Privacy Policy

Last updated: October 23, 2026

This policy explains what personal data the Fitzee app for iPhone (“Fitzee”) processes, why and on what legal basis, where it is stored, how long it is kept and the rights you have. It applies wherever you live, with additional information for residents of the United States in section 10.

1. Who is responsible

The data controller is Jordan Lauriol, sole trader (entrepreneur individuel) registered in France, 4 rue Carnot, 92300 Levallois-Perret, France (“we”, “us”). For any question about your data, write to help@fitzee.app.

2. How Fitzee works

Fitzee is local-first. What you enter is saved first in a file for your account on your iPhone, and the app keeps working without a connection. When a connection is available, your account data is synchronized with Fitzee’s servers, so you can find it again when you sign in on another iPhone. Changes made offline are sent later, in order.

3. Data we process

Account and sign-in

• Your e-mail address, when you sign in with a one-time code sent by e-mail. The code is stored only in hashed form, is valid for ten minutes and can be used once.
• With Sign in with Apple: the identifier Apple provides to Fitzee, and the name and e-mail address you choose to share, which can be an Apple private relay address. Your first name fills your profile if it is empty. We keep an encrypted Apple token, used to revoke Fitzee’s Sign in with Apple access when you delete your account.
• A session for your device. On your iPhone, your sign-in credentials are kept in the iOS Keychain.

Training data, profile and preferences

• Workouts: exercises, sets, weights, repetitions, durations and notes, and the routine they come from.
• Routines and their folders, custom exercises (including a photo you add to one), exercise settings and notes, training locations and their equipment.
• Habits and their check-ins, and your dashboard settings and goals.
• Profile, all fields optional: first name, sex, date of birth, height and goal.
• Preferences, such as units, language, appearance, accent color, first day of the week, training days and encouragements.

This information is stored on your iPhone and synchronized with your account.

Body measurements and photos (health data)

• The measurements you enter (weight, body fat percentage, lean mass and circumferences) are stored on your iPhone and synchronized with your account.
• Progress photos stay on your iPhone by default. They are sent to Fitzee’s servers only if you turn on photo backup (see section 8). Photos are saved as JPEG files without EXIF or location (GPS) metadata.

Because they can reveal information about your health, we treat body measurements, progress photos and Apple Health data as health data, a special category of personal data. Entering them is always optional.

Apple Health

If you allow it, Fitzee reads, and never writes, the following Apple Health data: weight, height, waist circumference, body fat percentage, lean body mass, steps, walking and running distance, active energy, exercise minutes, heart rate, workouts recorded by other apps, date of birth and biological sex. You can change these permissions at any time in iOS settings or the Health app.

Data read from Apple Health stays in a cache on your iPhone and is not sent to Fitzee’s servers, with one exception: your date of birth, biological sex and latest height are copied to your Fitzee profile, which is synchronized like any other profile change. Apple Health data is never used for advertising and never shared with third parties.

Consents

For each consent decision, such as accepting or withdrawing photo backup, we record the decision, the version of the text it applies to and its date. This record is kept with your account.

Notifications

If you turn on encouragements and allow notifications, the reminders are scheduled locally on your iPhone.

Technical data

• Error reports: when the app or our servers hit an unexpected error, a technical report can be sent to Sentry, our error-monitoring provider. Reports are configured to exclude personal data and the content of your requests, such as names, e-mail addresses and the data you enter.
• Server logs contain technical identifiers (such as your account identifier and request identifiers), versions and error codes, never the content of your data, your name or your e-mail address. They are kept for at most 14 days.
• Our host automatically records an access log for each request to our servers, which can include your IP address. These logs are kept for 7 days.

Fitzee displays no advertising and contains no advertising or analytics tracker. This website sets no cookies and uses no analytics.

4. Why we use your data and on what legal basis

• To provide the app: create your account, sign you in, save your data, synchronize it and restore it on another iPhone. Legal basis: performance of our contract with you (Terms of Use), article 6(1)(b) of the GDPR.
• To process your body measurements, progress photos and the profile data copied from Apple Health: your explicit consent, articles 6(1)(a) and 9(2)(a) of the GDPR. You can withdraw it at any time, without affecting processing already carried out.
• To back up your progress photos on our servers: your explicit consent, given in Settings → Consents.
• To protect your account and our servers (one-time codes, rate limits, session revocation, logs) and to detect and fix errors: our legitimate interest in keeping Fitzee secure and working, article 6(1)(f) of the GDPR.
• To keep records of consents and of account deletions: our legal obligation to demonstrate compliance, article 6(1)(c) of the GDPR.

We do not sell your data, do not use it for advertising and do not make decisions about you based solely on automated processing.

