Privacy Policy & Data Retention Practices

App: FitTime (com.fittime.healthapp)
Effective Date: August 21, 2026
Last Reviewed & Updated: September 1, 2026

Summary: FitTime ("we", "our", or "us") values your trust and is committed to safeguarding your privacy. This Privacy Policy details the exact types of information we collect, how and why it is processed, our explicit data retention schedules, and how you can exercise your data deletion rights.

1. Information We Collect

We collect only the information necessary to provide tailored diet, weight management, hydration, and physical activity features:

Personal & Account Information: Name, email address, and phone number (for account creation, authentication, and security verification).
Fitness, Health & Body Metrics: Age, biological sex, height, current weight, target weight, dietary preferences (e.g., vegetarian or non-vegetarian), sleep/wake schedules, and weight-loss goal pace.
Daily Activity & Nutrition Logs: Food items logged, estimated calorie and macronutrient breakdowns, daily water intake amounts, and weight progression entries.
Physical Activity / Sensor Data (Step Counter): When granted the android.permission.ACTIVITY_RECOGNITION permission, the app accesses your device's built-in step counter sensor to calculate daily active step totals in real time.

2. How We Use Your Information

Your data is strictly utilized for core app features and is never sold to third parties, data brokers, or advertisers:

To calculate your Basal Metabolic Rate (BMR), Total Daily Energy Expenditure (TDEE), and daily safe calorie/macro targets.
To deliver personalized Indian meal recommendations and step-by-step recipes.
To send scheduled water intake reminders during your waking hours.
To track and visualize your historical weight changes and progress over time.

3. Data Retention Policy

Explicit Retention Practices:

We store and retain user data only for as long as necessary to provide the services requested, or until you choose to delete your account.

Data Category	Retention Period	Reason for Retention
Account & Profile Data (Email, Name, Age, Height)	Retained while your account is active.	Maintains your user account and profile settings for ongoing calorie and nutrition planning.
Nutrition & Food Logs	Retained while your account is active.	Allows you to view past meal history, daily summaries, and nutrition analytics.
Hydration Logs	Retained while your account is active.	Enables daily hydration progress tracking and historical intake summaries.
Weight History Logs	Retained while your account is active.	Generates trend line charts and calculates progress toward target weight.
Sensor Data (Step Counter / Activity)	Processed in real-time on-device; only daily aggregated step count is stored while account is active.	Displays current daily step count. Raw sensor readings are never stored or uploaded.
Temporary AI Chat Context	Session-only (ephemeral).	Provides contextual conversational coaching. Not retained permanently on AI model servers.

4. Data Deletion Policy & How to Request Deletion

Your Right to Delete Data:

You have the absolute right to delete your personal data and account at any time. When an account deletion is requested, all personal information, body metrics, meal logs, hydration logs, and weight history are permanently and irreversibly purged from our active databases within 30 days. Encrypted backup snapshots are rotated and completely overwritten within 60 days.

You can request complete account and data deletion through either of the following methods:

Method 1 (In-App Deletion): Open the FitTime app > Go to Profile / Settings > Tap Delete Account > Confirm deletion.
Method 2 (Web Deletion Portal): Visit our dedicated web deletion request page at https://fittime-beta.vercel.app/delete-account, enter your registered email address, and submit the request.
Method 3 (Email Support): Send an email to support@fittime.app with the subject "Data Deletion Request" from your registered email address.

5. Third-Party Service Providers

We work with trusted industry-standard cloud and infrastructure providers who maintain strict data protection standards:

Supabase: For secure database hosting, user authentication, and data encryption at rest (AES-256).
Google Firebase Cloud Messaging (FCM): For sending timely push notifications and water reminders to your device.
Phone.Email Authentication: For optional phone number and email OTP verification during user registration and sign-in.
Google Generative AI Services: For processing natural language food inputs into nutritional calorie estimations. Data sent is processed ephemerally and is not used to train global public AI models.

6. Security of Your Data

We apply robust administrative and technical safeguards to protect your personal information. All network traffic between the FitTime app and our servers is secured using 256-bit Transport Layer Security (TLS/HTTPS). Database access is protected by Row-Level Security (RLS) policies ensuring users can only access their own data.

7. Children's Privacy

FitTime is designed for adult and teenage health management (13 years of age and older). We do not knowingly collect or solicit personal information from children under the age of 13. If we discover that a child under 13 has provided personal data without parental consent, we will promptly delete that data.

8. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our legal requirements or app features. When changes are made, the "Last Updated" date at the top of this page will be revised.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Team at:

Email: support@fittime.app
Web: https://fittime-beta.vercel.app