Legal

Privacy Policy

Thank you for using Fitlog. We are committed to protecting your privacy. This policy explains what data we collect, how we use and sync it, and the absolute control you have over your information.

If you do not agree with this policy, please discontinue the use of Fitlog.

Last updated: June 3, 2026

1. Data we collect and process

  • Account Data: When you choose to sign up or log in, we receive limited profile information from Firebase Authentication, such as your email address and display name.
  • Workout & Progress Data: Fitlog tracks your physical workouts, exercise routines, custom templates, completed sets, and body measurements. This data is handled in a dual-mode offline/online architecture.
  • Onboarding Analytics: To optimize our app experience, we track onboarding steps, experience levels, and purchase choices. This data is sent via a secure web endpoint to our data log (Google Apps Script). It contains no long-term identifier trackers.
  • Technical Support Info: If you choose to contact us via our in-app Help Center (Report a Bug or Request Help), the app pre-fills an email containing basic non-identifiable hardware details (app version, OS version, device model, weight unit preference) to assist in troubleshooting.
  • Subscription Data: We use third-party services (RevenueCat) to verify your premium access credentials and manage transaction statuses.

2. Data storage & cloud synchronization

  • On-Device Storage: All your templates, session logs, and tracking data are written directly to an isolated, secure SQLite database file built inside your device.
  • Cloud Synchronization: If you log in via an authenticated account, your local SQLite workout database is securely synchronized one-directionally to cloud servers hosted by Google Firebase (Cloud Firestore). This ensures you do not lose data when switching devices. Guest users store data strictly on-device.

3. Third-party service providers

We do not sell your personal or workout information to third parties. We use trusted service providers to handle specialized operations safely:

  • Google Firebase: Used for secure user sign-in and cloud sync database infrastructure.
  • RevenueCat: Used to securely handle app store receipt validation and premium feature locking.
  • Google Apps Script: Used to receive and process fire-and-forget operational analytics regarding onboarding drop-offs.

4. Data deletion & user control

You retain total ownership over your data. Fitlog provides built-in data management utilities:

  • Local Adjustments: You can modify, reorder, or delete individual exercises, workouts, and measurement records at any moment.
  • Database Export: You can completely export your entire training history and body tracking metrics into highly accessible Excel (.xlsx) or CSV files directly to your device storage.
  • Permanent Account & Data Deletion: By navigating to Settings → Delete Account, the app triggers an immediate wipe sequence. This permanently deletes your authentication profile, clears and drops your on-device local database, and invokes a full deletion request to completely purge your subcollections from Cloud Firestore.

5. Notifications

Fitlog utilizes purely local device notifications to handle rest-timer reminders. We do not generate, collect, or transmit unique remote push tokens to external notification servers.

6. Children’s privacy

Fitlog does not knowingly collect or solicit personal information from children under the age of 13. If we discover we have inadvertently received data from a child under 13, it will be deleted instantly.

7. Changes to this policy

We reserve the right to modify this privacy policy to reflect infrastructure updates. Any updates will be pushed directly within the app alongside a revised "Last updated" timeline stamp.

8. Contact information

If you have questions, feedback, or strict compliance concerns regarding your synchronized cloud data, you can directly reach the support team at fitlog.team@outlook.com.