Legal

Privacy Policy

Last updated: May 17, 2026

FitPilot (“FitPilot,” “we,” “us,” or “our”) provides an AI-powered fitness coaching application and website (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the practices described here.

1. Information We Collect

Information you provide

Account information — name, email address, and authentication identifiers (including via Google or Apple sign-in).
Profile and body metrics — age range, gender, height, weight, fitness goals, experience level, and equipment availability you enter during onboarding.
Health and fitness activity — workouts, sets, reps, weights, run sessions, nutrition and meal logs, hydration, fasting windows, and progress entries.
Communications — messages you send to our support team and prompts you send to the in-app AI coach.

Information collected automatically

Usage data — features used, sessions, and interactions with the Service.
Device data — device model, operating system, app version, and crash diagnostics.
Approximate or precise location — only for GPS run tracking, and only with your device-level permission. You can revoke this at any time in your device settings.

Payment information

Subscriptions are processed by the Apple App Store or Google Play. We do not collect or store your full payment card details; we receive only confirmation of subscription status from those platforms.

2. How We Use Your Information

Provide, operate, and maintain the Service.
Generate and continuously adapt your personalized training plans, nutrition targets, and coaching responses.
Track progress, streaks, and insights, and detect plateaus.
Communicate with you about updates, security notices, and support requests.
Improve and develop the Service, including debugging and aggregate analytics.
Detect, prevent, and address fraud, abuse, and security issues.
Comply with legal obligations.

3. AI Processing and Personalization

A core function of FitPilot is AI-driven coaching. Your training history, nutrition logs, recovery signals, and stated goals are processed — including by third-party AI infrastructure providers acting on our behalf under confidentiality obligations — to generate workouts, adjust sessions, and answer your questions. Outputs are informational fitness guidance and are not medical advice. We do not use your identifiable personal data to train third-party foundation models.

4. How We Share Information

We share personal information only as described below:

Service providers — cloud hosting, database, analytics, and AI processing vendors who process data on our instructions.
Legal and safety — when required by law, regulation, legal process, or to protect rights, safety, and property.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
With your consent — when you direct us to do so.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may delete your account at any time, after which we will delete or de-identify your personal data within a reasonable period, except where retention is required for legal, accounting, or security purposes.

6. Security

We use technical and organizational measures — including encryption in transit, access controls, and infrastructure safeguards — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the right to access, correct, export, restrict, or delete your personal information, and to withdraw consent. You can manage profile data and delete your account in the app. To exercise other rights, contact us using the details below.

EEA/UK (GDPR) — legal bases include performance of a contract, your consent (e.g., location, health data), and our legitimate interests. You may lodge a complaint with your supervisory authority.
California (CCPA/CPRA) — you have rights to know, delete, correct, and limit use of sensitive personal information. We do not sell or “share” personal information as defined by the CPRA.

8. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

9. International Data Transfers

We may process and store information in countries other than where you live. Where required, we use appropriate safeguards such as standard contractual clauses for cross-border transfers.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified in the app or by email, and the “Last updated” date above will reflect the latest version.

11. Contact Us

Questions or requests about this Policy or your data can be sent to privacy@fitpilot.app, or by mail to [Company legal name and address].