Privacy Policy
Effective date: September 20, 2026
This Privacy Policy explains how Tomasz Król App Development ("we," "us," or "our") collects, stores, uses, and protects your personal data in connection with your use of the Fitenics mobile application on iOS and Android (the "App") and our website (collectively, the "Services").
By using the Services, you agree to the collection and use of information in accordance with this policy.
1. Personal Data We Collect
We collect data to provide you with a personalized AI fitness experience. This includes:
1.1 Data You Provide Directly
- Account Information: Name, email address, password, age, and subscription details.
- Physical Profile: Gender, height, weight, fitness level, workout preferences, equipment availability, and physical limitations or injuries you choose to disclose. Health-related information such as injuries is processed only with your explicit consent, which you give by entering it, and you can remove it at any time in your profile or by deleting your account.
- Communications: Content of your messages when you contact support or interact with our social media channels.
- AI Coach Conversations: When you use the AI Coach feature (powered by Firebase AI and Google Gemini models), we process the text of your conversations along with relevant profile context to provide personalised fitness guidance. The profile data shared with the AI includes your name, age, weight, gender, fitness goals, fitness level, number of workout days per week, and your personalised workout plan. This data is transmitted to AI models only when you actively use the AI Coach feature. Conversation history is stored locally on your device only and is never uploaded to our servers or any third-party service. If you do not open or interact with the AI Coach, none of your data is sent to any AI model.
1.2 Data Collected Automatically
- Usage Data: Details about how you use the App, such as features accessed, time spent, workout logs, and progress statistics.
- Device Information: Device model, operating system version, unique device identifiers (e.g., Advertising ID), time zone, and IP address.
- Log Data: Server logs including crash reports, system activity, and timestamp of access.
- Transaction Data: Purchase history and subscription status (processed securely by Google Play or RevenueCat; we do not store your full credit card details).
1.3 AI Coach Data Processing
The AI Coach is an optional in-app feature. It uses Firebase AI and Google Gemini models to generate personalised responses. When you send a message to the AI Coach, the following information is included in the request sent to the AI model:
- Your name, age, weight, gender
- Your fitness goals and fitness level
- Your number of workout days per week
- Your personalised workout plan
- The text of your conversation with the AI Coach
Important: This data is transmitted to the AI model only when you actively use the AI Coach feature. If you never open or interact with the AI Coach, none of the above information is sent to any external AI service. Conversation history is stored locally on your device only and is never uploaded to our servers or any third-party service.
Note: Unlike some other fitness apps, we do not collect body scan photos, use camera movement tracking, or integrate with Apple HealthKit/Google Health Connect at this time.
2. Purposes and Legal Bases for Processing
We process your personal data for specific purposes based on legal grounds (GDPR/UK GDPR):
| Purpose | Legal Basis |
|---|---|
| To provide and maintain the Services (e.g., generating workout plans, AI chat). | Performance of Contract |
| To improve and develop new features (e.g., analyzing usage trends via Firebase). | Legitimate Interest |
| To process payments and subscriptions. | Performance of Contract |
| To provide customer support. | Legitimate Interest |
| To ensure security and prevent fraud. | Legitimate Interest / Legal Obligation |
| To serve relevant advertisements (via Google Ads). | Consent / Legitimate Interest |
| To comply with legal obligations (e.g., tax laws). | Legal Obligation |
3. Sharing Your Personal Data (Processors)
We do not sell your personal data. We share data only with trusted third-party service providers ("Processors") who assist us in operating the App:
- Infrastructure & Database: Google Firebase (Firestore) – USA/Global. Stores user data and chat history.
- AI Intelligence: Firebase AI (Google Gemini models) – Global. Processes AI Coach conversations. Data is transmitted to these services only when you actively use the AI Coach feature; no data is sent if the feature is not used.
- Analytics & Advertising: Google Firebase Analytics & Google Ads – USA. Helps us understand app usage and measure ad performance.
- Payments (Android): Google Play (Google) – USA. Processes payment for subscriptions purchased in the Android app.
- Payments (iOS): Apple App Store (Apple Inc.) – USA. Processes payment for subscriptions purchased in the iOS app.
