Legal

Privacy Policy

Last updated: September 7, 2026

This policy describes how FitFort (the “App,” “we,” “us”), operated by Pachar Solutions Inc, handles information when you use the FitFort mobile app and www.fitfort.io.

Contact for privacy requests: privacy@fitfort.io. Related: Terms of Use.

1. Who this applies to

FitFort is a health and fitness product for tracking workouts, nutrition, recovery, and (optionally) social posts. You can use the App as a guest (anonymous account) or sign in with email, Sign in with Apple, or Google.

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child provided data, email us and we will delete it.

2. Information we collect

Account

• User ID (including anonymous / guest IDs)
• Email, if you create an account
• Display name, avatar, and optional cover photo
• Sign-in identifiers from Apple or Google (we receive an ID token / email if you allow it)

Profile and preferences

• Onboarding choices (goals, experience, equipment, units)
• Optional body details you enter (height, weight, age, sex) used for plans, calories, and body scan scale

Fitness and nutrition you log

• Workouts, sets, rest, plans, and strength history
• Meals, macros, recipes, grocery lists, water / hydration
• Daily check-ins (mood, energy, optional notes)
• Body measurements and recovery / muscle fatigue you save
• Imported workouts (for example GPX files, which may include GPS tracks and timestamps)

Health data (optional)

If you enable Health Sync, FitFort may read and/or write Apple Health / Health Connect data you authorize, including:

• Workouts, steps, active energy
• Weight and body fat
• Dietary energy, protein, carbs, fat
• Sleep analysis and heart rate (used in analysis, not sold)

Health access is off until you grant it in the system Health sheet. You can revoke it in iOS Settings → Health → FitFort (or the equivalent on Android).

Photos and camera

• Stored on our servers when you save them: food photos, progress / social photos, profile avatar/cover, and optional morning check-in selfies.
• Sent to AI only, not stored by us: body-scan photos and some one-off food / check-in analysis images. Those images go through our backend to OpenAI for a response, then we keep the numeric or text result (measurements, macros), not the original photo.
• Barcode scanning uses the camera on-device; the barcode number is looked up at Open Food Facts.

Social and coaching

• Posts, captions, comments, likes, follows, challenges, and visibility (public / followers / only you)
• Coach applications and coaching messages if you use those features
• Website coach-lead form: name, email, optional phone, specialty, and message

Purchases

• In-app subscriptions via Apple (RevenueCat). Apple processes payment. We store entitlement status (for example Premium on/off, source, expiry) tied to your user ID.
• Website Premium via Stripe: email and Stripe customer / subscription IDs.

Device and notifications

• Push token (Expo) if you allow notifications — used for check-in reminders, social, coaching, and rest timers
• Local caches on your device (for example 7-day workout offline cache) so the App works without a network

Website

Waitlist emails and coach-lead submissions are stored so we can contact you about launch or coach access. We do not run advertising pixels on the marketing site as part of the App’s core product.

3. How we use information

• Provide the App: logging, plans, history, recovery, social, coaching
• Generate AI suggestions (workouts, nutrition, analysis, recipes, moderation of posts)
• Sync with Apple Health / Health Connect when you opt in
• Process subscriptions and restore purchases
• Send notifications you enable
• Moderate public content and keep the community safe
• Debug, prevent abuse, and comply with law

We do not sell your personal information.

4. AI processing

Premium and some optional features send prompts (and sometimes photos) to OpenAI through our own server so the App does not ship an API key. That can include workout history summaries, nutrition logs, meal photos, body-scan photos, and post text/images for moderation. Do not put information in photos or captions that you are not willing to process this way.

5. Who we share with

We share data with processors only as needed to run FitFort:

• Supabase — authentication, database, and file storage
• OpenAI — AI features described above
• Apple / RevenueCat — App Store subscriptions
• Stripe — website subscriptions
• Open Food Facts — public product database for barcode lookup
• Expo — push delivery
• Google — if you choose Google sign-in

Public posts are visible to other FitFort users. Followers-only and private posts follow the visibility you choose. Other users you interact with (comments, coaching) can see what you share with them.

We may disclose information if required by law or to protect users and the service.

6. Health data (Apple)

Health and fitness data from HealthKit is used to show activity in FitFort and, if you enable export, to write workouts, nutrition, and measurements back to Apple Health. We do not use HealthKit data for advertising or to sell to data brokers.

7. Retention and deletion

We keep account and log data while your account exists. You can delete your account in the App (Profile → account / Premium management). Deletion removes your auth user, related database rows, and stored files in avatar, food, progress, and check-in buckets. Backups may persist for a limited time. Apple or Stripe may keep payment records as required by tax and store rules.

Guest accounts are still accounts. Deleting the App without deleting the account does not erase server data.

8. Your choices

• Decline Health, camera, photos, or notifications in system Settings
• Stay a guest or link Apple / Google / email
• Choose post visibility
• Cancel Premium in App Store settings or the Stripe customer portal
• Request access or deletion via the App or privacy@fitfort.io

Depending on where you live (for example GDPR or CCPA), you may have rights to access, correct, delete, or export personal data, and to object to certain processing. Email us to exercise those rights.

9. Security and international transfer

We use industry-standard hosting (encrypted transport, access-controlled databases). No method of transmission is 100% secure. Servers may be in the United States or other countries where our providers operate.

10. Changes

We may update this policy. The “Last updated” date will change. Material changes may be noted in the App or on this page.

11. Contact

Pachar Solutions Inc
FitFort — Privacy
privacy@fitfort.io
https://www.fitfort.io

App Store privacy labels (summary)

For Apple’s questionnaire, FitFort may collect: identifiers (user ID, email), health & fitness, photos, other user content (workouts, meals, posts), purchases, and diagnostics-style tokens (push). Linked to identity. Used for app functionality, not third-party advertising. Health data is optional and permission-gated.