FitPulse Privacy Policy

Personal Information We Collect

Information provided directly. Account sign-in information, consisting of an email address and either a password or a one-time sign-in code or, where Sign in with Apple is chosen, the Apple account identifier, authorization credentials, and the name and email address Apple makes available. This includes an Apple private relay address where that option is chosen. FitPulse also collects the profile built in the application: username, display name, goal, experience level, units, available equipment, time zone, and, where entered, height, sex, date of birth and body weight. FitPulse collects a profile photograph when the user chooses to upload one. New profile photographs are screened before publication as described below. Logged content is also provided directly: workouts, sets and personal records; meals, foods and water; sleep; body weight; habits; meal-correction instructions; and the meal and progress photographs captured in the application.

Information collected automatically. A pseudonymous account identifier and the application, device, operating-system and ordinary network details needed to authenticate requests, deliver the correct application update, maintain subscription access, deliver enabled notifications, and protect the Service. FitPulse does not transmit product-usage events or crash reports to a third-party telemetry provider in release 1.0. Where an outdoor activity is started, device location is read only while that activity is running and is used on the device to compute distance and pace. FitPulse does not upload or store a route or coordinates on its servers. To prevent a pause or process restart from adding false distance, the latest accepted coordinate may be stored temporarily on the device while an activity is active or awaiting cleanup; it is removed when the activity ends, is discarded, or cleanup completes.

Information received from third parties. Where permission is granted, health measurements read from Apple Health or Health Connect; where Sign in with Apple is used, the identity and authorization information described above; and product, transaction and subscription status reported by the app store through the payment and subscription providers identified below.

Subscription rollout records. For accounts participating in the subscription rollout, FitPulse stores minimal account-linked records of the onboarding offer shown, whether it was skipped or a purchase was started, confirmed trial and payment outcomes, and when a free AI allowance was reached. These records stay on FitPulse’s servers and support offer recovery, allowance enforcement, and evaluation of the subscription flow. They contain no health answers, meal content, photographs, voice recordings, or coaching messages, and are not sent to a third-party analytics provider.

Health and Fitness Information

Where permission is granted, FitPulse reads steps, active energy, heart rate, heart-rate variability, resting heart rate, sleep and body weight from Apple Health or Health Connect, and uses those measurements only to compute recovery, activity, nutrition and training figures within the application. Health and fitness information is never used for advertising and is never sold. It is disclosed only to the categories of recipients identified in this policy, and only as necessary to provide the application. Permission may be withdrawn at any time in the operating system’s health settings, and in the application under Settings.

How We Use Personal Information

FitPulse uses personal information to operate the application and for no other purpose. Specifically, it is used to create and authenticate the account; record logged content and compute the scores, targets, estimates and coaching derived from it; return food-search and barcode results; operate the artificial intelligence features described below, where consent has been given; deliver notifications that have been enabled; maintain subscription status and entitlements; make a profile discoverable to signed-in members for friend requests; secure the application, diagnose operational faults, enforce the Terms of Service, prevent abuse, respond to rights requests and comply with legal obligations.

Artificial Intelligence Features and OpenAI

All artificial intelligence features in FitPulse are provided by OpenAI, and no other artificial intelligence provider receives personal information from FitPulse. OpenAI processes the content described below on our behalf. OpenAI does not train models on API data by default, and FitPulse disables provider-side application-state storage where the endpoint supports that control. OpenAI may retain abuse-monitoring logs containing that content for up to 30 days, or longer where law or safety requires it, under its API data policy. Only the content a feature requires is transmitted.

Meal Scanning

A scanned photograph is stored privately and transmitted to OpenAI to estimate the foods it contains and their nutritional values. The meal category assigned to the photograph, and up to six corrections previously made to earlier scans, are transmitted with it so that estimates reflect corrections already made. When a user asks FitPulse to fix a scan result, the same photograph, the current saved estimate and the correction instruction entered by the user are transmitted to OpenAI. FitPulse does not retain readable correction-instruction text. During processing, it keeps only a one-way hash that binds a retry to the same instruction. Opaque request identifiers and a temporary replacement estimate are retained only to recover an interrupted correction and enforce the three-corrections-per-scan allowance. The replacement estimate is removed after it is saved, discarded or superseded, when the meal is deleted, or by an automated process after seven days. That process normally runs every 15 minutes; a service disruption or backlog may delay completion. Name and email are never sent. The saved meal and estimate remain in the diary until the meal is deleted. A private meal photograph may be removed from the meal editor and is otherwise removed with the account.

