Privacy Policy

Last updated: July 6, 2026

    Summary: FitFlow is a home workout app for iOS and Android. Most of your fitness data lives on your device. We use Firebase for analytics, Google AdMob to show ads to free users — with a Google-certified consent form asking users in the EEA, UK, and Switzerland about personalized ads — and, on iOS only, Apple HealthKit (with your permission) to read activity data and save your workouts. The Android app does not connect to Health Connect or any other health or fitness platform. We do not sell your personal information.

1. Introduction

FitFlow ("the App") is a home workout application developed by Shayona ("we", "us", or "our"). This Privacy Policy explains how we collect, use, and share information when you use our iOS and Android applications.

By using FitFlow you agree to the practices described here. If you don't agree, please don't use the App.

2. Information We Collect

a) Stored on your device only

The following is kept on your device using the platform's standard local storage and is not transmitted to our servers:

Fitness preferences: chosen fitness level (Beginner, Intermediate, Advanced), primary goal, and weekly workout goal.
Optional profile fields: age, height, current weight, and goal weight. Used to personalize workout recommendations and post-workout summaries. Not transmitted to our servers, Firebase, or any ad partner.
Display name: an optional name you provide during onboarding.
Workout history: records of completed workouts including date, duration, and estimated calories burned.
Custom workouts: any workouts you create within the app.
Plan progress, achievements, weekly challenges, streak data.
App preferences: notification reminder times, voice-coach selection, and reminder schedules.

b) Apple HealthKit — iOS only (with your permission)

If you grant the iOS version of FitFlow access to Apple Health, we may:

Read step count, active energy burned, and heart rate to display today's activity on the Home screen and inside the workout player.
Write a workout session to Apple Health when you finish a workout, so it appears alongside your other activity data.

HealthKit data is not transmitted to our servers and is not used for advertising. You can revoke this permission at any time via Settings → Privacy & Security → Health → FitFlow.

Android: the Android version of FitFlow does not integrate with Health Connect or any other health or fitness platform, and does not read or write any health data.

c) Analytics and crash diagnostics

We use Firebase Analytics (Google Analytics for Firebase) — and, where enabled, Firebase Crashlytics — to understand how FitFlow is used and to fix bugs. The events we record include:

App installs, app opens, screen views.
Workouts started and completed (workout name, duration, calorie estimate, exercise count).
Ad impressions by format, feature usage, meals logged, paywall views, onboarding completion.
Subscription purchases, including the store transaction identifier (the Apple StoreKit transaction ID on iOS, or the Google Play purchase/order token on Android), product ID, price, and currency.
Crash and stability reports (where Crashlytics is enabled).

These events are linked to an app-generated installation/analytics identifier, not to your name or email. We do not pass your fitness or health data to Firebase.

d) Advertising data

Free users see advertisements served by Google AdMob. As of app version 1.5.5 the AdMob waterfall also mediates through Meta Audience Network and Unity Ads. To deliver and measure those ads, AdMob and its mediation partners may collect:

A mobile advertising identifier — the IDFA on iOS (only if you allow it via the App Tracking Transparency prompt) or the Advertising ID on Android. In regions where consent is required (EEA, UK, Switzerland), a Google-certified consent form asks whether you agree to personalized ads. If you decline, are not asked, or have not granted the iOS tracking prompt, ads are still shown but in a non-personalized form.
Approximate location derived from IP address.
Device information (model, OS version, language, screen size).
Ad interaction events (impressions, clicks, conversions).

Premium subscribers do not see ads and the AdMob SDK does not request ad inventory for them.

3. How We Use Your Information

To provide the workout, plan, achievement, and nutrition features of the App.
To measure how FitFlow is used so we can improve it (analytics).
To diagnose and fix crashes (Crashlytics, where enabled).
To deliver and measure advertisements served to free users (AdMob), and to gather and honor your ad-consent choices (Google UMP).
To process subscription purchases through Apple StoreKit (iOS) or Google Play Billing (Android).
To send local workout reminders, if you allow notifications.

4. Third-Party Services

a) Firebase (Google LLC)

Firebase Firestore serves the workout exercise library to the app in read-only mode.
Firebase Analytics records the events listed above.
Firebase Crashlytics captures crash reports (where enabled).

See Firebase Privacy & Security for details.

b) Google AdMob (Google LLC)

AdMob serves advertisements inside the free version of FitFlow: App Open ads on launch, banner and native ads on the Home screen, Interstitial ads between screens, and optional Rewarded ads to unlock a single locked workout. AdMob's data practices are described at Google's Advertising Privacy Policy.

c) Meta Audience Network (Meta Platforms, Inc.)

