Privacy Policy
This Privacy Policy explains how FitSpotX collects, uses, processes, and protects information when you use our website, iOS or Android applications, step-tracking, nutrition, AI-powered meal analysis, community, and account features.
FitSpotX does not read step data from Apple Health or Android health services until you grant the relevant permission.
We do not sell account, health, step, nutrition, or meal-image data to advertisers.
You can manage permissions, community visibility, AI consent, and account deletion.
Who Is Responsible for Processing Your Data?
The person responsible for FitSpotX and for processing personal data under this Privacy Policy is:
Information We May Collect
The information we collect depends on the features you use and the information you choose to provide or save. It may include:
Account Information
Name, email address, user identifier, profile image, sign-in method, session status, and account settings.
Steps and Health Information
Daily step totals, dates, daily goal, day/week/month totals, data source, and synchronization status.
Nutrition and Fitness Information
Age, sex, height, weight, goals, calories, macronutrients, meals, activity, and progress when you enter or choose to save them.
Meal-Analysis Images
The image you voluntarily choose to send when using AI meal analysis, after your explicit consent.
Community Information
Display name, profile image, visibility settings, rankings, challenges you create or join, and report/block information when those tools are used.
Technical Information
IP address where needed to deliver or protect the service, device type, operating system, app version, language, crash logs, browser type, and features or pages used.
Communication Information
Messages, questions, support requests, ad or community reports, feedback, and other information you voluntarily send to us.
Advertising and Transaction Information
Advertising consent choices, limited ad-delivery or interaction information, subscription status, and transaction identifiers needed for verification.
Step Tracking and Health Data
FitSpotX uses step data only when you enable the relevant feature and grant the required system permission. FitSpotX does not need your precise location to count steps and does not use step data to determine your route or personalize advertising.
On iPhone and iOS: FitSpotX uses Apple HealthKit to read permitted step totals. The current step feature does not write health information to Apple Health.
Apple Watch: If Apple Watch records your steps and syncs them with Apple Health, those steps may be included in totals that FitSpotX reads from Apple Health. FitSpotX does not need a separate direct Watch connection to read those totals.
On Android: FitSpotX may use Google Play services Fitness Local Recording and/or Health Connect on compatible devices to read steps you have permitted the app to access.
What is read? Step totals and dates needed to display progress, goals, totals, and rankings. The current step feature does not read heart rate or other medical information unless a future feature is added and a clear permission is requested.
What may be sent to FitSpotX servers? When you are signed in and internet access is available, daily step totals, dates, account identifier, and data source may be synchronized to preserve progress and update rankings or community features.
Advertising: We do not use Apple Health/HealthKit, Health Connect, or your step totals to target advertising, build advertising profiles, or sell health data to advertisers.
Leaderboard and Public Visibility
If you enable community or leaderboard visibility, other users may see your display name, profile image, step total, and ranking for the selected period. Your email address, weight, meals, and private account information are not displayed through the public leaderboard.
You can manage Apple Health permissions through iOS/Health settings and Health Connect or activity permissions through Android settings. Withdrawing a permission stops new readings from that source without preventing use of unrelated FitSpotX features.
AI-Powered Meal Image Analysis
Meal-image analysis is optional. Before a meal image is sent for analysis for the first time, FitSpotX displays a clear notice and asks for your explicit consent to share the image with OpenAI as an external AI service provider.
What is sent? The image you choose to analyze, to the extent needed to identify food items and estimate portions and nutritional information.
How is it processed? A FitSpotX server receives the image temporarily to process the request and sends the image content to OpenAI to obtain an analysis result. FitSpotX does not keep a copy of the meal image after the analysis request is completed.
Consent and control: You can refuse to send the image and continue using FitSpotX without AI meal analysis. You can also reset your saved AI consent in the app’s privacy settings, after which FitSpotX will ask again before a future analysis.
Preventing abuse of free usage: The AI quota system may retain a Firebase account identifier and a one-way device fingerprint to help prevent repeated abuse of free usage. Raw device identifiers or raw network addresses are not stored for this purpose.
Accuracy: AI results are estimates and may be incorrect about food type, portion size, or nutrition. Review the result before saving it. AI output is not medical advice.
