Privacy Policy

This policy explains what personal data fitVT processes, why we use it, the legal bases for doing so, and the rights available to you. In case of discrepancies, the German version prevails.

1. Controller

The controller for data processing is the operator of fitVT: Nicolas Cukas, Wirbelwies 9, 8200 Schaffhausen, Switzerland. For privacy requests, contact info@fitvt.app.

2. Data we process

Account and sign-in: email address, name, authentication data, passkey/device information, consent records and contract records. If you use fitVT as a guest, we store a hash of a random installation ID instead of an email address and name (see section 8).

Profile, nutrition and training: height, weight, age, gender, activity level, goals, meals, foods, food photos, workouts, training sessions, progress, body measurements, body-fat estimates and optional GPS/cardio data.

Billing and support: subscription status, store/RevenueCat identifiers, purchase and restore status, support requests and communications.

Technical data: device and app information, IP address, logs, crash/error data, security and abuse-prevention signals.

3. Purposes and legal bases

We process data to provide the app, maintain accounts, calculate targets and nutrition values, offer workout/progress features and unlock subscriptions (Art. 6(1)(b) GDPR).

Where required, we process health, fitness, nutrition and body data based on your explicit consent (Art. 9(2)(a) GDPR together with Art. 6(1)(a) GDPR). You give explicit consent to fitVT storing your health data (e.g. weight, body fat) with the consent checkbox at the end of the app setup, the same checkbox with which you accept the Terms and this Privacy Policy. You may withdraw consent at any time with effect for the future.

Technical logs, security checks, abuse prevention, diagnostics and product improvement are based on legitimate interests (Art. 6(1)(f) GDPR), where those interests are not overridden by your rights. Statutory retention and proof obligations are based on Art. 6(1)(c) GDPR.

4. AI features and photos

When you use AI features, your inputs, food photos, chat messages and analysis context may be sent to our AI provider Google (Gemini API). Body-photo analysis for body fat/muscle development is also sent to Google (Gemini API) and is not permanently stored by fitVT unless you explicitly choose to save it.

AI results are estimates. They can be wrong, incomplete or unsuitable and do not replace medical, dietary or sports-medical advice. AI results never trigger automated decisions with legal or similarly significant effects — you review and confirm them before they are applied. Under our provider setup, API-processed content must not be used to train foundation models. You can withdraw your consent to AI processing at any time in Settings under "Privacy › fitVT AI". From then on we send nothing more for AI processing, and AI features ask for your consent again before their next use; entries you already saved stay.

5. Recipients and service providers

We use service providers that process data only under instructions or under their own legal obligations. These may include: hosting, database, storage and backups; email/SMTP; the AI provider Google (Gemini API); the App Store, Google Play and RevenueCat for subscriptions; food-data sources such as USDA FoodData Central or Open Food Facts; security, monitoring and error-analysis services; legal and tax advisors.

Product data from Open Food Facts, available under the Open Database License (ODbL).

6. International transfers

Some providers may process data outside Switzerland, the EU or the EEA, especially in the United States. Where required, we use appropriate safeguards such as adequacy decisions (e.g. the EU-US Data Privacy Framework), Standard Contractual Clauses and additional protective measures.

7. Retention

We generally store your data while your account exists and the data is needed for app features. Short-lived authentication and security data is deleted or anonymized sooner. Backups are overwritten on the regular backup cycle. Guest profiles are deleted automatically after 90 days without use (see section 8).

After account deletion, we immediately hard-delete personal data from the database; stored photo/upload files are then removed on a best-effort basis. Statutory retention, billing, security or legal-defense obligations may require longer retention of individual records.

8. Guest use

You can use fitVT without an account as a guest. We then create a guest profile without an email address or name. Besides an automatically generated internal identifier and the app language, we store a hash (SHA-256) of a random installation ID that the app keeps in your device's keychain. Everything you record as a guest is processed as it would be for an account; sections 2 to 7 apply accordingly. Friends, sharing, passkeys and the community require an account; a guest's own foods are not published to the shared food database.

We use the installation ID and your IP address to limit how many guest profiles can be created and to count AI and scan allowances per device, so that they cannot be bypassed by creating new guest profiles (Art. 6(1)(f) GDPR). These usage counters are tied to the hash of the installation ID, not to the guest profile. They therefore remain after the guest profile is deleted and are deleted automatically once they are no longer needed to calculate allowances (currently after 400 days).

