Legal

Privacy Policy

Last updated: November 4, 2026

FitPilot (“FitPilot,” “we,” “us,” or “our”) provides an AI-powered fitness coaching application and website (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the practices described here.

1. Information We Collect

Information you provide

Account information — name, email address, and authentication identifiers (including via Google or Apple sign-in).
Profile and body metrics — age range, gender, height, weight, fitness goals, experience level, and equipment availability you enter during onboarding.
Health and fitness activity — workouts, sets, reps, weights, run sessions, nutrition and meal logs, hydration, fasting windows, and progress entries.
Photos — meal photos you scan for nutrition analysis, and progress or workout photos you choose to add.
Voice input — audio recorded only after you tap the microphone button, used to turn your speech into text. We do not keep the recording after it is transcribed.
Communications — messages you send to our support team and prompts you send to the in-app AI coach.

We collect this information directly from you when you enter it in the app, take or choose a photo, or speak to the coach, and from Apple or Google when you sign in with them.

Information collected automatically

Usage data — features used, sessions, and interactions with the Service.
Device data — device model, operating system, app version, and crash diagnostics.

The FitPilot phone app does not collect your location. If a future feature (such as GPS run tracking on a supported device) needs it, we will ask for your permission first, and you can revoke it at any time in your device settings.

Payment information

Subscriptions are processed by the Apple App Store or Google Play. We do not collect or store your full payment card details; we receive only confirmation of subscription status from those platforms.

2. How We Use Your Information

Provide, operate, and maintain the Service.
Generate and continuously adapt your personalized training plans, nutrition targets, and coaching responses.
Track progress, streaks, and insights, and detect plateaus.
Communicate with you about updates, security notices, and support requests.
Improve and develop the Service, including debugging and aggregate analytics.
Detect, prevent, and address fraud, abuse, and security issues.
Comply with legal obligations.

3. AI Features and Data Shared with AI Providers

FitPilot’s AI features (Coach AI chat, workout and plan generation, live workout adjustments, meal photo analysis, and voice input) are powered by third-party AI services: OpenAI, L.L.C. (“OpenAI”) and Google LLC through its Gemini API (“Google Gemini”), together the “AI providers.” To answer you, FitPilot sends some of your data from our servers to an AI provider’s API. OpenAI is our primary provider; Google Gemini may be used for some features or as an alternative.

We ask before sharing

Before the first AI request, the app shows a consent screen that names the AI provider and lists what is and is not shared. Nothing is sent to an AI provider unless you tap Continue. If you tap Not now, no data is sent and the app asks again the next time you use an AI feature. All non-AI features (logging workouts, meals, fasting, and insights) work without this consent.

What is sent to AI providers

What you ask the coach (typed messages, or voice recordings for transcription).
Meal photos you choose to scan.
Your workouts, sets, and food logs relevant to the request.
Fitness basics: age, height, weight, gender, goals, experience level, and available equipment.

What is never sent to AI providers

Your name, email address, or account ID.
Your contacts, location, or payment details.

How the AI providers handle it

Requests are sent from our servers and are not linked to your identity. Under the API data terms of OpenAI and Google’s paid Gemini API, data sent through the API is used only to provide the response, is not used to train their models, and is kept only for a limited period (generally up to 30 days) for abuse monitoring before deletion. Each AI provider processes the data as our service provider under contractual confidentiality and security obligations that provide the same or equal protection as this Policy. See OpenAI’s Privacy Policy and API data commitments, and Gemini API Terms and Google’s Privacy Policy.

AI outputs are informational fitness guidance, not medical advice. Health figures in the app come with citations to their sources, listed in the app under Profile → Health sources & methods.

4. How We Share Information

We share personal information only as described below:

Service providers — vendors who process data only on our instructions and under contracts that require the same or equal protection as this Policy:
- OpenAI — AI coaching, meal photo analysis, and speech-to-text, as described in Section 3.
- Google Gemini — AI features as described in Section 3, for some features or as an alternative to OpenAI.
- Google Firebase / Google Cloud — sign-in, database, photo storage, and hosting of our servers.
- RevenueCat — subscription status from the App Store or Google Play (no payment card details).
- Open Food Facts — when you scan a barcode, only the barcode number is sent to look up the product.
Legal and safety — when required by law, regulation, legal process, or to protect rights, safety, and property.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
With your consent — when you direct us to do so.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may delete your account at any time, after which we will delete or de-identify your personal data within a reasonable period, except where retention is required for legal, accounting, or security purposes.

6. Security

We use technical and organizational measures — including encryption in transit, access controls, and infrastructure safeguards — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the right to access, correct, export, restrict, or delete your personal information, and to withdraw consent. You can manage profile data and delete your account in the app. To exercise other rights, contact us using the details below.

EEA/UK (GDPR) — legal bases include performance of a contract, your consent (e.g., location, health data), and our legitimate interests. You may lodge a complaint with your supervisory authority.
California (CCPA/CPRA) — you have rights to know, delete, correct, and limit use of sensitive personal information. We do not sell or “share” personal information as defined by the CPRA.

8. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

9. International Data Transfers

We may process and store information in countries other than where you live. Where required, we use appropriate safeguards such as standard contractual clauses for cross-border transfers.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified in the app or by email, and the “Last updated” date above will reflect the latest version.

11. Contact Us

Questions or requests about this Policy or your data can be sent to contact@getfitpilot.ai, or by mail to Aptdata Solutions Inc, 38345 W 10 Mile Rd #360, Farmington, MI 48335, United States.