Community, Challenges, Reports, and Blocking
FitSpotX includes social features such as leaderboards, public profiles, and challenges. What other users can see depends on the feature and your account settings. We do not display your email address or private nutrition information in your public community profile.
Content you create: Challenge names and information associated with participation may be stored to operate and display the feature.
Reports and blocking: When you use reporting or blocking tools, we may store the relevant account identifiers, report reason, and information needed to review the report or prevent unwanted interaction.
Moderation: We may review community content and reports and take actions such as hiding content or restricting an account when needed to protect users, enforce community rules, and prevent abuse.
How Do We Use Your Information?
- To create your account, authenticate sign-in, and manage your profile.
- To operate step synchronization, goals, estimated distance, estimated calories, and progress.
- To save step totals and update daily, weekly, and monthly rankings.
- To operate nutrition, fitness, calorie, and meal-tracking tools.
- To analyze a meal image when you choose the feature and explicitly consent.
- To operate community, challenge, public-profile, report, and block features.
- To manage subscriptions, entitlements, and payment-status verification.
- To manage optional rewards associated with advertising inside the app.
- To improve performance, fix bugs, and prevent fraud or misuse.
- To respond to support requests, messages, and reports.
- To display and measure advertising after consent where required.
- To send service messages or marketing communications where you have permitted them.
- To comply with legal obligations and protect FitSpotX and its users.
Legal Bases for Processing
Where the General Data Protection Regulation (GDPR) applies, we rely on one or more of the following legal bases:
Performance of a service or contract: To operate accounts, requested features, and membership services.
Consent: For health/activity access, sending a meal image to an external AI provider, personalized advertising, or marketing where consent is required.
Legitimate interests: To secure the service, prevent fraud or abuse, manage reports, and improve performance while respecting your rights.
Legal obligations: To retain legally required records or respond to binding legal requests.
If step, fitness, or other information you choose to provide is legally classified as sensitive health data, we process it only to the extent needed for the requested feature and on the basis of explicit consent or another appropriate legal basis where required.
Service Providers and Recipients of Information
We do not sell your personal information. Depending on the feature you use, limited information may be processed by service providers that supply infrastructure needed to operate FitSpotX, including:
Apple: Sign in with Apple, Apple Health/HealthKit, and App Store/StoreKit services on Apple devices when relevant features are used.
Google Firebase: Authentication, account-related technical infrastructure, and synchronization of certain service data.
Google Play services / Fitness Local and Health Connect: Step recording or reading on compatible Android devices after permission is granted.
Google Analytics: To understand usage, measure performance, and improve features.
Google AdMob / Google Ads: To display and measure advertising and manage consent choices.
Google Play: To process in-app subscriptions or purchases on Android when available.
OpenAI: To process a meal image you choose to submit for AI analysis, after your explicit consent.
Stripe: To process payments or subscriptions completed through the FitSpotX website when available.
Hosting and security providers: To operate and protect the website, APIs, databases, and content infrastructure.
Legal authorities: Where disclosure is required by law or necessary to protect rights, prevent fraud, or maintain security.
Each provider is subject to its own privacy policy and terms and may act as our data processor or as an independent controller depending on the service and applicable law.
Advertising and Consent
The FitSpotX app uses Google AdMob, and the website may use Google advertising services. Advertising may involve device information, an advertising identifier where available, consent choices, and ad interaction information according to applicable law.
Users in the European Economic Area, United Kingdom, or Switzerland may be shown a consent message or privacy choices before certain advertising requests. You can manage or withdraw consent through available privacy settings or provider tools.
We do not use Apple Health/HealthKit data, Health Connect data, step totals, weight, meals, or meal images to personalize advertising, and we do not sell this information to advertisers.
If you see an inappropriate or age-inappropriate ad, you can use the “Report an ad” option in the app or contact us through our Contact page.
Cookies and Local Storage
The website and application may use cookies, local storage, and similar technologies to maintain sessions, remember language and preferences, store temporary results or consent status, and improve performance.
The app may also store limited local information related to steps, account settings, AI-image consent, or reward status in order to operate features consistently between sessions.
