Privacy Policy
WHO WE ARE
FITTSO is operated by FITTSO Operations, Inc., an Alaska corporation ("FITTSO", "we", "us"). You can reach us at zac.s@fittso.app.
The consumer app is provided free of charge by FITTSO Foundation, Inc., an affiliated Alaska nonprofit, under licence from us. Platform data and physiological records are held by FDS, Inc., an affiliated Alaska corporation that acts as our data custodian under written agreement. Neither affiliate uses your data for its own purposes, and both are bound by this policy.
WHO CAN USE FITTSO
FITTSO is for adults. You must be 18 or older to create an account. We do not knowingly collect information from anyone under 18. Age is checked on the server when your account is created, and accounts that fail that check are not created.
WHAT WE COLLECT
| Category | Examples | Where it comes from |
|---|---|---|
| Account | Email, display name, date of birth, profile photo | You |
| Wearable and device biometrics | Heart rate, heart-rate variability, sleep stages, respiratory rate, blood-oxygen, temperature trend, readiness, recovery and strain scores, steps, calories, VO2 max | A connected service you authorize |
| Activity | Workouts, duration, distance, pace, elevation, route where you record one | Your device, a connected service, or a file you import |
| Body composition | Weight, body fat, lean mass and other readings from a Bluetooth scale you pair, or values you enter | Your scale, or you |
| Nutrition | Logged foods, portions, barcodes you scan, and photographs you take of meals | You |
| Subjective | Mood, soreness, notes, and anything you write in a post or say to THEIA | You |
| Social and location | Posts, comments, reactions, follows, messages, and check-ins at places you choose to share | You |
| Derived | FITTSCORE and other scores and trends we compute from the above | Computed by us |
| Technical | Device model, OS version, app version, crash diagnostics, IP address | Automatic |
Laboratory results (bloodwork) are not collected today. If we add them, they will appear in this table and in the Consumer Health Data Privacy Policy before collection begins, and you will be asked for consent for that category specifically.
CONNECTED SERVICES
You can connect the following. Nothing connects unless you authorize it, and you can disconnect any of them at any time in the app.
- Apple Health — on iOS, for the data types you approve
- Health Connect — on Android, for the data types you approve
- Oura — by OAuth, through your Oura account
- WHOOP — by OAuth, through your WHOOP account
- Bluetooth body-composition scales — paired directly to your phone
- Workout files you import yourself (FIT, GPX)
We label every record with the service it came from. If we add a partner, it appears in this list before it can be connected, and any additional terms that partner requires are published at fittso.app/legal/partner-data.
HOW WE USE IT
- To show you your own data, history, and trends
- To compute FITTSCORE and the other scores the app displays to you
- To run features you ask for — logging, check-ins, the social feed, messaging, and THEIA
- To show your posts and profile to the people you have chosen to share them with
- To keep the service working, secure, and free of abuse
- To meet legal obligations
We do not sell your data. We do not share it with data brokers, advertisers, insurers, or employers. We do not use health or fitness data for advertising, marketing, or third-party profiling, and there is no setting that would allow it — we do not run advertising in the app.
CONSENT
You accept these terms and this policy when you create an account. Connecting a device or service is a separate, specific authorization for that source. Letting a professional you name see a summary of your data is a separate authorization again. Each grant and each withdrawal is recorded with its time and the version of this policy in force, so your complete consent history is available on request.
You can withdraw any consent in Settings, in the same number of steps it took to give it, without giving a reason. Withdrawal stops the associated processing from that moment.
AI TRANSPARENCY STATEMENT
FITTSO includes an AI layer called THEIA. This section exists because some device partners require a specific, conspicuous disclosure wherever user data is processed by artificial-intelligence systems. Here is exactly what THEIA does with your information.
Inference — always on for your own data
THEIA reads your data, including data from connected devices, to produce explanations, summaries, and suggestions for you. This is processing, not training: your records are used to generate your own result and are not written to any store that feeds model training.
Training — separate, optional, off by default
We do not use your data to train, fine-tune, or improve any AI model unless you have given a separate, specific opt-in for that purpose. It is not part of accepting these terms, it is unchecked by default, and declining it does not reduce anything in the app.
