FitDash Privacy Policy

Last updated: July 21, 2026

FitDash ("we", "our", "us") provides a fitness training and tracking mobile application. This policy describes how we collect, use, and protect your information.

Information we collect

Account data: Email address and authentication identifiers when you sign up via email, Google, or Apple (Firebase Authentication). During onboarding we may create a temporary anonymous Firebase account so AI features can authenticate before you finish sign-up.
Profile & training data: Name, date of birth, body metrics (height, weight, body fat), goals, equipment, program preferences, workout logs, and meal entries you enter in the app.
Health platforms (optional): With your explicit permission, we may read height, weight, and sleep data from Health Connect (Android) or Apple Health (iOS) to personalize training and, if you opt in, AI Coach recovery advice. We do not write data back to these platforms.
Sleep summaries (optional): Nightly sleep duration derived from health platforms or your reported rest feeling may be stored on your device. Sleep is shared with AI Coach only when you enable sleep sharing in Settings.
Camera / photos: Photos you capture for meal/macro analysis (processed for nutrition estimates).
AI Coach conversations: Messages you send to AI Coach and related conversation history stored encrypted on your device. Message content is not stored in our cloud database; only a daily usage count is kept in the cloud.
Subscription status: Managed via RevenueCat and your app store account; we do not store payment card details.
Local device storage: Sensitive data is encrypted on-device using AES-256 (Hive + secure key storage).
Technical / abuse protection: Firebase App Check (for example Play Integrity on Android or DeviceCheck on iOS) may verify that requests come from a genuine FitDash app.

How we use information

Generate and adapt workout programs (including AI-assisted program generation)
Sync selected data across devices when signed in (Firebase Firestore)
Provide premium features when subscribed
Analyze meal photos and notes for macro estimates (Google Gemini)
Power AI Coach responses using your message plus relevant training, nutrition, profile, and (if enabled) sleep context (Google Gemini via our Cloud Functions)

What syncs to the cloud

When you are signed in, we sync profile data, programs, workout logs, and daily nutrition totals (aggregated macros) to Firebase Firestore. The following generally remain on your device only: AI Coach chat history, sleep samples and sleep-share preference, and individual meal details/photos (photos are sent for analysis when you request it, but meal rows are not synced as a full history).

Data sharing

We use third-party services to operate the app:

Google Firebase (authentication, cloud database, Cloud Functions, Storage, App Check)
RevenueCat (subscription management)
Google Gemini (AI processing for meal analysis, AI program generation, and AI Coach — prompts may include your message, profile, training summaries, nutrition summaries or meal details when relevant, and optional sleep context; meal analysis may include images/text you submit)
Apple / Google — Sign in, Health platforms (read-only when permitted), and app store billing

We do not sell your personal data. We do not use third-party advertising SDKs or sell data for advertising.

AI processing note

AI features send necessary context to Google Gemini through our secure Cloud Functions to generate a response. FitDash does not use your AI Coach chats as a permanent cloud training dataset. Third-party processors may process data according to their own terms and retention practices for the duration needed to provide the service.

Data retention & deletion

You can delete your account in the app under Settings → Delete Account. This removes your Firebase account and cloud data we control, and clears local app data on the device (including AI chat and sleep summaries). Active subscriptions must be cancelled separately in your Google Play or App Store account. See Delete your account.

Security

We use industry-standard encryption for local storage and secure cloud infrastructure. No method of transmission over the internet is 100% secure.

Children

FitDash is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

Changes

We may update this policy. Material changes will be reflected by updating the date above. Continued use after changes constitutes acceptance of the updated policy where permitted by law.

Contact

Questions: fitdash.support@gmail.com