5. Where your data is stored and who processes it

• On your iPhone: your account file and your photos. If iCloud Backup is turned on, iOS includes Fitzee’s account files, including changes not yet synchronized, and your final progress photos in your device backup, under Apple’s terms.
• Laravel Cloud (Laravel Holdings Inc., United States) hosts Fitzee’s servers in the US East (Ohio) region: the database of synchronized data, run with Neon, and private file storage for backed-up photos and temporary restore archives, run with Cloudflare R2 and kept in the United States. Files are never public: they are served only through our API, after checking that they belong to your account.
• Postmark (AC PM LLC, United States) sends sign-in codes by e-mail; it receives your e-mail address and the code, which it stores in the United States.
• Sentry (Functional Software, Inc., United States) receives the error reports described above, which it stores in the United States.
• Apple provides Sign in with Apple, Apple Health (on your iPhone) and iCloud Backup, under its own privacy policy.

These providers act as our processors, under data processing agreements, and may use your data only to provide their service to us.

If you live in the European Economic Area, the United Kingdom or Switzerland, your data is therefore transferred to the United States. Laravel Holdings Inc., AC PM LLC (Postmark) and Functional Software, Inc. (Sentry) are certified under the EU-US Data Privacy Framework, which the European Commission recognizes as ensuring an adequate level of protection; their data processing agreements also include the European Commission’s standard contractual clauses. You can ask us for more information about these safeguards at help@fitzee.app.

6. How long we keep it

• Account data: as long as your account exists. When you delete your account, the deletion of your data and files on our servers starts right after your request and runs in the background.
• Photos: deleting a photo also deletes its backup files from our servers. Uploads never attached to a photo entry are removed after 24 hours.
• Restore archives prepared when you sign in on a new iPhone: deleted after one day.
• Synchronization records: a deletion marker (the identifier and version of a deleted item, without its content) is kept for 180 days so that your other devices can apply the deletion; records of recent requests, used to avoid duplicates, are kept for 30 days (90 days for workouts).
• Sessions expire after 365 days; expired sessions are removed one day later.
• Server logs: at most 14 days; access logs of our host: 7 days.
• Database backups, used to restore it to an earlier point in time: 7 days. Deleted data can remain in these backups until they expire.
• Error reports: at most 90 days.
• Sign-in e-mails at Postmark: 45 days.
• On your iPhone: until you delete your account, remove it from the device or uninstall the app. Copies in your iCloud backups follow Apple’s retention.

7. Security

• Connections between the app and our servers are encrypted (HTTPS).
• Sign-in codes are stored only in hashed form, the Apple token is encrypted and your credentials on the iPhone are kept in the iOS Keychain.
• Our servers check that every request only reads or changes data belonging to your account.
• Photos are saved without EXIF or location metadata.

8. Your choices and rights

In the app:

• View and correct your data at any time.
• Photo backup: Settings → Consents. If you withdraw your consent, new uploads stop and photos already backed up stay on your account. Deleting a photo also deletes its backup.
• Apple Health: change permissions in iOS settings or the Health app. In Fitzee, Settings → Apple Health → “Clear imported data” deletes Fitzee’s copies on your iPhone and stops imports; your data in Apple Health is not affected.
• Notifications: you can turn them off in iOS settings.
• Delete your account: Settings → Personal profile → Delete my account. This requires a connection. Your account, workouts, routines and photos are permanently deleted from Fitzee and from this iPhone, and Fitzee asks Apple to revoke its Sign in with Apple access. See Support.
• Remove an account from this iPhone only: “Forget this account” on the sign-in screen deletes its data from the device without deleting the account; changes not yet synchronized are lost.

Under the GDPR, you also have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a structured, machine-readable format (portability) and to withdraw your consent at any time. Under French law, you can also give instructions on what happens to your data after your death.

To exercise these rights, write to help@fitzee.app from the e-mail address of your account. We answer within one month, which can be extended by two months for complex requests; we will tell you if so. A copy of your data is sent as a JSON file.

If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07), or with the authority of the country where you live or work.

9. Minimum age

Fitzee is intended for people aged 16 or over. If you are under 16, do not create an account. If we learn that an account belongs to someone under 16, we delete it. A parent or guardian can ask us to do so at help@fitzee.app. We do not knowingly collect data from children under 13.

10. Information for residents of the United States

• Categories of personal information we collect: identifiers (e-mail address, account and Apple identifiers), the training, profile and preference data described above, and health information (body measurements, progress photos and data read from Apple Health). Their sources, purposes, recipients and retention are described in sections 3 to 6.
• We do not sell your personal information and do not share it for cross-context behavioral advertising. We use sensitive personal information, such as health information, only to provide the features you use.
• Depending on your state of residence, you may have the right to know what personal information we hold, to access it, to correct it, to delete it and to receive a copy. Send your request to help@fitzee.app; we verify it by checking that it comes from the e-mail address of your account. An authorized agent can make a request on your behalf with your written permission. If we decline your request, you can appeal by replying to our answer.
• We will not discriminate against you for exercising these rights.

11. Changes to this policy

We will publish any change on this page and update its date. We will inform you of significant changes in the app or by e-mail before they take effect. If the purpose of a consent changes, we will ask for your consent again.

12. Contact

Jordan Lauriol — 4 rue Carnot, 92300 Levallois-Perret, France — help@fitzee.app