Privacy Policy

1. Who we are

Fitnassist is run by Simon Sturgess, a sole trader in the United Kingdom, who is the data controller for the personal information described here ("we", "us"). This policy covers the Fitnassist website and the Fitnassist iPhone app. For anything about your data, email support@fitnassist.co.

2. Information we collect

• Account: your name, email address and password (stored only in a form that cannot be read back), and how you signed in if you use Apple or Google.
• Profile: for trainers, your bio, qualifications, services, prices, photos, phone number and business address. For trainees, your date of birth, gender, height, goals and activity level, and optionally your address.
• Health and fitness: what you record in your diary — weight, body measurements, food and drink, water, sleep, mood, steps, workouts and notes — and progress photos.
• From Apple Health and other fitness services: only if you connect them. See section 5.
• Location: see section 4.
• Photos, videos and files you upload: profile and gallery photos, video introductions, qualification certificates, product files, website images, and meal photos you submit for food recognition.
• What you write: messages between trainers and clients, posts, comments, reviews, questionnaire answers, and anything you send to support or report.
• Bookings and purchases: sessions you book, orders you place, delivery details for physical products, and the amounts paid. Card details go straight to Stripe; we never receive them.
• Device and technical: your device model, operating system and app version, your IP address, a token for sending you push notifications, and crash reports.
• How you use Fitnassist: when you view a trainer's profile we record the view against your account, so trainers can see how many people have looked. On the website, with your consent, we also use analytics (section 12).

3. How we use your information

• To run your account and provide the features you use.
• To connect trainees with trainers, and to let them message and book sessions.
• To calculate your calorie and macro targets, from your age, gender, height, weight and goal.
• To take payments and keep the records the law requires.
• To send notifications, emails and texts about your account and bookings.
• To show trainers how many people view their profile.
• To answer support requests, fix problems, and keep the platform safe.
• To send our newsletter, only if you have subscribed.

We rely on the contract with you to provide the service, your consent for health information and analytics, and our legitimate interest in keeping Fitnassist secure and working. We never use your information for advertising, and we never sell it.

4. Location

• Trainers: your business address and its approximate coordinates are shown on your public profile and used in location search. You can change or remove it at any time.
• Trainees: your address is optional. It is visible only to you unless you choose to share it with your own trainer. It is never shown to anyone else.
• Your device's location: the iPhone app uses your precise location, only while you are using it, to find trainers near you and to measure distance and route during an outdoor workout. The route is saved with that workout in your diary. Fitnassist never tracks your location in the background.

5. Apple Health and other fitness services

Apple Health (HealthKit)

If you connect Fitnassist to Apple Health, the app reads your steps, walking, running and cycling distance, active energy, sleep, weight, heart rate, resting heart rate and workouts, and can save workouts you log in Fitnassist back to Apple Health. You choose exactly which of these to allow, in the iPhone's Health permissions, and you can change that or disconnect at any time — in Fitnassist under Account Settings → Integrations, or in the iPhone's Settings → Health → Data Access & Devices.

What it reads is copied into your Fitnassist diary on our servers, so you can see it alongside everything else and, if you connect with a trainer, so they can see it within your privacy settings.

Data from Apple Health is never used for advertising, marketing or data mining, and is never sold or shared with advertising platforms, data brokers or information resellers. It is shared with no one except the trainer you connect with and the service providers in section 7 that store it for us. We do not store it in iCloud.

Strava, Fitbit, Garmin and Google Fit

If you connect one of these in Account Settings → Integrations, we import your activities and related fitness data from it into your diary, on the same terms as Apple Health above. Disconnecting stops further imports.

6. Who can see your information

• Everyone: trainer profiles are public, and so is anything you post publicly.
• Your trainer: once you connect, your trainer can see your diary and progress within the privacy settings you choose, and stops seeing it when the connection ends.
• Friends and other users: only what your privacy settings allow. You can change these at any time in your profile.
• Service providers: the companies in section 7, only to provide their service to us.
• When the law requires it: for example in response to a valid legal request.

7. Who processes your data

These are the companies that handle your information on our behalf, and what each one receives. We have a contract with each of them requiring them to protect it.

Health and fitness information

Your weight, measurements, progress photos, meals, workouts and any notes you record are special category data under UK GDPR. We process them only because you have chosen to record them, and you can withdraw that at any time by deleting the entries or your account. We share them with a trainer only once you connect to them, and only for as long as that connection lasts.

Photos you submit for food recognition

If you photograph a meal to have it identified, that image is sent to Anthropic, which returns an estimate of the food and its nutrition. Anthropic does not use it to train their models. If you would rather not use this feature, you can enter meals by search or barcode instead.

When you report a bug

If you use the feedback button we receive what you wrote, along with the page or screen you were on, your device and browser details, and the version you are running. On the website, where you have accepted analytics cookies, we also receive a link to the recording of that visit so we can see what happened. We use this only to fix the problem, and you can ask us to delete a report at any time.

Where your information is processed

Our database is hosted in London and our servers run in the UK and the EU. Some of the providers above are based in the United States, so your information may be transferred outside the UK. Where it is, that transfer is covered by the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework, which require an equivalent standard of protection to UK law.

8. How long we keep your information

We keep your information for as long as you have an account. You can delete your account at any time — in the app under Account Settings → Danger → Delete Account, or on the website in your account settings under Danger Zone. We email you to confirm first. When you do, we delete:

• your account, profile and settings;
• your diary, progress photos and everything imported from connected services;
• the messages, posts and reviews you wrote;
• the photos, videos and files you uploaded.

We keep only:

• records of payments and orders, without the link to your account, for as long as the law requires us to keep financial records — usually six years;
• for trainers, any digital product a client has already bought, so they can still download what they paid for;
• for a short period, copies in our database provider's backups, which exist only to recover from a fault and are overwritten in the normal course.

9. Data security

We implement appropriate technical and organisational measures to protect your personal information, including encryption in transit. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Your rights

Under UK data protection law you have the right to:

• access the personal information we hold about you;
• have inaccurate information corrected;
• have your information deleted;
• restrict or object to how we use it;
• receive a copy of your data in a portable format;
• withdraw consent at any time, including for health information and analytics.

You can do most of this in your account settings, or by emailing support@fitnassist.co. We will respond within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

11. Children

Fitnassist is for adults. You must be 18 or over to create an account (see our Terms of Service). We do not knowingly collect information from anyone under 18, and if we learn that we have, we will delete it.

12. Cookies & analytics

We use essential cookies to maintain your session and preferences — these are always active and required for the service to work. We do not use cookies for advertising.

With your consent, we also use analytics and session-recording tools on the website to understand how it is used so we can improve it. These do not run until you accept via our cookie banner, and you can decline without losing any functionality. The iPhone app has no analytics. The providers we use are:

• PostHog (EU-hosted) — product analytics and session replay. All form inputs are masked, so we never capture what you type (emails, messages, card details).
• Sentry — error monitoring to detect and fix problems. Basic error reporting runs to keep the service reliable; session replay for errors only runs with your analytics consent, with all text and media masked.

We also respect your browser's “Do Not Track” setting.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new "Last updated" date.

14. Contact us

Questions about this policy or your data: email support@fitnassist.co or use our support page.