Your guest profile is tied to the sign-in on this device. If you log out as a guest, we delete your guest profile immediately and for good, including all entries and photos. If you lose the device without a backup, you can no longer access it. You can link an email address or Sign in with Apple at any time; the guest profile then becomes a regular account with the same data. If you instead sign in to an existing account and confirm the merge, we transfer your guest data into that account and delete the guest profile. Where entries overlap, they are combined or the existing account's entry prevails; for weight and body-fat readings on the same day, the more recent reading is kept, and the app shows you what was not taken over. Entries that are not taken over or are replaced are kept in the account's merge record so they can be restored. This record is part of your data export and is deleted with the account.

Export and deletion are also available to guests directly in the app; deletion needs no confirmation code and is permanent. Guest profiles are deleted automatically and permanently after 90 days without use, including all entries and photos; use means any use of the app that connects to our server. This also applies to a guest profile you can no longer access. Without a linked account (email or Apple), deleted guest data cannot be recovered. Once you have linked an email address or Sign in with Apple, your profile is a regular account and is not affected by this deletion.

9. Required and optional data

An account requires an email address or Sign in with Apple, plus the data needed for sign-in. As a guest, you can use fitVT without an email address (see section 8). Many fitness, nutrition, photo, AI and GPS features are optional; if you do not use them or do not grant consent, those features will not be available or may be limited.

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future. Account/data deletion is available directly in the app; data export requests can be sent to info@fitvt.app.

Your data export contains all personal data we hold about you, including your own likes and comments. To protect other users' rights, we do not disclose which users have blocked you, and where another user has blocked you we replace their identity and content in your export with a neutral placeholder (Art. 15(4) and Art. 20(4) GDPR; Art. 26 Swiss FADP).

You also have the right to lodge a complaint with a data protection supervisory authority, especially in the place where you live, work or where the alleged infringement occurred.

11. Security and minors

We use technical and organizational measures to protect your data. No app can guarantee absolute security.

fitVT is not directed to children under 16. If you are younger, you may not use fitVT.

12. Apple Health

fitVT connects to Apple Health only if you turn it on in fitVT's settings under "Apple Health" and allow it in the iOS permission sheet. You can change each permission at any time in the iOS Settings app (Health › Data Access & Devices › fitVT) and switch each data type off in fitVT's settings.

We write to Apple Health: workouts with their active energy, water, dietary energy, protein, carbohydrates and fat, body weight and body-fat percentage. Body-fat estimates from the AI photo analysis are never written to Apple Health.

We read from Apple Health: steps and sleep, shown in Progress on your device; heart rate during a workout you record in fitVT; only if you switch them on individually, active energy, resting heart rate, heart rate variability (HRV) and workouts from other apps; and weight, nutrition and body fat when you start an import from Apple Health.

Apple Health data stays on your device unless you choose otherwise. Only if you turn on "Share with the coach" (off by default) do we send the selected daily values to our server so the coach knows your activity; each value has its own switch. An import you start transfers the imported weight, nutrition and body-fat entries. Heart rate recorded during a fitVT workout is saved with that workout. If you switch a value off under "Share with the coach", we delete the values stored for it on our server.

The AI coach receives Apple Health data only if you have also agreed to AI processing (see section 4). We never use Apple Health data for advertising or marketing, never sell it and never pass it to advertisers or data brokers. We process it only to provide the app's health and fitness features.

13. Community and social features

Foods shared with the community: when you create your own food or recipe, the "Share with the community" switch is on by default. While it is on, we add the name, brand and nutrition values to the shared food database, where other users can find and use them. Your name is never shown with them. You can switch sharing off for each food and each recipe before saving it or at any time later. Foods that fitVT creates for you automatically from a photo scan or from a meal shared with you stay private. Foods created by guests are not published.

Social profile: with an account, other signed-in users can see your username, display name, profile picture and the number of your workouts. Your workouts are private by default; only when you choose "Followers" for an activity do your followers see it in their feed and can like and comment on it. Your comments and likes are visible to everyone who can see that activity. You can report content and block users; the Terms explain how we handle reports.