Privacy Policy

Who we are

FitendAi is operated by TODO: company legal name, TODO: registered business address (“we”, “us”). We are the controller of the personal data described here. Questions about privacy go to TODO-privacy@your-domain.com.

Data we collect

Data that stays on your device

• Smart rope and motion sensors. The app uses Bluetooth to connect to your rope and reads your phone’s motion sensors during drills. Raw sensor readings are processed on the device; only the session results are saved to your account.
• Camera for AI form check. Form check uses the front camera and an on-device pose model to see how you jump. Camera frames are analysed on the phone and are never uploaded, saved or sent to the AI Coach; only the resulting scores are saved with the session.
• Location permission on Android. Older Android versions require location permission to scan for Bluetooth devices. We don’t collect or store your location.
• Reminders, widgets and session recovery. Reminder schedules, widget data and an interrupted session (kept for 24 hours so you can save it) are stored on your phone.

Apple Health and Health Connect

With your permission, FitendAi connects to Apple Health (iOS) or Health Connect (Android):

• Reads your latest body weight, to pre-fill your profile and estimate calories, and heart rate during a session, to show your average and peak on the session summary.
• Writes your completed sessions as workouts with active energy burned.

Heart rate read from Health is shown on your phone and isn’t uploaded to our servers. Health data is never used for advertising or marketing, never sold, and never shared with third parties except as needed to provide the app. You can revoke access at any time in the Health app or Health Connect settings.

AI Coach

When you use the AI Coach, we send the request to our AI provider, Anthropic, to generate the reply. Each request includes what you wrote, your recent conversation, and a summary of your training: your first name, weekly goal, streaks, freezes and rest weeks, time zone, sessions from the last few weeks, lifetime totals, personal records and badges.

When you ask the coach to build a training program, the request also includes the goal you typed and the number of weeks and days you chose. The daily challenge is written once for everyone from overall, anonymous numbers (such as how many jumps a typical active user did); no one’s personal data is sent for it.

We don’t send your email, surname, photo, weight, height or gender. Under our agreement with the provider, this data is processed to provide the service and not used to train their models. Conversations and weekly reviews are saved to your account so you can come back to them. Clearing the chat in the app deletes the conversation; reviews are deleted with your account.

The AI Coach gives general fitness information. It can be wrong, and it isn’t medical advice.

Friends, battles and invites

• Friends see your display name, photo and weekly totals (jumps, sessions, minutes and calories) on the leaderboard, not your individual sessions. Turn off stat sharing in Profile to hide your totals.
• Rope Battle opponents see your display name and your live jump count during the battle, and the result afterwards.
• Ghost races: friends you send a run to, or anyone with its code, see your display name, photo, message and the run itself, and everyone who races it sees the other attempts. Runs expire after 7 days.
• Friend challenges: people in a challenge see each other’s display name, photo and progress towards the target.
• Referrals: if you join with someone’s code, they see your display name and photo and whether you’ve finished your first session, and you see who invited you.
• Invite links contain a short code, not your personal details. Anyone with a friend code can send you a request, which you can accept or ignore.

Orders and order tracking

When you buy FitendAi gear from us, we keep a record of the order so we can deliver it and help you with it:

• What: your name, email address, phone number and shipping address, what you ordered and what you paid, delivery updates and the courier’s tracking number. Card details are handled by the store or payment provider you check out with; we never receive them.
• Why: to fulfil and deliver the order, answer questions about it, handle returns and warranty claims, and keep the records tax and consumer law require.
• Couriers receive your name, shipping address and phone number to deliver the parcel.
• Tracking: the Track your order page sends the email and order number you type to our servers to find the order. It needs both, so someone who only knows your email can’t see your orders, and it shows your first name, the items, totals and delivery updates, never your address or phone number.

Orders aren’t tied to an app account, so deleting your account doesn’t delete them; ask us if you want an order record erased early.

Service providers

We share data with these providers only so they can run parts of the service for us, under contracts that limit how they use it:

We don’t sell or rent personal data, and we don’t share it for cross-context behavioural advertising. We may disclose data if the law requires it, to protect people’s safety, or as part of a merger or acquisition, in which case this policy continues to apply.

A small number of our staff can see account and training data to provide support, under role-based access. Every change they make is logged.

Legal bases

Where the GDPR or UK GDPR applies, we rely on:

• Contract: to provide the app and the features you use.
• Consent: for Health data, push notifications, and the optional profile photo. You can withdraw consent at any time in the app or your phone’s settings.
• Legitimate interests: diagnostics to keep the app working, security, and preventing abuse. You can opt out of diagnostics.
• Legal obligation: for example, keeping purchase records.

Gender, weight and height are only used to estimate calories and personalise the app. Health data is processed only with your explicit consent.

How long we keep data

• We keep your account and training data until you delete your account.
• When you delete your account, your profile, sessions, social data, AI Coach history, push tokens and photo are deleted from our active systems straight away. Copies in backups are overwritten on our provider’s backup cycle.
• Rope Battle rooms are deleted automatically a few hours after they’re created; ghost races expire after 7 days.
• Order records are kept for as long as tax and consumer law require (often several years), then deleted.
• Diagnostics data is kept by Firebase for its standard retention period.
• We may keep limited records longer where the law requires, such as purchase records.

Your choices and rights

In the app

• Edit your profile, photo, body data and goals in Profile.
• Turn off Share usage & crash data and friends’ stat sharing in Profile.
• Manage notification categories in Profile, and Health access in your phone’s settings.
• Clear your AI Coach conversation in the AI Coach screen.
• Delete my account in Profile removes your account and data. See Delete your account.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. California residents may also request to know what we collect and to delete it; we don’t sell or share personal information as those terms are defined there. We won’t treat you differently for using these rights.

Email TODO-privacy@your-domain.com from the address on your account and we’ll reply within 30 days. You can also complain to your local data protection authority.

Security

Data is encrypted in transit, and access is limited by row-level security so each account can only read its own data. Staff access is role-based and logged. No system is perfectly secure, so please use a strong, unique password.

International transfers

Our providers may process data in countries other than yours, including the United States. Where required, transfers are protected by safeguards such as the European Commission’s Standard Contractual Clauses.

Children

FitendAi is not for children under 13, or the minimum age of digital consent where you live if it is higher. We don’t knowingly collect data from them. If you think a child has created an account, contact us and we’ll delete it.

This website

This website doesn’t use cookies, analytics or advertising trackers. Our hosting provider may keep standard server logs, such as IP address and pages requested, for security. Shop pages load product images from our storage provider, and the order tracking page sends what you type to our servers only when you press Track.

Changes to this policy

We’ll update this page when our practices change and change the date at the top. For significant changes, we’ll also tell you in the app.

Contact us

TODO: company legal name
TODO: registered business address
TODO-privacy@your-domain.com