This policy covers every fitfrog product: the fitkor app for iOS, Android and Apple Watch, the fitkor trainer console, and the froggi and peeper services. It explains what we collect, why, and how you get rid of it. The short version: we collect what the app needs to work, we do not sell it, and we do not use it for advertising.
Who we are
fitfrog is an independent software project operated by Tomasz Koper, an individual developer ("we", "us"). For the purposes of the EU General Data Protection Regulation we are the data controller for the data described below. You can reach us at kotomasz for any privacy question or request.
What we collect
Account data — only if you sign in
- Your email address, your name as provided by Apple or Google, your sign-in provider, and an internal account identifier.
- You do not need an account to use fitkor. The onboarding screen offers demo mode, which stores everything locally on your device and sends nothing to us.
Fitness and nutrition data you enter
- Body weight entries and your preferred units.
- Food log entries, custom foods, saved meals and diet plans.
- Workout programs, completed workout sessions, sets, reps, weights and effort ratings.
- Onboarding answers that shape the app: your goal, your training experience and your role (trainee or trainer).
Data we read from your device's health platform
Described in Apple Health and Health Connect below.
What we do not collect
- No advertising identifiers, no device fingerprinting, no location, no contacts, no browsing history.
- No analytics or crash-reporting SDK. The apps contain no third-party tracking library.
- The camera is used only to scan food barcodes. Frames are processed on device and are never uploaded.
Apple Health and Health Connect
With your permission, fitkor reads your weight, workouts, steps, sleep and nutrition data from Apple Health on iOS and Apple Watch, and from Health Connect on Android. We use it to show your dashboard and progress charts.
With your permission, fitkor also writes your weight, completed workouts and nutrition back to those platforms, so the data you log here is visible alongside everything else you track.
Health data is never used for advertising or marketing, is never sold, and is never shared with third parties. You can review or revoke our access at any time in Settings → Health → fitkor on iOS, or in the Health Connect app on Android. Revoking access stops future reads and writes; it does not delete what was already stored.
Sharing with your trainer
fitkor can link your account to a trainer. Nothing is shared until you send a link request and the trainer accepts it. While a link is active, the trainer can read — never edit — your display name, your goal and experience answers, your weight entries, your food log and nutrition totals, and your workout sessions. A trainer cannot see your Apple Health or Health Connect data, your email address, or anything from another part of your account.
You can end a link at any time: More → Network → Your connections → Remove. Ending a link removes the trainer's access immediately. Trainer accounts are subject to the same rules in this policy — a trainer sees only the data of clients who accepted them.
Third parties
- Open Food Facts — when you scan a barcode or search for a packaged product, the barcode or search term is sent to the Open Food Facts API and the product data it returns is stored with your food log. Open Food Facts is an open database (openfoodfacts.org) whose data is made available under the Open Database License. We send no personal information with those requests.
- Apple and Google — sign-in with Apple or Google, and distribution through the App Store and Google Play. Their own privacy policies apply to those services.
- Cloudflare — hosting for our API, database and website. Data is stored in Cloudflare's D1 database and transmitted over TLS.
We share your data with nobody else. We do not sell personal data and we do not transfer it to advertisers or data brokers.
What we never do
- We do not sell or rent your data.
- We do not use your data for advertising or profiling.
- We do not train machine-learning models on your health or fitness data.
- We do not use Apple Health data for any purpose other than providing the app's features to you.
Where your data lives
Everything fitkor records is stored first in an on-device database. If you are signed in, it also syncs to our server so that a second device — or your trainer's console — can read it. Transfers use TLS. Your session token is kept in the iOS Keychain or Android EncryptedSharedPreferences, not in plain storage.
Your phone's own backup settings may include the app's local database — for example an iCloud or Google Drive device backup. That backup is controlled by you and by your platform provider, not by us; you can turn it off in your device settings.
Retention and deletion
We keep your account data for as long as your account exists. Deleting the app removes the copy on that device, but not the synced copy.
To delete your account and all data we hold for it, email us from the address you signed in with at kotomasz with the subject "delete my account". We will delete your account, your synced fitness and nutrition records, and end any trainer links, and we will confirm by reply. Requests are actioned within 30 days.
Individual records can be deleted in the app at any time — a food entry, a weight entry, a workout, a program or a diet plan. Deletion propagates to the server on your next sync.
Your rights
If you are in the European Economic Area or the United Kingdom you have the right to access your data, to have it corrected, to have it erased, to receive it in a portable format, to object to or restrict its processing, and to lodge a complaint with your supervisory authority (in Poland: the President of the Personal Data Protection Office, UODO).
Our legal basis for processing is your consent and the performance of the service you asked for. Write to us at the address above and we will act on any of these rights.
Children
fitkor is not directed to children and is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
Changes
If this policy changes in a way that affects you, we will update the date at the top of this page and, for material changes, tell you in the app. Continuing to use fitkor after a change means you accept the updated policy.