Privacy Policy

1. Information We Collect

When you create a FitPlan account we collect your email address and password (stored as a secure hash). During onboarding you may provide optional profile information such as your name, age group, gender, height, weight, and fitness goals. This information is used solely to personalize your experience.

As you use FitPlan we collect data you actively enter, including workout logs, food logs, body weight entries, and body measurements (such as waist, chest, or body fat percentage). If you choose to upload progress photos, those are stored in your account and are private by default — visible only to you unless you explicitly mark a photo as shareable. We also collect basic usage data (pages visited, features used, and crash/error reports) to improve the product.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the FitPlan service
• Personalize your workout and nutrition plans
• Generate AI-powered recommendations (Premium plan)
• Process payments and manage your subscription via Stripe
• Send transactional emails (account confirmation, payment receipts)
• Respond to support requests

We do not sell your personal data to third parties.

3. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL), hosted on AWS infrastructure. Passwords are never stored in plain text. We use row-level security policies to ensure each user can only access their own data.

Payment information is handled entirely by Stripe and is never stored on FitPlan servers. We only retain a Stripe customer ID to manage your subscription.

4. Third-Party Services

FitPlan uses the following third-party services:

• Supabase — database, authentication, and photo storage
• Stripe — payment processing
• OpenAI — AI-powered features (Premium plan)
• Vercel — application hosting
• PostHog — product analytics (page views, feature usage, and error reports), used to improve the app

Each of these services has its own privacy policy governing how they handle data.

5. Cookies

FitPlan uses cookies and local storage to maintain your login session, and PostHog uses cookies/local storage to recognize you across visits for product analytics. We do not use advertising cookies or share this data with ad networks.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. To delete your account and all associated data, contact us at the email below. You may also export your data from your profile settings.

7. Children's Privacy

FitPlan is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.

9. Contact

If you have questions about this Privacy Policy, contact us at hello@fitplan.health.