- Subscription management: RevenueCat – USA. Validates in-app purchases and manages subscription status on both platforms.
These providers process data strictly in accordance with our instructions and applicable privacy laws.
4. Subscriptions and Billing
Fitenics offers paid subscription plans that unlock premium features. All subscription purchases, renewals, and payments are handled exclusively through the app store of your platform: the Apple App Store (Apple Inc.) on iOS or the Google Play Store (Google LLC) on Android. We do not process credit or debit card details directly.
4.1 Subscription Data We Collect
- Subscription status (active, expired, cancelled, or in trial).
- Subscription product ID and plan type (e.g., monthly, annual).
- Purchase date and renewal/expiry date.
- Whether a free trial has been redeemed on your account.
4.2 How Subscriptions Work
- Free Trial: Where offered (currently 7 days), a free trial automatically converts to a paid subscription unless cancelled at least 24 hours before the trial period ends. On iOS, a free trial can be used once per Apple ID.
- Auto-Renewal: Subscriptions renew automatically at the end of each billing period unless cancelled at least 24 hours before the end of the current period. Payment is charged to your Apple ID account (iOS) or Google Play account (Android) at confirmation of purchase, and renewal is charged within 24 hours before the end of the current period.
- Cancellation: On iOS, go to Settings > [your name] > Subscriptions, choose Fitenics, and tap Cancel Subscription. On Android, use Google Play Store > Subscriptions. Deleting the app does not cancel your subscription. Cancelling stops future renewals; you retain access to premium features until the end of the current paid period. No partial refunds are issued for unused time.
- Refunds: Refund requests are governed by the policy of the store where you purchased. On iOS, request a refund from Apple at reportaproblem.apple.com; on Android, contact Google Play support. We do not process refunds directly.
- Price Changes: If subscription prices change, we will notify you in advance through the App or by email. Continued use after the effective date constitutes acceptance of the new pricing.
The legal basis for processing subscription data is Performance of Contract.
5. Cookies and Tracking Technologies
We and our partners use cookies, Software Development Kits (SDKs), and similar technologies (e.g., Firebase SDK) to:
- Authenticate your identity.
- Analyze app performance and crashes.
- Deliver relevant advertisements (unless you opt-out).
Advertising ID: You can reset your device’s Advertising ID or opt-out of personalized ads in your device settings (Settings > Privacy > Tracking/Ads).
6. International Data Transfers
Our Services are hosted on Google Cloud Platform (Firebase), primarily in the United States and other global locations. If you access the App from the European Economic Area (EEA), UK, or Switzerland, your data may be transferred outside your jurisdiction. We rely on Google's Data Processing Addendum and Standard Contractual Clauses (SCCs) to ensure your data remains protected in compliance with GDPR.
7. Data Retention
We retain your personal data only as long as necessary:
- Active Accounts: We keep your data while your account is active to provide the Services.
- Deleted Accounts: If you request account deletion, we generally delete your personal data within 30 days, ensuring all backups are purged.
- Legal Obligations: We may retain transaction records (e.g., purchase history) for longer periods (up to 7 years) to comply with tax and accounting laws.
8. Your Privacy Rights
Depending on your location (EU, UK, California, etc.), you have specific rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data ("Right to be Forgotten").
- Restriction/Objection: Restrict or object to certain processing (e.g., for marketing).
- Portability: Receive your data in a structured, machine-readable format.
- Withdraw Consent: Withdraw consent at any time where we rely on it.
To exercise these rights, please contact us at whataking.development@gmail.com. We may verify your identity before fulfilling requests.
9. Children's Privacy
Our Services are intended for users who are at least 13 years of age. We do not knowingly collect personal data from children under 13. If you are under the age of digital consent in your country (16 in some EU countries, including Poland and Germany), you may use the Services only with the permission of a parent or guardian. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete such information and terminate the account immediately.
10. Security
We implement robust technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS) and at rest (encrypted database storage). However, no internet transmission is 100% secure, and we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email. The "Effective date" at the top of this page indicates when the latest changes took effect.
12. Contact Us
If you have questions about this Privacy Policy or your data, please contact us:
Tomasz Król App Development
Email: whataking.development@gmail.com