Privacy Policy

1. Who we are

Fit Together is operated by Zsolt Simon, an individual based in the United Kingdom, who is the controller of your personal information.

Questions, requests or complaints: support.fittogether@gmail.com.

2. What we collect and why

We only collect what you give us or what the app needs to work:

• Account details: email address, sign-in method (email, Google or Apple), and the name and email Google or Apple share when you use them.
• Profile: display name, optional profile photo, language, units and daily calorie target.
• Goals and logs: things you record yourself, such as workouts, steps, calories, food habits, water, sleep hours, body weight or body-fat measurements, habit check-ins, notes and optional photos. We store and show these so you can track your goals and share progress; we don't analyse them to infer or diagnose any health condition. Depending on what you record, some entries — for example body measurements or sleep, or what you write in notes and photos — can be health information.
• Social activity: challenges you create or join, invitations, posts, comments, replies, hearts, flairs and nudges.
• Safety: reports you send (reason, optional note and who sent it), bans and the people you block.
• Notifications: push notification tokens for your browser or iPhone and your notification preferences.
• Technical data: basic request and error logs kept by our hosting and backend providers to run and secure the service.

Legal bases (UK GDPR)

Contract: to provide your account and the features you use.

Fitness and habit logging is processed to provide the service you asked for (contract). Some entries, such as body measurements, sleep, or what you write in notes and photos, could reveal something about your health depending on what you share. Only record what you're comfortable with, and remember challenge-linked entries are visible to other people as described below. You can edit or delete any entry at any time.

Legitimate interests: to keep the service secure, handle reports and fix problems.

Legal obligation: where the law requires us to keep or share information.

3. Who can see what you share

• Private goals and their logs are visible only to you.
• Goals and logs linked to a challenge are visible to other members of that challenge. If the challenge is public, the posts created from those logs (including photos and notes) can also be seen by any signed-in Fit Together user.
• Your profile (name and photo) is visible to people you share a challenge with, and to people you invite or who invite you.
• Challenges can be private (members and invited people only) or public. A public challenge, including its members' challenge posts and comments, can be seen by any signed-in Fit Together user.
• Anyone with an invite link can see that challenge's title, description and image.
• Reports are not anonymous: the challenge owner and admins see who reported, the reason and the note.
• Challenge owners and admins are responsible for moderating posts and photos in their challenges. Removed or ban-hidden content is hidden from others, but is not necessarily deleted from storage.
• Blocking hides your posts, comments and reactions from each other.

4. Services that process information for us

We don't sell your information or use it for advertising.

• Lovable and Supabase (Lovable Cloud): host the app, database, sign-in and photo storage; they receive all app data. Our database and file storage are hosted in the European Union (AWS, Ireland region).
• Google and Apple: sign-in, if you choose them; they receive the sign-in request and share your name and email with us.
• Push services (Apple Push Notification service, and your browser maker's push service such as Apple, Google or Mozilla): receive the notification text and a device token.
• Cloudflare: delivers iPhone app content updates; it receives standard request data such as IP address.
• Unsplash: image search and display when choosing a challenge cover; it receives search terms and image requests, including your IP address.
• Google Fonts: serves the app's fonts on the web; it receives your IP address and browser details.
• Lovable (visit statistics): on the published web app, Lovable counts visits, page views, visit length, referring sites, device type and country. It does not use cookies and does not build individual visitor profiles.
• Feedli (feedback): the feedback button on the home screen loads Feedli's widget from Feedli's server. The feedback you submit — its text, plus the optional name and email you type into the widget — goes directly to Feedli, together with the address of the page you were on; Feedli's server also sees your IP address and browser details. The widget's own code stores nothing on your device and sets no cookies.
• Feedli's own privacy policy states that it hosts and stores feedback with Vercel and Supabase and uses an AI model (currently Gemini 2.5 Flash, via Lovable AI) to categorise submitted feedback, that it does not sell personal data or use it for advertising, and that it keeps data only as long as necessary without stating a fixed period. Read it at feedli.app/privacy; to ask for deletion, email privacy@feedli.app.

5. Device permissions, notifications, widgets and storage

• Camera and photos: used only when you choose to add a photo.
• Notifications: only if you allow them; you can turn them off in Settings or your device settings.
• iPhone widgets: a summary of your goals is stored on your device so widgets can show it.
• Device storage: we store your sign-in session and app preferences (such as language and views) in your browser or app storage. These are needed for the app to work. We don't use advertising or analytics cookies.

6. How long we keep information and account deletion

We keep your information while your account is open. You can delete your account in Settings.

Deleting your account removes your profile, goals, logs, posts, comments, reactions, uploaded photos and challenges that only contain your content. Challenges that contain other people's content stay, so their posts aren't lost; any cover photo of yours in them is removed.

Other people's content stays, including their replies to you. Reports, bans and similar safety records may be kept where needed to keep the community safe. Database backups are kept for about 14 days. Technical logs are kept by our providers for their own limited retention periods. An already-issued sign-in session may keep working on a device until it expires.

If you used Sign in with Apple, you can also remove the app in your Apple ID settings.

7. Your choices and rights

You can edit or delete your entries, change notification settings, block people and delete your account at any time.

Under UK data protection law you can ask to access, correct, delete, restrict or object to processing of your information, ask for a copy in a portable format, and withdraw any consent you have given. Email support.fittogether@gmail.com.

You can also complain to the UK Information Commissioner's Office (ico.org.uk).

8. International processing

Our main database and file storage are in the European Union (Ireland), which the UK recognises as providing adequate protection. Lovable publishes a data processing agreement that covers the UK GDPR; it refers to the EU Standard Contractual Clauses as amended by the UK Addendum issued by the UK Information Commissioner's Office, and Lovable publishes the list of sub-processors it uses. That agreement applies only to Lovable's Business and Enterprise plans. Fit Together runs on a Pro plan, so its use of Lovable Cloud (database, sign-in and file storage) is governed by Lovable's Terms of Service and Privacy Policy; those terms do not include a separate data processing agreement for this app. Ask us at support.fittogether@gmail.com if you want more detail.

Some other services listed above (such as sign-in, push notifications, image search, fonts and feedback) may process information in other countries, including the United States, under their own terms.

9. Minimum age

Fit Together is for people aged 18 and over. Please don't use it if you're younger.

10. Changes and contact

If we change this policy, we'll update the date above and, for important changes, let you know in the app.

Contact: support.fittogether@gmail.com.