Privacy Policy

1. Data We Collect

We collect the following categories of data to provide our nutrition and wellness tracking services:

Account Information

• Email address, username, and password (securely hashed)
• First name, last name, and date of birth (optional)

Sign in with Google

If you choose to sign in with Google, we receive your name and email address from your Google account. We use this information solely to create and sign you into your fitsate account. We never receive your Google password, and we do not access your contacts, calendar, files, or any other Google data. Information received from Google is never shared with third parties, never sold, and never used for advertising. Google's handling of the sign-in itself is governed by Google's own Privacy Policy.

Health & Body Data

• Height, weight, and target weight
• Body measurements: waist, chest, hip, arm, thigh circumference
• Body composition: body fat percentage, muscle mass, visceral fat
• Calculated metrics: BMI, BMR, RMR
• Gender, activity level, and wellness goals

Nutrition Data

• Meal entries: foods consumed, portion sizes, timestamps
• Drink and water intake entries
• Nutrition goals and macro targets
• Meal plans and scheduled meals
• Dietary preferences and food allergies

User-Created Content

• Recipes, snacks, and drinks you create
• Grocery lists and shopping items
• Personal notes and posts
• File attachments and images

Activity & Wellness

• Intermittent fasting schedules and logs
• Exercise logs and workout data
• Daily check-ins and achievements
• Task items and time tracking

Technical Data

• IP address (for security and fraud prevention)
• Activity logs (page visits, actions taken)
• Browser type and device information

2. AI Features — Local Processing

• Voice Transcription: Whisper speech-to-text runs entirely on our servers. Your voice recordings are transcribed locally and stored only in your account.
• AI Coaching: Our AI assistant uses Ollama, a locally-hosted large language model. Your conversations are processed on our infrastructure, not sent to external services.
• Meal Recommendations: Recipe suggestions and nutrition analysis are generated locally using your data.

Your AI conversation history is stored in your account and can be deleted at any time.

3. Cookies

Strictly necessary

These are always on. Without them the service cannot work, so they do not require your consent:

• Authentication: To keep you logged in securely.
• Anti-forgery: To protect against cross-site request forgery attacks.
• Language preference: To remember your chosen language.
• Theme preference: To remember your light/dark mode choice.
• Cookie consent: To remember the choice you made below.

Analytics (optional)

Only set if you choose "Accept all". You can refuse them and use the whole service normally:

• Visitor identifier: A single random first-party cookie so we can tell a returning visitor from a new one, and understand which parts of the site actually help people get started. It contains no personal information and is not readable by any script.

What we measure with it: which pages you visited, whether you opened the interactive demo and how far you got, and whether you went on to create an account. This is recorded in our own database on our own servers.

We do not use:

• Advertising cookies
• Third-party analytics services — nothing about your visit is sent to Google, Meta or anyone else
• Social media tracking pixels
• Cross-site tracking of any kind

How long we keep it

Detailed visit records are deleted automatically after the retention period; only anonymous daily totals are kept beyond that. Your activity records are included in the data export you can download from your account, and are deleted with your account.

4. How We Use Your Data

• To provide nutrition tracking, meal planning, and wellness features
• To generate personalized meal recommendations (locally)
• To calculate nutritional information and progress metrics
• To authenticate you and secure your account
• To send transactional emails (password resets, account verification)
• To improve service quality and fix issues
• To prevent fraud and unauthorized access

5. Data Sharing

• We do NOT sell or rent your personal data to anyone.
• We do NOT share your data with advertisers.
• We do NOT use third-party analytics services.
• All infrastructure is self-hosted — your data stays on our servers.

The only exceptions:

• If required by law (court order, legal process)
• Content you explicitly choose to share publicly (shared recipes)

6. Your Rights (GDPR)

You have the following rights regarding your personal data:

• Right to Access: You can request a copy of all data we hold about you.
• Right to Rectification: You can update or correct your personal information at any time through your account settings.
• Right to Deletion: You can delete your account and all associated data.
• Right to Portability: You can export your data in a machine-readable format (JSON).
• Right to Object: You can opt out of non-essential data processing.
• Right to Restrict Processing: You can request we limit how we use your data.

To exercise these rights, contact us at: privacy@fitsate.com

7. Data Retention

• Active accounts: Your data is retained as long as your account is active.
• Deleted accounts: When you delete your account, there is a 30-day grace period to recover it. After 30 days, all data is permanently deleted.
• Activity logs: Automatically deleted after 90 days.
• Backups: Encrypted backups are retained for disaster recovery and automatically expire.

8. Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed using secure, one-way algorithms
• All connections are encrypted with HTTPS/TLS
• Database connections are encrypted
• Regular security updates and patches
• Rate limiting to prevent brute-force attacks
• Account lockout after failed login attempts

9. Children's Privacy

fitsate is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the service. The 'Last updated' date at the top indicates when this policy was last revised.

11. Contact

If you have questions about this Privacy Policy or your personal data, please contact us:

• Email: privacy@fitsate.com
• Data Protection Requests: privacy@fitsate.com