Updated 19 September 2026

Privacy Policy

This policy explains what FitPit collects, why, who it is shared with, and the choices you have. It applies to the FitPit iOS app and to fitpit.app.

The short version: your camera video never leaves your phone. We store your account, your username and picture, your workout results and your place on the boards, so the app can work. We do not sell your data and we do not show ads.

Who we are

FitPit is operated by Abdellah Boujoujan, Av. Targa, 10210 Rabat, Morocco ("FitPit", "we", "us"), the controller of the personal data described here. You can reach us at support@fitpit.app for anything in this policy.

We process personal data in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, and, for users in the European Economic Area, the United Kingdom and Switzerland, with the GDPR and its UK and Swiss equivalents. Users in those regions can raise any data protection matter with us directly at support@fitpit.app.

What we collect

We collect only what the app needs to count your reps, rank you fairly and connect you with friends and communities.

  • Account: your Sign in with Apple identifier and the email address Apple shares with us (which may be a private relay address), or the email you sign in with.
  • Profile: your username, your optional profile picture, your account type, and the date you joined.
  • Workout results: for each set, the exercise, the reps counted, the time taken, a form score, the points and XP awarded, and when it happened. From these we calculate your streak, level, division rating and rankings.
  • Movement data for verification: a compact stream of body-position points (a stick-figure skeleton of about 33 joints, sampled a few times per second) recorded during a competitive set. It contains no images. We use it to re-check that a set was counted correctly and to prevent cheating.
  • Social: the friends you add, requests you send and answer, the communities and groups you join, and challenges you create.
  • Safety: reports you file (and reports filed about you), and the people you block.
  • Notifications: your device's push token and your notification preferences, if you turn notifications on.
  • Subscription: whether you have an active FitPit Pro subscription, when it started and when it renews, and which product you bought. Apple takes the payment; we never see your card details.
  • Usage and diagnostics: which screens and features are used, app version, device model and operating system, and crash reports. These are linked to a random account identifier, never to your name or email.

What we do not collect

  • Camera video or photos from your workouts. Pose detection runs entirely on your phone; frames are processed in memory and discarded.
  • Your photo library. Only the single picture you choose as your profile or community picture is uploaded.
  • Your location, contacts, microphone, or advertising identifier.
  • Payment card details. Subscriptions are purchased and processed by Apple.

Why we use it

  • To provide the app: counting and scoring sets, streaks, levels, divisions, leaderboards, friends and communities (performance of our contract with you).
  • To keep competition fair: verifying sets, detecting cheating, and applying daily limits (our legitimate interest in a fair game for everyone).
  • To keep people safe: filtering offensive names, reviewing reports, and acting on them (legitimate interest, and our legal obligations).
  • To send notifications you have turned on (your consent, which you can withdraw in Settings or in iOS Settings).
  • To sell and manage FitPit Pro, to unlock what a subscription pays for, and to restore a purchase you have already made (performance of our contract with you).
  • To understand and improve the app and fix crashes (legitimate interest). We do not use this data to profile you for advertising.

What other people can see

Your username, profile picture, streak, level, division and challenge results are visible to other FitPit users on leaderboards, profiles, feeds and community pages. Your email address is never shown to anyone. Reports you file are never shown to the person or community you reported.

Who we share it with

We share data only with service providers who process it on our behalf, under contracts that require them to protect it:

  • Supabase — database, authentication, file storage and server functions.
  • Apple — Sign in with Apple, push notification delivery and subscriptions.
  • Expo — push notification routing.
  • PostHog — product analytics.
  • Sentry — crash and error reporting.
  • Superwall — presenting subscription offers and reading your subscription status.
  • Resend — delivering safety reports to our moderation inbox.

We may also disclose data if required by law, to protect the safety of our users or the public, or as part of a merger or acquisition (in which case this policy continues to apply). We never sell personal data or share it for cross-context behavioural advertising.

International transfers

FitPit is operated from Morocco, so your data is accessed and administered from Morocco. Our providers may also process it in other countries, including the United States and the European Union. Where data leaves the EEA, the UK or Switzerland — including to Morocco — we rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard, and transfers out of Morocco are made in line with Law No. 09-08.

How long we keep it

  • Account, profile, results and social data: for as long as you have an account.
  • When you delete your account in Settings, your account and everything linked to it — profile, results, movement data, friendships, memberships, blocks and notification settings — is deleted immediately. Communities you created stay for their other members, without you as owner.
  • Safety reports: kept for up to two years so repeated abuse can be recognised; reports you filed are unlinked from you when you delete your account.
  • Analytics and crash data: kept by our providers for up to 12 months.
  • Backups: may hold deleted data for a short period until they expire.

Your rights

Wherever you live, you can ask us to access, correct, export or delete your data, and you can delete your account at any time from Settings → Delete account.

If you are in the EEA, the UK or Switzerland, you also have the right to restrict or object to processing and to lodge a complaint with your local data protection authority.

If you are a California resident, you have the right to know, delete and correct personal information and not to be discriminated against for using these rights. We do not sell or share personal information as those terms are defined in the CCPA.

To use any of these rights, email support@fitpit.app from the address linked to your account. We answer within 30 days.

Children

FitPit is not intended for children under 13, or under the minimum age required in your country to consent to data processing (up to 16 in some EU countries). We do not knowingly collect data from them. If you believe a child has an account, contact us and we will delete it.

Security

Data is encrypted in transit and at rest. Access to your data on our servers is restricted by row-level security so that each account can only read what it is allowed to. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Changes

We will update this policy as the app changes. If a change is significant, we will tell you in the app before it takes effect. The date at the top shows the latest version.

Contact

Questions or requests: support@fitpit.app.