Voice Logging

A voice recording is transmitted to OpenAI for transcription, and the resulting text is then transmitted to OpenAI to identify the food items it describes. Name and email are never sent. The recording is not retained once it has been transcribed. The transcript remains only with the pending voice-log request long enough to display, correct and safely recover that request. FitPulse removes the raw transcript when the resulting meal is logged or the request is discarded. Otherwise, the request remains recoverable for 24 hours and then enters an automated deletion process that normally runs hourly; a service disruption or backlog may delay completion. The food items saved in the meal diary remain.

Progress Photos and Physique Reviews

Progress photographs are stored privately and are not visible to other users. Where a physique review is requested, or a check-in initiates one, the front and side photographs from that check-in are transmitted to OpenAI for a non-medical assessment of visible physique trends, together with the previous pair of photographs and the date they were taken where a comparison exists. No profile fields are transmitted, and name and email are never sent. The review is stored alongside the photographs, and both remain until deleted in the application or removed with the account.

Coaching Conversations

Coach responses are generated by OpenAI. To produce a response, FitPulse transmits the message sent by the user together with a summary drawn from that user’s own data, including the display name or username on the profile, goal and experience level, units, equipment, injuries, recent workouts and strength ratings, recovery and sleep, calories and water, body weight with its recent trend, habits completed today, the active training program, and the device time zone. The email address is not transmitted. Conversations, and the durable facts the coach retains such as preferences, injuries and schedule, are stored so that coaching remains personalised. Retained facts may be reviewed and deleted under Coach → What your coach remembers.

Weekly Recaps

A weekly recap may be generated in plain language. To draft it, a structured summary of that week is transmitted to OpenAI: the number of sessions, meals, personal records, weigh-ins and sleep nights logged, training volume, goal, weight trend, a calorie suggestion, and the names of up to three lifts that have stalled, including lifts created by the user, with their estimated one-rep maxes. No name, email address or account identifier is transmitted with the recap. No other notification is sent to OpenAI.

Profile Photo Screening

When a user chooses Use photo, FitPulse stores the chosen profile photograph privately and sends a resized copy with file metadata removed to OpenAI to check for objectionable sexual, self-harm or violent content. No profile fields, name, email or account identifier accompany the image. The exact screened copy becomes the public profile photograph only after approval. If screening is rejected, unavailable or interrupted, the existing profile photograph remains unchanged. Automated screening is imperfect; users can report published photographs. Temporary uploads expire after 15 minutes. Temporary uploads and uncommitted public copies enter an automated deletion process after completion, cancellation, rejection or expiry. Cleanup normally runs hourly; service disruptions may delay deletion. FitPulse retains an opaque request receipt and outcome until account deletion for retry recovery and abuse prevention, without keeping the provider response or category scores. An approved photograph remains until replaced, removed or deleted with the account.

How We Disclose Personal Information

FitPulse discloses personal information only to the recipients described below and only for the stated purpose. FitPulse requires third parties that process personal information on its behalf to provide the same or equivalent protection described in this policy.

Service providers that host our database and file storage, located in the United States, which hold account data, logged content and photographs.
OpenAI, as the artificial intelligence processor described above.
Apple as an authentication provider, where Sign in with Apple is chosen, which exchanges an account identifier, name, email address and authorization credentials as needed to create the account, authenticate later sign-ins and revoke the authorization when the account is deleted.
Payment and subscription service providers, which receive a pseudonymous account identifier and app, device, storefront, product and transaction information to process app store purchases and report subscription status; payment card details are not received by FitPulse.
A push notification delivery service, which receives a device push token and the text of each notification sent, and an application update service, which receives device and application version information in order to deliver the correct application bundle.
Open Food Facts, an independent community food database. The device sends typed food-search text or a scanned barcode directly to that service to retrieve food matches. FitPulse attaches no FitPulse account identifier, although Open Food Facts receives ordinary network details such as the request IP address. Its own privacy policy governs its independent processing.
Other users, in the limited circumstances described in the community and user-generated content section below.
Legal and safety recipients, where disclosure is required by law or necessary to protect rights, safety or the integrity of the application.

Community Features and User-Generated Content

FitPulse includes group and friend features that publish certain content to other users. Any signed-in member may search by the beginning of a display name or username to find an account and send a friend request; those search results show the display name, username and any published profile photograph. The same identity information is shown alongside anything posted in a group and on a profile visible to an accepted friend.

Groups. On joining a group, completed workouts, including exercises, sets, reps and weights, and personal records are posted automatically to that group’s feed, and the account appears on the group leaderboard. This may be disabled for each group under Group settings → Share my activity. Group chat messages are visible to every member of that group, and a generic group notification may appear for other members without including the message text or sender identity. Group-chat images published through earlier versions may remain visible to group members until removed.

