Last updated 11 September 2026
What we collect
Three buckets, and nothing outside them.
- Account data — your email address, and a display name if you set one. That is the whole of it. We do not ask for your real name, address or phone number.
- Health data you log or connect — steps, distance, active minutes, water, meals, sleep, workouts, weight, and readings from any device you link.
- Technical data — app version, device model, OS version, and crash reports. Used to fix things, and nothing else.
What we do with it
We use your health data to show you your health data. Rings, scores, trends, nudges — all of it is computed for you, shown to you, and stops there.
We do not sell it. We do not share it with data brokers, advertisers, insurers or employers. If you are on a Teams plan, your employer sees aggregate, anonymised participation numbers only — never an individual’s figures. See Data & health for exactly where that line sits.
We do not train models on it. Not our own, not anyone else’s.
Who else touches it
A small number of processors, each contractually bound to our terms and none permitted to use your data for their own purposes: our cloud host for storage, an error-reporting service for crash logs, and an email provider for the messages you have asked to receive. We do not use third-party advertising or analytics SDKs in the app.
Where it lives, and for how long
Health data is encrypted in transit and at rest. We keep it for as long as your account is open. Delete your account and it is removed from live systems immediately and from backups within 30 days — permanently, not flagged-as-deleted.
Your controls
- Export — every record we hold, as CSV, from inside the app, whenever you like. No request form, no waiting period.
- Delete — removes the account and the data with it. Two taps, no retention appeal, no “are you sure” email chain.
- Disconnect — unlink any device or health service at any time; we stop reading from it that moment.
- Correct — edit or remove any individual entry.
Depending on where you live you may also have statutory rights to access, rectification, portability, erasure, restriction and objection. The controls above are built to satisfy them directly; if you would rather make a formal request, email us and we will answer within 30 days.
Children
Fitfly is not intended for anyone under 16. We do not knowingly collect data from children, and we delete it if we discover we have.
Changes
If we change anything that materially affects how your data is handled, we will email you before it takes effect — not quietly update this page and change the date.
Contact
Questions, requests, or complaints: privacy@fitfly.app. A person reads it, usually within a day.