Privacy Policy

This Privacy Policy describes how FitnessTracker ("the App"), developed by Nathan Davie, collects, uses, and protects your personal information. By using the App you agree to the practices described below.

1. Information We Collect

When you create an account and use the App, we collect:

• Account information — your email address and encrypted password, used to authenticate your account.
• Health & fitness data — weight, body measurements, sleep, energy levels, mood, steps, and other metrics you choose to log.
• Workout data — exercises, sets, reps, durations, personal records, and training programs you create or log.
• Nutrition data — meals, pantry items, and macro information you enter voluntarily.
• Progress photos — images you upload to track visual progress. These are stored securely and are only visible to you.
• Device token — a push notification token generated by your device, used only to deliver reminders you have enabled.
• Usage data — basic interaction logs used to diagnose errors and improve the App.

2. How We Use Your Information

Your information is used exclusively to:

• Provide and personalise the App's features (dashboard, coaching insights, trends, and reminders).
• Send push notifications for reminders you have explicitly enabled.
• Sync your data securely across your devices.
• Diagnose technical issues and improve App performance.

We do not use your data for advertising, profiling, or any purpose beyond operating the App.

3. Data Sharing & Third Parties

We use the following trusted third-party services to operate the App. Each processes your data only as required to provide their service:

• Supabase — database, file storage, and authentication. Data is stored on servers in the United States. Supabase Privacy Policy.
• Firebase Cloud Messaging (Google) — delivery of push notifications to Android devices. Only your device token is shared. Firebase Privacy Policy.
• Vercel — hosting and delivery of the App. Vercel Privacy Policy.
• Strava (optional) — if you connect your Strava account, activity data is synced from Strava to the App. You can disconnect at any time in Settings. Strava Privacy Policy.
• Anthropic Claude API — the AI coaching feature sends anonymised excerpts of your recent fitness data (no email or identifying details) to generate personalised suggestions.

We do not sell, rent, or share your personal data with any other third parties.

4. Data Retention

Your data is retained for as long as your account is active. If you wish to delete your account and all associated data, please contact us at nathandavie@gmail.com and we will process your request within 30 days.

5. Data Security

All data is transmitted over HTTPS and stored with encryption at rest. Access to the database is restricted by row-level security policies — your data is only accessible by your authenticated account. Progress photos are stored in a private, access-controlled bucket.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and all associated data.
• Withdraw consent for push notifications at any time via your device settings or the App's Settings page.
• Disconnect Strava at any time in App Settings.

To exercise any of these rights, contact us at nathandavie@gmail.com.

7. Children's Privacy

The App is intended for users aged 18 and over. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.

9. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact:

• Developer: Nathan Davie
• Email: nathandavie@gmail.com
• Website: www.nathandavie.com