You can manage browser cookies through browser settings, health or activity permissions through iOS or Android settings, and app data through device settings. Removing a permission or local data may stop a feature or cause certain settings to be requested again.
Payments and Subscriptions
FitSpotX PRO or other paid features may be available through more than one platform. Subscriptions purchased inside the iOS app are processed by Apple App Store/StoreKit. Android in-app subscriptions are processed by Google Play when available. Website subscriptions may be processed by Stripe.
FitSpotX does not receive your full payment-card number from Apple, Google, or Stripe. We may receive or store limited information needed to activate and verify membership, such as product type, subscription status, expiration or renewal date, and transaction or verification identifiers associated with your account.
Subscriptions may renew automatically under the rules of the store or payment provider you used. You can manage or cancel a subscription through Apple App Store, Google Play, or the provider used for the purchase.
How Long Do We Retain Your Information?
We retain account, progress, and service data while your account remains active or for as long as reasonably necessary to provide requested features, unless you request deletion or retention is legally required.
FitSpotX does not keep a copy of the meal image submitted for AI analysis after the analysis request has been completed. Limited non-image information about the request, quota status, or aggregated service metrics may remain where needed to operate the service or prevent abuse.
When your account is deleted, related information is deleted or de-identified from active systems within the period described on the deletion page. Limited information may remain in secured backups until those backups are rotated or overwritten.
We may retain limited records required for security, fraud prevention, dispute resolution, financial, tax, or other legal obligations, with restricted access and use.
Data Security
We apply appropriate technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or unlawful disclosure. No internet transmission or electronic-storage system can be guaranteed to be completely secure.
You are also responsible for protecting your sign-in methods, avoiding sharing credentials with others, and informing us if you suspect unauthorized use of your account.
International Data Transfers
Some providers may process information outside Germany or the European Economic Area, including through international services such as Apple, Google, OpenAI, or Stripe. Where GDPR applies, we rely on appropriate transfer mechanisms and safeguards provided by the service or required by law, such as adequacy decisions or Standard Contractual Clauses where applicable.
Your Data Protection Rights
Depending on your country of residence and applicable law, you may have rights to access, correct, delete, restrict, or receive your personal data, object to certain processing, withdraw consent, and submit a complaint to a data-protection authority.
You can withdraw Apple Health/HealthKit permissions through Apple settings, Health Connect or activity permissions through Android settings, and reset your AI meal-image sharing consent from FitSpotX privacy settings.
To exercise other rights or if you cannot resolve an issue from your account, contact us at fitspotx@gmail.com. We may request reasonable information to verify your identity and protect the account.
Account and Data Deletion
You can start deletion of your FitSpotX account and associated data from the Delete account and data option inside the app, or use the official account-deletion page if the app is no longer installed.
Open the FitSpotX Account Deletion PageVerification: We may require sign-in or account-ownership verification before deletion to protect your account. We will not ask you to email us your password.
Store subscriptions: Deleting your FitSpotX account does not necessarily cancel a recurring Apple App Store or Google Play subscription. Manage or cancel an active store subscription through the store where it was purchased.
Support: Email support is available for exceptional cases, such as losing access to the account, and is not required for the normal deletion process.
Uninstalling the FitSpotX app from your device does not delete your account or server-stored data.
Children’s Privacy
FitSpotX services are not intentionally directed to children under 16. We do not knowingly ask a child under this age to create an account or provide personal or activity data without appropriate parental or guardian consent where required by law.
If you believe a child has provided information inappropriately, contact us so we can review the matter and take appropriate action.
Affiliate Links and External Websites
FitSpotX may contain affiliate links to products or services. We may receive a commission when you purchase through one of these links, at no additional cost to you, and we aim to disclose affiliate relationships where appropriate.
Some links may direct you to external websites or applications. FitSpotX does not control the privacy, security, or content practices of those third parties, so we recommend reviewing their policies.
Updates to This Policy and How to Contact Us
We may update this Privacy Policy when FitSpotX features, service providers, technologies, or legal requirements change. We will publish the updated version on this page and change the “Last updated” date. Where a change is significant, we may also provide an appropriate notice in the website or application.
Contact the person responsible for FitSpotX directly:
fitspotx@gmail.com