Privacy
Privacy policy
Effective 26 September 2026
FitHarmony is a fitness app for iPhone and Apple Watch, and this website. This policy explains what data FitHarmony handles, where it goes, and what you can do about it. If anything here is unclear, write to contact@fitharmony.app.
The short version
- Most of what you track stays on your iPhone: your food journal, your workouts and plans, and what the app reads from Apple Health.
- Some of it reaches our server so that features work: your account, your friends and what you share with them, your Garmin data if you connect Garmin, and your conversations with Bob.
- The AI features send what they need to OpenAI. Bob reads your health data only when you turn on Health data & AI.
- We don't sell your data.
- Deleting your account in the app deletes everything we hold about you.
Who is responsible
FitHarmony is the controller of the personal data described here. You can reach us at contact@fitharmony.app.
What stays on your iPhone
Your food journal, your custom workouts and training plans, your recipes and your profile (age, sex, height, weight, goal and activity level) are stored on your iPhone.
With your permission, FitHarmony reads data from Apple Health: sleep, heart rate, heart rate variability, breathing rate, blood oxygen, wrist temperature, VO₂ max, activity, workouts with their routes, and body measurements. It writes workouts, nutrition and body measurements back to Apple Health. We never use Apple Health data for advertising.
What reaches our server, and why
- Your account: your email address and a hashed password, or your Sign in with Apple identity.
- Readiness: to calculate your readiness score, the app sends the server a few recent days of sleep, heart rate, heart rate variability and breathing data. The server calculates the score, sends it back, and does not keep that data.
- Garmin, if you connect it: Garmin sends us your activities (with their GPS routes and heart rate), sleep, heart rate variability, stress, Body Battery, blood oxygen, breathing rate, VO₂ max and fitness age. We keep them to build your readiness and show them in the app. Workouts and routes you send to your Garmin go to Garmin Connect. You can disconnect Garmin at any time.
- Strava, if you connect it: the workouts you choose to share are uploaded to Strava. Nothing is imported from Strava.
- Friends: your friends see summaries of your recent activities, and, for each friend you allow, live data while you record a workout on Apple Watch: heart rate, distance, time and your position on the map. Workouts and recipes you send to a friend pass through our server.
- Bob: what you write to Bob, the conversation, and the notes he keeps about you are stored on our server so the conversation can continue. Photos you send him are read to recognise food or a nutrition label, and voice messages are turned into text.
- Subscription: your App Store receipt, which we check with Apple to know whether you subscribe.
- Notifications: a device token, so we can send you the notifications you have turned on.
- Crash reports: if the app crashes, a report about the crash and your device, so we can fix it.
- This website: the routes you save in your web account, and your email address if you sign up for product news.
- Feedback and feature requests you send us from the app.
AI features
Bob, the nutrition report, the suggested workout, the meal plan and the food scan use OpenAI, a US company, to produce their answers. Each sends only what it needs:
- Talking to Bob: what you write, the conversation so far, and the notes Bob keeps about you.
- With Health data & AI on, Bob can also look up what an answer needs: meals, workouts, your plan, sleep, daily numbers and your profile. Photos and voice messages you send him, and the nutrition report (your age, sex, height, weight, goal, activity level and calorie target, and a week of what you ate), are covered by the same switch.
- Suggested workout, at most once a day: your sleep, readiness and recovery scores, training load, goal and preferred workouts.
- Meal plan, at most once a week: your age, current and target weight, goal, and calorie and macro targets.
- Food scan: the photo, recording or text you give it when you log food.
- Tapping one of Pip's lines: the line and the question it asks.
You can turn Health data & AI off at any time in the app. OpenAI processes this data under its own API terms.
Analytics and advertising
- In the app: we measure how the app is used with PostHog (hosted in the EU) and Meta's app SDK.
- Ads: the app can show an ad from Google AdMob in one case, when someone without a subscription opens a suggested workout. Where the law requires it, the app asks for your consent before ads are personalised.
- On this website: Google Ads and the Meta Pixel measure our advertising, and PostHog (EU) shows us how the site is used. They set cookies, so they load only if you accept them in the cookie banner. You can change your choice at any time with Cookie settings at the bottom of the home page; declining removes their cookies.
Services we use
- Apple: Sign in with Apple, App Store purchases, push notifications, and WeatherKit for the forecast of a trail you open, which receives the trail's location. Apple Health data stays on your device, apart from what this policy describes.
- OpenAI (United States): the AI features.
- Garmin and Strava: only if you connect them.
- Google (AdMob, Google Ads), Meta (app SDK, Pixel) and PostHog (EU): analytics and advertising.
- Mapbox: maps, and the preview images of routes, which are drawn from a route's coordinates.
- SendGrid: password reset emails.
- Bringo (Romania): only if you order your shopping list through it.
Your account, Bob's conversations, Garmin data, shared items and crash reports are kept on servers we run ourselves.
Some of these providers are in the United States. Where data leaves the European Economic Area, it is protected by the provider's safeguards, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
Why we may use it
- To provide the app and your account: because you asked for the service.
- Health data in the AI features: your explicit consent, given with Health data & AI.
- Cookies on this website: your consent, given in the cookie banner.
- Analytics and advertising in the app: your consent where the law requires it, and otherwise our legitimate interest in improving FitHarmony.
- Crash reports and security: our legitimate interest in keeping FitHarmony working and safe.
How long we keep it
- Everything on our server that belongs to your account (your account, Bob's conversations and notes, Garmin data, friends and shared items, crash reports): until you delete your account. Deleting your account deletes all of it.
- A note Bob keeps: until you ask him to forget it.
- Your email address for product news: until you ask us to remove it.
- What is on your iPhone: until you delete it or the app.
Your rights
You can ask to see, correct, delete or get a copy of your data, object to or restrict how we use it, and withdraw your consent at any time (for the AI features, with the Health data & AI switch). Deleting your account in the app deletes everything we hold about you; for anything else, write to contact@fitharmony.app. You can also complain to Romania's data protection authority, ANSPDCP (dataprotection.ro), or to the authority where you live.
Security
Connections to our server use HTTPS. Passwords are stored hashed, and the tokens for Garmin, Strava, Sign in with Apple and notifications are stored encrypted.
Children
FitHarmony is not meant for children under 16.
Changes to this policy
When this policy changes, we update the date at the top. If a change affects what Health data & AI covers, the app asks you again.