FitSum Privacy Policy
Last updated: 23 July 2026 (pre-launch draft)
Evovi Ltd ("Evovi", "we", "us", "our"), a company registered in England & Wales (Company No. 16985656), operates the FitSum mobile application ("FitSum", "the App"). This Privacy Policy explains what personal data we collect, why, how it's used, who we share it with, how long we keep it, and how you can access, export, or delete it.
If you have questions about this policy or how your data is handled, contact us at support@fitsumapp.com.
1. Data we collect
Account data: email address, authentication identifiers (including Apple Sign-In identifiers where used).
Fitness and health data you provide or generate in-app:
- Workout logs: exercises, sets, weights, reps, RPE, timers, supersets.
- GPS routes and distance/pace data for outdoor activities.
- Body measurements, body weight, and measurement history.
- Progress photos.
- Training preferences, goals, targets, and coaching state (e.g. recovery/readiness estimates).
- Activity Points, step counts, and daily activity history.
- Heart rate data (from Bluetooth heart rate monitors, or from Apple Health / Health Connect if you grant access).
- Gym pass details you choose to store, including member IDs, PINs, and card photos.
Health platform data: with your permission, FitSum reads and/or writes data to Apple Health (HealthKit) and/or Health Connect, which may include steps, distance, calories burned, exercise sessions and routes, heart rate, resting heart rate, VO₂ max, weight, height, body fat percentage, lean body mass, bone mass, and basal metabolic rate. You control this access through your device's Health/Health Connect permissions at any time.
Device data and permissions: location (including background location while an outdoor workout is being tracked), motion and step data, camera and photo library access (for progress photos and gym pass images), Bluetooth (to connect to heart rate monitors), and notification permissions.
Biometric authentication: if you enable Face ID / Touch ID / fingerprint login, this is handled entirely by your device's secure hardware. FitSum never receives, transmits, or stores biometric data.
Usage analytics: anonymous, aggregated interaction data (e.g. feature usage, session duration, error/crash reports) used to improve the app. This does not include the content of your workouts, weights, measurements, notes, or GPS routes, and cannot be linked back to you individually. You can opt out at any time in Profile → Data & Privacy → Analytics & Tracking.
Purchase data: subscription status and transaction identifiers are handled by our payment processor (RevenueCat) and the App Store / Google Play. We do not receive or store your payment card details.
2. Why we use this data
- To provide core app functionality: logging workouts, tracking activity, generating coaching recommendations, and syncing your history.
- To calculate personalised recommendations (e.g. workout suggestions, muscle readiness, recovery estimates) based on your training data.
- To sync with Apple Health / Health Connect where you've granted permission.
- To provide customer support.
- To detect, diagnose, and fix crashes and errors.
- To understand feature usage and improve the app (analytics, only if not opted out).
- To manage subscriptions and entitlements.
- To comply with legal obligations.
We do not sell your personal data to third parties, and we do not use your health or fitness data for advertising.
3. Legal basis for processing (UK/EU users)
We process your data on the following bases: performance of a contract (providing the app's core features to you), consent (e.g. health platform access, analytics, biometric login — all of which you can withdraw), and legitimate interest (e.g. crash reporting, security, fraud prevention).
4. Third parties we share data with
| Service | Purpose | Data involved |
|---|---|---|
| Supabase | Backend database, authentication, file storage | Account data, all app data listed above |
| Sentry | Crash and error reporting | Device diagnostics, error logs (not workout/health content) |
| Amplitude | Anonymous product analytics | Anonymous interaction events (opt-out available) |
| RevenueCat | Subscription and purchase management | Subscription status, purchase/transaction identifiers |
| Apple / Google | Health platform sync, sign-in, app store billing | Health data (with your permission), account identifiers, purchase receipts |
Each of these providers processes data under its own privacy policy and only accesses what's necessary to perform its function for us. We do not sell data to data brokers or use it for third-party advertising.
5. Where your data is stored
Your account data is stored on Supabase infrastructure. The specific hosting region will be confirmed here before public launch.
6. Data retention
We retain your account data for as long as your account remains active. If you delete your account, your data is permanently deleted as described in Section 8, except where we're required to retain certain records by law (e.g. financial/transaction records for tax purposes).
7. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Export your data in a portable format (JSON or CSV) via Profile → Data & Privacy → Export My Data.
- Delete your account and data (see Section 8).
- Withdraw consent for optional processing (analytics, health sync, biometric login) at any time.
- Object to or restrict certain processing.
- Lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office, ico.org.uk).
To exercise any of these rights, contact support@fitsumapp.com.
8. Deleting your account and data
You can permanently delete your account and all associated data at any time:
In the app: go to Profile → Data & Privacy → Delete My Account, review the data summary shown, type DELETE to confirm, and tap Delete permanently. This requires an internet connection.
From the web (if you no longer have the app installed): visit fitsumapp.com/delete-account and follow the instructions there, or email support@fitsumapp.com with the subject "Account Deletion Request" from your registered email address. We will process web/email requests within 30 days and confirm once complete.
Account deletion is permanent and irreversible. All workouts, measurements, photos, preferences, and history are permanently deleted and cannot be recovered.
Deleting your account does not automatically cancel an active subscription. Cancel separately through the App Store or Google Play if applicable (see our Terms of Service).
9. Children's privacy
FitSum is not directed at children under 13, and we do not knowingly collect personal data from anyone under 13. If we become aware that we've collected data from a child under 13 without appropriate consent, we will delete it. If you believe a child has provided us with personal data, contact support@fitsumapp.com.
10. Security
We use industry-standard measures (encryption in transit, access controls, secure authentication) to protect your data. No system is 100% secure, and we cannot guarantee absolute security.
11. Health disclaimer
See the Health & Fitness Disclaimer in our Terms of Service. In short: FitSum is not a medical device and does not provide medical advice.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified in-app or via email before they take effect.