Privacy Policy

1. Introduction

FitDiary respects the privacy of your personal data. This policy explains what data we collect, how we use it and how we protect it, in accordance with the General Data Protection Regulation (GDPR).

2. Data we collect

We collect the following categories of data:

• Identification data: name, email address
• Health data: weight, height, nutrition goals
• Usage data: logged meals, food photos
• Data from health platforms (only if you turn on the integration): steps, workouts and weight, read from Apple Health or Health Connect
• Technical data: device type, operating system, IP address

3. Why we process your data

We use your data to:

• Provide and improve the FitDiary service
• Personalize your experience and recommendations
• Send service-related communications and updates
• Run anonymized statistical analysis to improve the product

4. Data storage

Data is stored on secure servers in the European Union. Food photos are processed for AI recognition and then deleted from our servers within 30 days.

5. Apple Health and Health Connect integration

FitDiary can connect, only at your request, to Apple Health (iOS) or Health Connect (Android). If you turn on the integration from the Integrations section of the app, FitDiary reads only the following data types: step count, workouts and body weight. We do not write data back to these platforms.

This data is used only for the core functionality of the app: showing your activity in your diary and calculating your daily calorie budget. It is stored together with the rest of your diary, on secure servers in the European Union. Data from Apple Health or Health Connect is not used for advertising, is not sold and is not shared with third parties for marketing purposes or to determine creditworthiness or insurance eligibility.

You can turn off the integration at any time in the app (Profile → Integrations) or by revoking permissions in the Apple Health / Health Connect settings. Data already imported can be deleted individually from the diary or entirely by deleting your account.

6. Data sharing

We do not sell your personal data. We may share data with service providers that help us operate the app, under strict confidentiality agreements: Google Cloud / Firebase (hosting and databases, EU), RevenueCat (subscription management), and Google Analytics and Mixpanel (statistical usage analysis, in pseudonymized form; for Mixpanel the data is stored in the EU).

7. Your rights

Under the GDPR, you have the following rights:

• The right to access your personal data
• The right to have incorrect data corrected
• The right to erasure ("the right to be forgotten")
• The right to data portability
• The right to object to the processing of your data

8. Cookies

The fitdiary.ro website uses essential cookies to function and analytics cookies to understand how the website is used. You can manage your cookie preferences in your browser settings.

9. Contact

For any questions about the protection of your personal data, you can contact us at privacy@fitdiary.ro.