Privacy Policy

This policy explains what personal data fitVT processes, why we use it, the legal bases for doing so, and the rights available to you.

1. Controller

The controller for data processing is Nicolas Cukas, Wirbelwies 9, 8200 Schaffhausen, Switzerland. For privacy requests, contact info@fitvt.app.

2. Data we process

Account and sign-in: email address, name, authentication data, passkey/device information, consent records and contract records.

Profile, nutrition and training: height, weight, age, gender, activity level, goals, meals, foods, food photos, workouts, training sessions, progress, body measurements, body-fat estimates and optional GPS/cardio data.

Billing and support: subscription status, store/RevenueCat identifiers, purchase and restore status, support requests and communications.

Technical data: device and app information, IP address, logs, crash/error data, security and abuse-prevention signals.

3. Purposes and legal bases

We process data to provide the app, maintain accounts, calculate targets and nutrition values, offer workout/progress features and unlock subscriptions (Art. 6(1)(b) GDPR).

Where required, we process health, fitness, nutrition and body data based on your explicit consent (Art. 9(2)(a) GDPR together with Art. 6(1)(a) GDPR). You may withdraw consent at any time with effect for the future.

Technical logs, security checks, abuse prevention, diagnostics and product improvement are based on legitimate interests (Art. 6(1)(f) GDPR), where those interests are not overridden by your rights. Statutory retention and proof obligations are based on Art. 6(1)(c) GDPR.

4. AI features and photos

When you use AI features, your inputs, food photos, chat messages and analysis context may be sent to AI providers such as Google Gemini API and other configured API providers. Body-photo analysis for body fat/muscle development is currently sent only to Google Gemini and is not permanently stored by fitVT unless you explicitly choose to save it.

AI results are estimates. They can be wrong, incomplete or unsuitable and do not replace medical, dietary or sports-medical advice. Under our provider setup, API-processed content must not be used to train foundation models.

5. Recipients and service providers

We use service providers that process data only under instructions or under their own legal obligations. These may include: hosting, database, storage and backups; email/SMTP; AI providers such as Google Gemini API; the App Store, Google Play and RevenueCat for subscriptions; food-data sources such as USDA FoodData Central or Open Food Facts; security, monitoring and error-analysis services; legal and tax advisors.

6. International transfers

Some providers may process data outside Switzerland, the EU or the EEA, especially in the United States. Where required, we use appropriate safeguards such as adequacy decisions (e.g. the EU-US Data Privacy Framework), Standard Contractual Clauses and additional protective measures.

7. Retention

We generally store your data while your account exists and the data is needed for app features. Short-lived authentication and security data is deleted or anonymized sooner. Backups are overwritten on the regular backup cycle.

After account deletion, we immediately hard-delete personal data from the database; stored photo/upload files are then removed on a best-effort basis. Statutory retention, billing, security or legal-defense obligations may require longer retention of individual records.

8. Required and optional data

An account requires an email address and the data needed for sign-in. Many fitness, nutrition, photo, AI and GPS features are optional; if you do not use them or do not grant consent, those features will not be available or may be limited.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future. Account/data deletion is available directly in the app; data export requests can be sent to info@fitvt.app.

You also have the right to lodge a complaint with a data protection supervisory authority, especially in the place where you live, work or where the alleged infringement occurred.

10. Security and minors

We use technical and organizational measures to protect your data. No app can guarantee absolute security.

fitVT is not directed to children under 16. If you are younger, you may not use fitVT.