Privacy
Updated 8 October 2026.
In short
Fiti keeps as little as it can: what you choose to log, and what it needs to sign you in.
Fiti does not sell your personal or health data, use it for advertising, or add advertising trackers. Service providers receive data as described below.
Who operates Fiti
Fiti is operated under the name Fiti Fitness. Contact: hey@fiti.fitness. This notice covers fiti.fitness, app.fiti.fitness and the Fiti mobile apps.
What Fiti keeps
Your account: a username, the name the app calls you, and an email address or phone number if you add one. Your password is kept only as a hash that cannot be read back.
Your journal: what you log. Meals, weight, height, age and sex, targets, medicines and supplements and the doses you took, GLP-1 doses with your notes, workouts, and what was said in voice chats.
From Apple Health or Health Connect, only if you connect it: steps, active calories and weigh-ins. Everything else on the Health data screen is shown and not kept.
A short record of each device you are signed in on, and counters that limit sign-in attempts and photo readings.
Usage events and error reports: that a feature was used or an error happened, never what you entered, logged, said or photographed.
Where it is kept
Your journal is stored on this device and on the Fiti server under your account, so it follows you to another device.
The application server and its database backups are hosted in Canada. Fiti is initially offered in Canada and Brazil. Connections to the public website and app use HTTPS through Cloudflare; this does not mean that data is encrypted end to end against our service providers.
Who else receives it
Cloudflare provides HTTPS delivery, routing and security for the website and app. It processes requests passing through its network, including IP addresses and traffic information. This can involve processing outside Canada or Brazil.
OpenAI, a company in the United States, receives data only when you use photo reading or the voice assistant. Reading a meal photo sends that photo and its meal category. Talking sends your voice, conversation and information needed to answer or perform the actions you request, including weight, food, movement, medicines or workouts.
Fiti does not automatically send OpenAI your account name, username, email address or phone number. Personal details may still be included in what you say, photograph, or save as free-text journal entries used by the assistant. Voice sessions use a one-way account code for abuse prevention. OpenAI sees your network address when your device connects directly for voice.
PostHog, an analytics provider hosted in the European Union, receives usage events and error reports from the app. An event says that something happened, such as a meal, weight or workout being logged or a screen opened, never what. It carries your account code, the app version and device type, not your name, username, email, food, health values, voice, photos or notes. Error reports have messages scrubbed of such content. There is no screen recording, and your IP address is not used to locate you.
Under OpenAI’s standard API policy, submitted data is not used to train AI models unless the API customer opts in. OpenAI may keep it for up to 30 days for abuse monitoring; some safety or legal cases may be retained longer. Fiti does not store the original meal photo or voice recording. Saved voice conversations are kept as text in your journal.
Provider notices: Cloudflare Privacy and OpenAI API data controls and PostHog Privacy.
Cookies and local storage
The web app uses the fit_session sign-in cookie. It is HttpOnly, Secure on the public app and SameSite=Lax, and expires with its session after up to 90 days or is invalidated when you sign out. It is used for authentication, not advertising.
The journal, account/session record and preferences also use local storage on your device. Native builds use a bearer token for authentication. Signing out clears this app’s local journal and session record. Clearing browser storage can remove unsynced entries.
Usage analytics sets no cookie. Until you sign in it keeps a random device code in local storage, which signing out clears.
The marketing site has no account database or advertising scripts and uses its own cookie-free analytics, described in its notice. Its server can record access requests, and Cloudflare processes delivery and security traffic. The application records operational events such as account identifiers, AI model/usage counts and errors; it does not log photo contents or voice recordings.
Apple Health and Health Connect
Fiti reads your phone’s health data only after you allow it, and only the kinds you switch on. If you turn on sending, what you eat, your weight and your strength sessions are written there.
What Fiti reads there is used only to show it back to you. It is never used for advertising and never sold. A day’s steps and calories burned are part of what the voice assistant is given when you ask about that day.
You can stop at any time in Apps & devices, or in your phone’s own health settings.
Why Fiti may keep it
Fiti uses account information to sign you in and sync your journal, and health information to provide the journal, trends, estimates, reminders and optional features you request. Operational records help protect the service, investigate failures and control AI usage. Usage events and error reports show which features are used and what breaks.
The app asks for agreement before opening your journal. Optional AI and phone-health features involve additional data flows described here. You can stop those features, revoke phone permissions, sign out or delete your account.
How long data stays
Account and journal data stay while you keep your account, until you delete or change them. There is no automatic inactivity-deletion period.
The application server is backed up daily in Canada, and each backup is kept for 30 days. Deletions in the live database can remain in backups until they expire; outages or a failed backup job can delay expiry.
Sign-in sessions last up to 90 days unless revoked sooner. Operational logs and security records are kept separately from the journal; there is not yet a fixed published retention period for all of those records. Contact us about a deletion request and any necessary security or legal retention.
What you can do
Take a copy: Export on the You screen gives you your journal as a file.
Correct it: information you logged can be edited or removed.
Stop usage analytics: switch on Do Not Track or Global Privacy Control in your browser, which the app honours, or email hey@fiti.fitness and we will turn it off for your account.
Delete everything: clears the journal on this device and syncs that change to the server; your account stays.
Delete account: removes your account and ends its server sessions. A household owned only by that account and its journal are deleted. If other accounts share a household, its journal and profiles remain for those members.
Deleting an account cannot remotely erase an offline device’s cached copy, a file you exported, or records already written to Apple Health or Health Connect. Clear those copies on the device or in the receiving app. Database backups and service-provider retention have the limits below.
Children and young people
People of any age can create a Fiti account. There is no minimum signup age or age gate. The current release has no dedicated guardian-consent or child-account workflow, and its nutrition estimates and assistant instructions are designed around adults.
Email hey@fiti.fitness with questions about a child’s personal or health information, or to request review or deletion. Opening account creation to all ages does not mean that child-specific safeguards or consent mechanisms are implemented.
Contact and privacy requests
Email hey@fiti.fitness to ask about access, correction, deletion, consent, service providers or a privacy concern. We may need to verify that a request concerns your account before changing or disclosing its data.
People in Canada and Brazil can contact their relevant privacy authority about a concern, including the Office of the Privacy Commissioner of Canada or Brazil’s ANPD. Your applicable rights depend on where you live.
If this changes
If what Fiti keeps or shares changes, this page changes with it and the app asks for your agreement again.