Publication safeguards. FitPulse applies automated text filters at the server publication boundary to profile text, group names and descriptions, group messages and captions, and text attached to shared group or friend activity. This text filtering stays within FitPulse. New profile photographs stay private until automated screening by OpenAI approves the image for publication. Screening can miss objectionable content, so published photographs remain reportable. Uploaded group-logo publication and group-chat image publication remain disabled in both the application and the server authority. Group logos may instead use curated built-in symbols. Images published through earlier versions may remain visible to their prior audience until removed; they remain reportable, users can remove an existing profile photograph, group administrators can replace a legacy group logo and remove legacy chat images, and FitPulse may remove reported content.

Friends. An accepted friend may view the profile, goal, monthly workout count, personal record count, training streak and, unless disabled under Settings → Sharing → Strength ratings, per-muscle strength scores together with the contributing lifts and their estimated one-rep maxes. Strength sharing is enabled by default.

FitPulse does not display a user’s body weight, nutrition, meal or physique photographs, recovery inputs, or coaching conversations to another user. Blocking a user hides each account from the other. Content posted to a group is licensed to FitPulse only as needed to operate and display the application to the members of that group, as stated in the Terms of Service.

Advertising and Sale of Personal Information

FitPulse does not sell personal information and does not share it for cross-context behavioural advertising. Personal information is not used for advertising or marketing profiling, the application contains no third-party advertising components, and no advertising identifiers are collected.

International Transfers of Personal Information

FitPulse is operated from the United States, and personal information is stored and processed there. Where the application is accessed from another country, the information described in this policy is transferred to the United States, where privacy laws may differ from those in the country of residence. The protections described in this policy continue to apply to that information.

How We Protect Your Information

FitPulse maintains administrative, technical and organisational safeguards designed to protect personal information, including encryption in transit, access controls that scope logged content and meal and progress photographs to the account that created them, and restricted internal access. Approved profile photographs and legacy uploaded group logos are served from public links so that they can be displayed; anyone with a public image link may access it. Legacy images published in group chat are readable by the members of that group. New profile-photo uploads stay in private storage while screening is pending. New uploaded group logos and group-chat images remain disabled. No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

How We Retain Your Information

FitPulse retains an active account and its logged entries, photographs and coaching information while they are needed to provide the application. Individual entries, photographs and coaching memories may be deleted in the application at any time, and deleting an account under Settings → Delete account removes the active profile, fitness and health data, and stored photographs. A raw voice transcript is removed after its meal is logged. If an Apple authorization cannot be revoked immediately during account deletion, its encrypted revocation credential is queued for retry and purged within seven days. To prevent a delayed subscription event from recreating access after account deletion, FitPulse retains only a one-way-hashed billing-integrity record for 120 days after the latest relevant event. OpenAI’s separate, feature-specific retention is described above. FitPulse does not retain third-party product-analytics or crash-report events for release 1.0. Offer presentation, skip and purchase-intent events enter an automated deletion process after 90 days. Durable offer decisions, allowance receipts and minimal billing evidence remain until account deletion. All account-linked subscription-rollout records are removed when the account is deleted; the existing limited billing-integrity record is retained separately as described above.

Your Privacy Rights and Choices

Depending on the jurisdiction of residence, individuals may have the right to access their personal information, to correct it, to delete it, to obtain a copy of it, to withdraw consent, and to object to or restrict certain processing. FitPulse does not discriminate against any individual for exercising these rights. Several of these controls are available directly in the application: individual entries, photographs and coaching memories may be deleted; artificial intelligence processing may be withdrawn under Settings → AI data sharing; remote notifications and their categories may be configured under Settings → Notifications and disabled in the operating system settings; and the account may be deleted under Settings → Delete account. Requests for a full export of personal information or other privacy requests may be sent to the address in the contact section below and may require verification of account ownership. Washington consumers should also review the separate Washington Consumer Health Data Privacy Policy linked on this page.

Children and Minimum Age

FitPulse is for users 14 and older, the same minimum the application enforces at sign-up and the same minimum stated in the Terms of Service. The application is not intended for children under 14, and personal information is not knowingly collected from them. Where such information is identified, the associated account and its data are deleted.

Changes to This Policy

This policy is updated as the application changes, and the effective date shown at the top of this page is revised accordingly. FitPulse provides notice of a material change where required by law and requests new consent before using personal information for an additional purpose where consent is required.

Contact Us

FitPulse is operated by Jackson Baker in the United States. Questions about this policy, requests for a copy of personal information, and erasure requests may be sent to [email protected].