Privacy Policy

Last updated: December 9, 2025

1. Introduction

Welcome to FitMind ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App") and website located at fitmindai.co.uk (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not download, install, or use our App.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you provide directly to us, including:

  • Account Information: Name, email address, password, profile picture (optional)
  • Fitness Data: Workout history, exercise preferences, fitness goals, step counts, calorie tracking, body measurements, workout notes
  • Health Data: Health metrics you choose to input (weight, height, age, activity level)
  • Payment Information: Processed securely through Apple App Store (we do not store credit card information)
  • Support Communications: Messages, feedback, and correspondence when you contact us

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

  • Device Information: Device type, model, operating system version, unique device identifiers, mobile network information
  • Usage Data: How you interact with the app, features used, time spent, pages viewed, click patterns
  • Location Data: Approximate location (city/region level) for step tracking and workout recommendations (if you grant permission)
  • Log Data: IP address, access times, app crashes, performance data

2.3 Health and Fitness Data

Our App integrates with Apple HealthKit (if you grant permission) to access:

  • Step count and distance data
  • Active energy burned
  • Workout data
  • Other health metrics you choose to share

Important: We do not share your HealthKit data with third parties. HealthKit data is stored locally on your device and synced to our secure servers only with your explicit permission.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Provision: To provide, maintain, and improve our App and services
  • Personalization: To generate personalized AI-powered workout plans tailored to your goals and preferences
  • Progress Tracking: To track and display your fitness progress, statistics, and achievements
  • Communication: To send you updates, notifications, and respond to your support requests
  • Analytics: To analyze usage patterns, improve app performance, and develop new features
  • Security: To detect, prevent, and address technical issues, fraud, or security threats
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes
  • Marketing: To send you promotional communications (only with your consent, and you can opt-out at any time)

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We may share your information with third-party service providers who perform services on our behalf:

  • Cloud Storage: We use secure cloud services (e.g., AWS, Google Cloud) to store your data
  • Analytics: We use analytics services (e.g., Firebase Analytics, Apple Analytics) to understand app usage
  • Payment Processing: Payments are processed through Apple App Store (Apple handles all payment data)
  • Customer Support: We may use third-party support platforms to assist with customer inquiries

All third-party service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to:

  • Comply with legal obligations
  • Protect our rights, property, or safety
  • Prevent fraud or security issues
  • Respond to government requests

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

  • Encryption of data in transit (SSL/TLS) and at rest
  • Secure authentication and access controls
  • Regular security assessments and updates
  • Limited access to personal data on a need-to-know basis
  • Secure data centers with physical security measures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce our agreements
  • Maintain business records as required by law

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes. Some anonymized data may be retained for analytics purposes.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal requirements)
  • Portability: Request transfer of your data to another service provider
  • Objection: Object to processing of your personal information for certain purposes
  • Restriction: Request restriction of processing in certain circumstances
  • Withdraw Consent: Withdraw consent where processing is based on consent
  • Opt-Out: Opt-out of marketing communications at any time

To exercise these rights, please contact us at our contact page or email us at support@fitmindai.co.uk. We will respond to your request within 30 days.

EU/UK Users (GDPR): You have additional rights under the General Data Protection Regulation. If you are located in the EU or UK, you may also lodge a complaint with your local data protection authority.

California Users (CCPA): You have the right to know what personal information we collect, sell, or disclose, and the right to opt-out of the sale of personal information (we do not sell your information).

8. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy, including:

  • Standard contractual clauses approved by the European Commission
  • Other appropriate legal mechanisms to ensure adequate protection

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last updated" date
  • Sending you an email notification (for significant changes)
  • Displaying a notice in the App

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: