This policy covers the fitfrog apps and the services behind them. It says what we collect, why, and how you get rid of it. The short version: we collect what an app needs to work, we do not sell it, and we do not use it for advertising.
Who we are
The fitfrog apps are an independent software project by a solo developer who goes by kotomasz. For the purposes of the EU General Data Protection Regulation we are the data controller for everything described below. Write to us at the address in the footer for any privacy question or request.
What we collect
Account data — only if you sign in
Your email address, the name your sign-in provider passes on, the provider itself, and an internal account identifier. You do not need an account: skip the sign-in step and the app keeps everything on your device and sends us nothing.
What you record in the app
Your weight entries and preferred units, food log entries, custom foods and saved meals, diet plans, workout programs and completed sessions, and the answers you give during setup that shape the app (your goal, your training experience, your role).
What we do not collect
No advertising identifiers, no device fingerprinting, no location, no contacts, no browsing history, no purchase history. There is no analytics or crash-reporting SDK in the apps. The camera is used only to scan food barcodes: frames are read on the device and never uploaded.
Health data
With your permission the apps read your weight, workouts, steps, sleep and nutrition from Apple Health on iOS and Apple Watch, and from Health Connect on Android, and they write your weight, completed workouts and daily nutrition back. We use it to show you your own dashboard and charts, and for nothing else.
Health data is never used for advertising or marketing, is never sold, and is never shared with third parties. You can review or revoke access at any time in Settings → Health on iOS or in the Health Connect app on Android. Revoking stops future reads and writes; it does not delete what was already stored.
Linking with a coach
An app can link your account to a coach. Nothing is shared until you send a request and the coach accepts it. While a link is active the coach can read — never edit — your display name, your goal and experience answers, your weight entries, your food log and nutrition totals, and your workout sessions. A coach cannot see your Apple Health or Health Connect data, your email address, or anything else in your account, and sees only the people who accepted them.
You can end a link at any time in the app. Ending it removes the coach's access immediately.
Third parties
Open Food Facts — when you scan a barcode or search for a packaged product, the barcode or search term is sent to the Open Food Facts API and the product data it returns is stored with your food log. Their database is open (openfoodfacts.org) and its data is available under the Open Database License. No personal information is sent with those requests.
Apple and Google — sign-in with Apple or Google, and distribution through their stores. Their own privacy policies apply to those services. Cloudflare — hosting for our API, database and website; data is transmitted over TLS.
We share your data with nobody else. We do not sell personal data and we do not pass it to advertisers or data brokers.
Storage, retention and deletion
Everything you record is stored first in an on-device database. If you are signed in it also syncs to our server so a second device — or a coach you linked with — can read it. Transfers use TLS, and your session token is kept in the iOS Keychain or Android EncryptedSharedPreferences. Your phone's own backup settings may include the app's local database; that backup is controlled by you and your platform provider, not by us.
We keep your account data for as long as your account exists. Deleting an app removes the copy on that device, but not the synced copy. To delete your account and everything we hold for it, email us from the address you signed in with, with the subject "delete my account": we delete your account, your synced records and any coach links, and confirm by reply, within 30 days. Individual records can be deleted in the app at any time, and the deletion reaches the server on your next sync.
Your rights, children, changes
If you are in the European Economic Area or the United Kingdom you may access your data, have it corrected or erased, receive it in a portable format, and object to or restrict its processing. Our basis for processing is your consent and the service you asked for. Write to us to exercise any of this, and you may also complain to your supervisory authority (in Poland, UODO).
The apps are not directed to children and are not intended for anyone under 16. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it. If this policy changes in a way that affects you we update the date at the top of the page and, for material changes, tell you in the app — and continuing to use the apps means you accept the updated policy. Questions about privacy, or about an app in general, go to Support.