As of app version 1.5.5, FitFlow uses Meta Audience Network as an AdMob mediation partner. When Meta wins an ad slot in the AdMob waterfall, Meta receives a limited request payload — the device advertising identifier if you allowed it via the ATT prompt (iOS) or the Advertising ID (Android), coarse device information, and the ad-placement type — so it can bid and, if it wins, deliver the ad and measure the impression. Ad-consent choices you make in the Google UMP form are forwarded to Meta automatically. Meta's data practices are described at Meta's Privacy Policy and Audience Network Data Processing Terms.

d) Unity Ads (Unity Technologies)

As of app version 1.5.5, FitFlow uses Unity Ads as an AdMob mediation partner. Unity receives the same limited payload described above when it wins an ad slot in the AdMob waterfall. Ad-consent choices from the Google UMP form are forwarded to Unity automatically. Unity Ads' data practices are described at the Unity Game Player and App User Privacy Policy.

e) Google User Messaging Platform (UMP)

We use Google's User Messaging Platform SDK to gather ad-consent decisions from users in the EEA, UK, Switzerland, and applicable US states, and to let those users revisit or withdraw their decision in the app — Settings → Privacy Choices (Ads) on iOS, or Settings → Manage ad consent on Android. Until consent is gathered where it is required, the App requests only non-personalized ads. Consent choices are forwarded to all mediation partners named above.

f) Apple StoreKit (iOS) and Google Play Billing (Android)

Subscription billing is handled entirely by the platform app store — Apple on iOS, Google on Android. We do not see your Apple ID or Google account, payment method, or full transaction history. See Apple's Privacy Policy and Google's Privacy Policy.

g) Apple HealthKit (iOS only)

HealthKit access is opt-in and described in section 2(b). Apple processes this data on-device only. The Android app does not access any health platform.

5. Children's Privacy

FitFlow is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we serve ads to a user we have reason to believe is under 13, AdMob is configured to deliver only non-personalized advertising for that user.

6. Your Choices

a) App Tracking Transparency (iOS)

The first time FitFlow tries to access your advertising identifier, iOS will show the App Tracking Transparency prompt. You can change your decision at any time via Settings → Privacy & Security → Tracking → FitFlow.

b) Ad consent (in-app)

Users in the EEA, UK, Switzerland, or other regions where consent is required can revisit or withdraw their ad-consent decision in the app: Settings → Privacy Choices (Ads) on iOS, or Settings → Manage ad consent on Android.

c) Advertising ID (Android)

You can reset or delete your Advertising ID, or opt out of ad personalization at the OS level, via Android Settings → Privacy → Ads (the exact path varies by device).

d) Notifications

You can disable workout reminders in your device's notification settings for FitFlow.

e) HealthKit (iOS)

Manage HealthKit permissions in your device's Settings → Privacy & Security → Health → FitFlow.

7. Your Rights (GDPR / UK GDPR / Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

Access, correct, or delete the personal data we hold about you.
Withdraw consent for personalized advertising at any time using the in-app ad-consent control (Settings → Privacy Choices (Ads) on iOS, or Settings → Manage ad consent on Android).
Object to processing or request restriction of processing.
Lodge a complaint with your local data-protection authority.

To exercise rights that we cannot fulfil through in-app controls, email us at the address in section 11.

8. Your Rights (CCPA / CPRA — California)

California residents have the right to:

Know what categories of personal information we collect.
Request deletion of personal information we hold.
Opt out of the sale or sharing of personal information for cross-context behavioural advertising.
Be free from discrimination for exercising any of these rights.

You can opt out of personalized advertising at any time via the in-app ad-consent control (Settings → Privacy Choices (Ads) on iOS, or Settings → Manage ad consent on Android). We do not knowingly sell personal information for monetary value.

9. Data Retention and Deletion

Data stored locally on your device persists until you uninstall the app.
Workouts written to Apple Health (iOS) are kept by Apple under your control. Delete them from the Health app.
Anonymous analytics and crash data retained by Firebase follow Google's data retention policies.
To delete all locally stored data, simply uninstall FitFlow.

10. Data Security

Local data is protected by your device's built-in security features (passcode, Face ID, Touch ID, or Android screen lock). Network requests to Firebase, AdMob, and the platform app stores are made over HTTPS using current TLS standards.

11. Contact

Questions about this policy or requests to exercise your rights:

Email: akashmagukiya10@gmail.com

12. Medical Disclaimer

    FitFlow is not a medical device and does not provide medical advice. Workouts and calorie estimates are for general fitness purposes only. Always consult a qualified healthcare professional before starting any new exercise program, particularly if you have a pre-existing condition, are pregnant, or are recovering from injury.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected here with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.