Data we will never train on, even with your consent
Some device partners prohibit AI training on data sourced from them, without exception. Records carrying those partners' provenance labels are excluded from every training set regardless of what you have consented to. Provenance is recorded on every row at the moment it arrives, and training sets are built from an explicit allow-list of sources — anything not on the list is excluded by default.
Model providers
Where THEIA runs on infrastructure we do not own, that provider is bound by written terms no less protective than this policy, including a prohibition on training with your data and on retaining it beyond the request.
What THEIA will not do
THEIA is not a clinician. It answers health questions by citing published literature and never gives you a personal dose or diagnosis. A persistent disclaimer appears under every conversation.
WHO ELSE TOUCHES YOUR DATA
We use a small number of service providers to operate FITTSO. They act on our instructions under written terms, and cannot use your data for their own purposes.
| Provider | What they do for us |
|---|---|
| Supabase | Database, authentication, and server-side functions (United States) |
| Cloudflare | Object storage for images (R2) |
| Fly.io | Hosting for the THEIA service |
| DeepInfra | Model inference for THEIA, under terms that prohibit training on and retention of your data |
| Expo | App build and update delivery |
| Apple | App distribution (App Store, TestFlight) |
If this list changes, the new version of this policy says so before the change takes effect.
HOW WE PROTECT IT
Physiological records are encrypted with a key scoped to your account, so they are unreadable in storage without it, and an automated check runs every hour to confirm none are stored in plaintext. Everything moves over TLS. Access between accounts is enforced at the database layer, not only in the app. Full detail is at fittso.app/legal/security.
HOW LONG WE KEEP IT
We keep your data while your account is open, on this schedule for wearable streams, scale and body-composition readings, and nutrition logs:
- Days 1–30: full resolution, actively used
- Days 31–90: consolidated to weekly summaries
- After 90 days: the consolidated form persists; full-resolution raw records are dropped
Raw payloads received from a connected service are kept only long enough to be normalized and are pruned nightly. Meal photographs are removed ten days after capture unless you choose to keep them. THEIA's memory of your conversations grows with you over time, consolidated so that older detail is summarized rather than kept verbatim.
When you disconnect a device partner, we stop receiving new data from that partner immediately, revoke our access token with the partner, and remove every record sourced from it within 72 hours.
DEACTIVATING OR DELETING YOUR ACCOUNT
These are two different things, and we never treat them as interchangeable.
Deactivation makes your account dormant. Your profile and posts stop being visible, syncing stops, and your information is retained so you can come back. Deactivation is reversible at any time.
Deletion is permanent. You request it from inside the app, in Settings — no email, no form, no support ticket. Your account is deactivated immediately and scheduled for erasure after a 30-day grace period during which you can change your mind. After that, your personal data — including wearable records, body-composition and nutrition data, derived scores, social content, images, and THEIA's memory of you — is erased from our primary stores, our derived stores, object storage, and search indexes. Backups are overwritten on a rolling cycle. We retain only what the law requires us to keep: your consent records, security audit logs, and trust-and-safety records, used for no other purpose.
Until our automated erasure is fully verified across every store, we complete erasure by hand for any account that requests it: write to zac.s@fittso.app from the email address on your account and we will confirm when it is done.
De-identified patterns already incorporated into a trained model cannot be extracted from that model. Your identifiable records are deleted; the model is not retrained.
YOUR CHOICES AND RIGHTS
- Disconnect any device partner at any time, individually
- Withdraw consent for any category or recipient you previously approved, in Settings
- Export a copy of your data
- Deactivate or delete your account
- Control who sees each thing you post
Depending on where you live you may have additional rights — to access, correct, restrict, or port your information, to object to certain processing, and to appeal a decision we make about a request. Write to zac.s@fittso.app and we will honor them. We will not discriminate against you for exercising a privacy right.
WASHINGTON, NEVADA, AND CONNECTICUT RESIDENTS
Consumer health data is covered by a separate policy required by state law, published at fittso.app/health-data-privacy. We do not sell consumer health data and have no process by which it could be sold.
CHANGES
If we change this policy materially we will tell you in the app and ask you to accept the new version before you continue. Every version is recorded with its date. This version is 2026-09-12.1, effective September 12, 2026.
CONTACT
FITTSO Operations, Inc. · An Alaska corporation, entity 10355798 · zac.s@fittso.app
Security disclosures: zac.s@fittso.app — see fittso.app/legal/security.