sign in to the app, you can request it by email at soporte@fitbook.app with the subject “Delete my account” from your registered email (we reply within 72 hours). Full details are on this page, also published for anyone without the app installed.

We apply reasonable security measures: encryption in transit (HTTPS), password storage using hashing functions, and restricted access to information. No system is 100% infallible, but we work to protect your information and will notify you of any incident that significantly affects you, as required by law.

You may exercise at any time your rights of:

• Access — know what data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — ask us to delete your data (the “right to be forgotten”).
• Portability — receive a copy of your data.
• Objection and restriction — object to certain processing or restrict it.
• Withdraw your consent where consent is the basis for processing.

You can edit your profile or delete your account from within the app, or write to us at soporte@fitbook.app. You also have the right to lodge a complaint with the data protection authority in your country.

FitBook is not directed at anyone under 16 and we do not knowingly collect their data. If you believe a minor has provided us with data without authorization, write to us at soporte@fitbook.app and we will delete it.

We use browser local storage and strictly necessary cookies to keep you signed in and remember your preferences (for example, your active workout session). We do not use advertising cookies or third-party trackers for marketing purposes.

We may update this policy to reflect changes in the service or in the applicable regulations. If a change is significant, we will notify you within the app or by email. The “last updated” date in the header indicates the version in force.

If you have questions about this policy or about how your data is processed, write to us at soporte@fitbook.app. See also our Terms & Conditions.