Privacy Policy
FitBrain is a workout tracker with an AI coach. This policy explains what we collect, why, who processes it, and the choices you have. We have tried to keep it plain and accurate.
- Your workouts, photos, measurements and settings live on your iPhone first.
- If you sign in, a cloud backup of workouts, templates, plans and profile basics is stored with Google Firebase.
- FitBrain has two coaches. The on-device coach runs entirely on your iPhone and nothing leaves it. The cloud coach (Pro) sends your message and a summary of your training to our server and on to Google’s Gemini AI through Vertex AI, only after you agree in the app.
- Optional health context, including a GLP-1 medication (Mounjaro, Wegovy, Ozempic or Zepbound) and health conditions, is health information you choose to enter. It stays on your device and is never part of the cloud backup. It is sent to the cloud coach only if you switch on “Share medications and conditions”.
- We use PostHog for anonymous usage analytics. You can switch it off in Profile.
- You can delete your account and data from inside the app at any time.
Who we are
FitBrain (“we”, “us”) is developed and operated by Marcos Placona. For anything in this policy, contact marcos.placona@gmail.com.
What we collect
Account information
If you sign up with email, we receive your email address and a password that Firebase Authentication stores in hashed form. If you use Sign in with Apple, we receive an account identifier, your name and email address as you choose to share them (including Apple’s private relay address).
Training and body data you enter
Workouts, exercises, sets, weights, reps, notes, personal records, templates, training plans, body weight entries, body measurements, progress photos, goals, experience level and training days. This is stored on your device in the app’s database.
Health information you enter or connect
- Medications and health conditions (optional): the medication names and notes you type, health conditions, and an optional GLP-1 medication choice (Mounjaro, Wegovy, Ozempic, Zepbound or other). This is user-entered health data. It is stored on your device only, not uploaded to our cloud backup, and not sold. It is sent to the cloud coach only if you turn on “Share medications and conditions” and have given AI consent. The on-device coach can use it without it leaving your phone. You can remove it at any time in your profile.
- Apple Health (optional): with your permission, FitBrain reads body weight, steps, flights climbed and cardio workouts, and saves your finished strength workouts and body weight to Apple Health. FitBrain does not write estimated calories. Health data is read on your device and is not sent to our servers. We do not use Apple Health data for advertising or data mining, and we do not share it with third parties except as you direct. Body weight you import becomes ordinary FitBrain data and, like other weight data, may be part of what the AI Coach receives or what is backed up as your current weight.
Usage and device information
If analytics are on, PostHog receives events such as app opens, screens viewed, workouts completed (duration, volume, number of exercises), paywall interactions and AI Coach usage (type and whether it succeeded), tied to your random account ID, app version and basic device information. We do not send workout names, template names or the text of your messages to analytics.
Purchase information
Payments are handled by Apple. We receive subscription status from StoreKit on your device. To apply the right AI Coach daily limit, the app sends a signed transaction from Apple to our server, which verifies it. We do not receive your payment details.
How we use it
- To provide the app: tracking, progress, plans, reminders and the AI Coach.
- To back up your data to your account.
- To verify your subscription and enforce daily AI Coach limits.
- To understand which features are used and fix problems (analytics and diagnostics).
- We do not sell your personal data and we do not use it for advertising or tracking across other companies’ apps and websites.
The AI Coach
On-device coach
The on-device coach uses Apple’s Foundation Models on your iPhone (it requires Apple Intelligence on a supported device). Your messages and training data stay on your phone and are not sent to us or anyone else.
Cloud coach (Pro)
When you use the cloud coach, after you agree on the in-app AI consent screen, and when you send a message, the app sends to our server (a Firebase Cloud Function in the United States): your message, recent chat turns, and a summary of your training: recent workouts, personal records, body weight, goals, training plan and preferences. If you have enabled it, the names of your medications and health conditions are included. Our server passes this to Google’s Gemini models through Google Vertex AI to write a reply and returns the reply to you. Under Google’s Vertex AI terms your data is not used to train Google’s models. If Vertex AI is temporarily unavailable, our server may fall back to the Google Gemini API under Google’s terms for that API. Our server records operational metadata (such as timing and usage counts) but we do not intentionally store the content of your conversations; your chat history is kept on your device. The coach is not a medical professional and its replies are not medical advice.
Who processes your data
| Provider | Purpose | Data |
|---|---|---|
| Google Firebase (Authentication, Firestore, Cloud Functions, App Check) | Sign-in, cloud backup, AI Coach backend, deletion | Account details, backup data, AI Coach requests |
| Google Vertex AI / Gemini | Generating AI Coach replies | The AI Coach request described above |
| PostHog (US) | Product analytics (can be switched off) | Usage events keyed to a random account ID |
| Apple | Sign in with Apple, App Store payments, Apple Health, StoreKit | As governed by Apple’s own policies |
What the cloud backup contains
Signed-in users get an automatic backup of: workouts with exercises and sets, personal records, templates, the current training plan, and profile basics (name, current and goal weight, start weight, experience level, training focus, training days). Never uploaded: progress photos, body measurements, medications, health conditions and appetite. The backup is upload-only for now; it protects your data on our servers but is not yet restorable onto a new device. Access is restricted by security rules so only your account can read or write your data.
Retention and deleting your data
- Delete your account in the app: Profile → Account → Delete Account. This deletes your cloud backup and AI usage counters from our servers, deletes your sign-in account, revokes the Sign in with Apple token, and erases FitBrain data from your device.
- Deleting your account does not cancel an App Store subscription. Cancel it in Settings → Apple ID → Subscriptions.
- Remove data from this device is also offered when you sign out.
- Analytics events are tied to a random ID rather than your name or email. To have analytics data for your ID deleted, email us from your account address.
- If you do not delete your account, we keep your data until you do. Data that exists only on your device is under your control and is removed when you delete the app or use Delete Account.
- You can also request deletion by emailing marcos.placona@gmail.com.
- Backups held by Google may take a short time to age out after deletion.
Your choices and rights
If you are in the UK or EEA, we process your data under GDPR / UK GDPR: to perform our contract with you (providing the app), on your consent where you give it (AI coach, Apple Health, health context, which you can withdraw at any time), and for our legitimate interests (security and basic analytics). Health information is treated as special category data and we rely on your explicit consent for it. You can complain to your data protection authority, in the UK the Information Commissioner’s Office (ico.org.uk). You can export your workouts and body weight as CSV (Profile → Export Data), switch analytics off (Profile → Privacy & Legal), withdraw AI Coach consent (Profile → AI Coach Privacy), disconnect or change Apple Health permissions in the Health app, and delete your account. Depending on where you live (for example the EEA, UK or California) you may also have the right to access, correct, port or erase your data and to object to certain processing. Contact us and we will respond within a reasonable time.
Security
Data is encrypted in transit. Backup access is limited to your own account, and the AI Coach endpoint requires a signed-in user. No system is perfectly secure, so please use a strong, unique password.
Not medical advice
FitBrain and its coaches are not a medical service. Entering medication information does not mean a clinician reviews it.
Children
FitBrain is not directed to children under 13 (or under 16 in the EEA), and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
International transfers
Our service providers operate in the United States and other countries, so your data may be processed outside your country of residence.
Changes
If we make material changes we will update the date above and, where appropriate, tell you in the app.