Privacy Policy

Last updated: May 5, 2026

1. Introduction

FitFlow ("the App") is a home workout application developed by Shayona ("we", "us", or "our"). This Privacy Policy explains how we collect, use, and share information when you use our iOS application.

By using FitFlow you agree to the practices described here. If you don't agree, please don't use the App.

2. Information We Collect

a) Stored on your device only

The following is kept on your device using Apple's standard local storage and is not transmitted to our servers:

• Fitness preferences: chosen fitness level (Beginner, Intermediate, Advanced) and weekly workout goal.
• Display name: an optional name you provide during onboarding.
• Workout history: records of completed workouts including date, duration, and estimated calories burned.
• Custom workouts: any workouts you create within the app.
• Plan progress, achievements, weekly challenges, streak data.
• App preferences: notification reminder times, voice-coach selection, and reminder schedules.

b) Apple HealthKit (only with your permission)

If you grant FitFlow access to Apple Health, we may:

• Read step count, active energy burned, and heart rate to display today's activity on the Home screen and inside the workout player.
• Write a workout session to Apple Health when you finish a workout, so it appears alongside your other activity data.

HealthKit data is not transmitted to our servers and is not used for advertising. You can revoke this permission at any time via Settings → Privacy & Security → Health → FitFlow.

c) Analytics and crash diagnostics

We use Firebase Analytics and Firebase Crashlytics to understand how FitFlow is used and to fix bugs. The events we record include:

• App installs, app opens, screen views.
• Workouts completed (workout name, duration, calorie estimate, exercise count).
• Meals logged, paywall views, onboarding completion.
• Subscription purchases, including the Apple StoreKit transaction ID, product ID, price, and currency.
• Crash and stability reports.

These events are linked to a Firebase Installation ID, not to your name or email. We do not pass your fitness or health data to Firebase.

d) Advertising data

Free users see advertisements served by Google AdMob. To deliver and measure those ads, AdMob and its bidding partners may collect:

• The advertising identifier (IDFA) on iOS, but only if you grant permission via the App Tracking Transparency prompt. If you decline, ads are still shown but in a non-personalized form.
• Approximate location derived from IP address.
• Device information (model, OS version, language, screen size).
• Ad interaction events (impressions, clicks, conversions).

Premium subscribers do not see ads and the AdMob SDK does not request ad inventory for them.

3. How We Use Your Information

• To provide the workout, plan, achievement, and nutrition features of the App.
• To measure how FitFlow is used so we can improve it (analytics).
• To diagnose and fix crashes (Crashlytics).
• To deliver and measure advertisements served to free users (AdMob).
• To process subscription purchases through Apple StoreKit.
• To send local workout reminders, if you allow notifications.

4. Third-Party Services

a) Firebase (Google LLC)

• Firebase Firestore serves the workout exercise library to the app in read-only mode.
• Firebase Analytics records the events listed above.
• Firebase Crashlytics captures crash reports.

See Firebase Privacy & Security for details.

b) Google AdMob (Google LLC)

AdMob serves advertisements inside the free version of FitFlow (App Open ads on launch, Interstitial ads after workouts, and optional Rewarded ads to unlock a single workout for one day). AdMob's data practices are described at Google's Advertising Privacy Policy.

c) Google User Messaging Platform

We use Google's UMP SDK to ask EEA, UK, and CCPA-eligible users for ad-consent decisions and to let those users revisit their decision via Settings → Privacy Choices (Ads).

d) Apple StoreKit

Subscription billing is handled entirely by Apple. We do not see your Apple ID, payment method, or full transaction history. See Apple's Privacy Policy.

e) Apple HealthKit

HealthKit access is opt-in and described in section 2(b). Apple processes this data on-device only.

5. Children's Privacy

FitFlow is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we serve ads to a user we have reason to believe is under 13, AdMob is configured to deliver only non-personalized advertising for that user.

6. Your Choices

a) App Tracking Transparency (iOS)

The first time FitFlow tries to access your advertising identifier, iOS will show the App Tracking Transparency prompt. You can change your decision at any time via Settings → Privacy & Security → Tracking → FitFlow.

b) Privacy Choices (in-app)

Users in the EEA, UK, or other regions where consent is required can revisit their ad-consent decision via Settings → General → Privacy Choices (Ads).

c) Notifications

You can disable workout reminders in your device's Settings → Notifications → FitFlow.

d) HealthKit

Manage HealthKit permissions in your device's Settings → Privacy & Security → Health → FitFlow.

7. Your Rights (GDPR / UK GDPR / Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

• Access, correct, or delete the personal data we hold about you.
• Withdraw consent for personalized advertising at any time using Settings → Privacy Choices (Ads) in the App.
• Object to processing or request restriction of processing.
• Lodge a complaint with your local data-protection authority.

To exercise rights that we cannot fulfil through in-app controls, email us at the address in section 11.

8. Your Rights (CCPA / CPRA — California)

California residents have the right to:

• Know what categories of personal information we collect.
• Request deletion of personal information we hold.
• Opt out of the sale or sharing of personal information for cross-context behavioural advertising.
• Be free from discrimination for exercising any of these rights.

You can opt out of personalized advertising at any time via Settings → Privacy Choices (Ads). We do not knowingly sell personal information for monetary value.

9. Data Retention and Deletion

• Data stored locally on your device persists until you uninstall the app.
• Workouts written to Apple Health are kept by Apple under your control. Delete them from the Health app.
• Anonymous analytics and crash data retained by Firebase follow Google's data retention policies.
• To delete all locally stored data, simply uninstall FitFlow.

10. Data Security

Local data is protected by your device's built-in security features (passcode, Face ID, Touch ID). Network requests to Firebase, AdMob, and Apple are made over HTTPS using current TLS standards.

11. Contact

Questions about this policy or requests to exercise your rights:

Email: akashmagukiya10@gmail.com

12. Medical Disclaimer

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected here with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.