Privacy Policy

Privacy Policy - FitShare Last updated: October 18, 2026 1. Information Collection: We collect information you provide directly (name, email, profile photo, and profile details such as age, gender, height, weight and goal), fitness activity data (workouts, sets, weights, daily steps), your food diary and meal photos, progress photos, and content you create in the app (posts, comments and messages). 2. Health Connect Data (Android): FitShare integrates with Health Connect to provide fitness tracking features. We only read (never write) the following data types: • Weight – to monitor body weight progress. • Steps – to track daily out-of-gym physical activity, allowing your trainer to accurately adjust intensities and routines. • Exercise sessions and Distance – so walks, runs and workouts recorded by your phone or watch appear in your training log without retyping them. How we use this data: Used solely to provide features within the app. We do not sell Health Connect data, and we do not use it for advertising, marketing or external analytics. It is shown only to you and to the trainer you choose to connect with, and it is passed to the AI assistant only if you choose to give it access (see section 6). Our use of information received from Health Connect will adhere to the Health Connect Permissions Policy, including the Limited Use requirements. 2a. Apple Health (HealthKit) (iPhone): On iPhone, FitShare reads your steps, body weight and the workouts recorded by your phone or watch (type, time, duration and distance) from Apple Health, only after you allow it in the iOS permission screen. FitShare does not write any data to Apple Health. HealthKit data is used solely for features within the app: your training log, the view of the trainer you choose to connect with, and the AI assistant if you choose to give it access to this data (see section 6). It is never sold, never used for advertising, marketing or data mining, and never stored in iCloud. You can revoke access at any time in iOS Settings → Health → Data Access & Devices → FitShare. 3. Data Security & Visibility: We use Firebase (Google LLC) to store and secure your data. Your training and health data is accessible only to you and to the trainer you choose to connect with. Content you choose to publish to the community, such as posts, comments, stories, your profile photo and name, is visible to other users according to your privacy settings. A photo you add to a food in the food library is shown to everyone who has that food in their menu. Private messages are visible only to you and the recipient. 4. Data Retention & Deletion: Your data is retained for as long as your account is active and used solely to provide our services. You can delete your account and all associated data (including data imported from Apple Health or Health Connect) at any time through the Profile settings in the app. Upon requesting account deletion, either automatically through the app or by contacting us (section 7), all data is permanently removed from our servers within 7 business days. We do not retain data after account deletion. Conversations with the AI assistant are deleted automatically after 90 days, and voice recordings are never stored by us. 5. Policy Changes: We may update this policy from time to time. We will notify you in the app of any material change and ask for your approval. 6. AI Processing: The app's AI features are optional and powered by Google Gemini (Google LLC). We ask for your explicit consent before first use, and in the AI assistant you choose which data it may access. Only the following is sent to Gemini: • Content you send to an AI feature yourself: a workout description as text or a short voice recording, a meal description or meal photo, and the messages and photos you send to the AI assistant. • In the AI assistant, and only for the areas you allowed: your workout history (including workouts imported from Apple Health or Health Connect), food diary and targets, weight history and average steps, and profile details (age, gender, height, goal and activity level). In Hebrew conversations your gender is also sent, so the assistant addresses you correctly. Your name, email and user ID are not sent. Voice recordings are not stored by us, and assistant conversations are deleted automatically after 90 days. We use the paid tier of the Gemini API, under whose terms Google does not use this content to improve or train its models. You can withdraw consent at any time from your profile settings (AI Privacy), and change the assistant's access from "Data access permissions" in the chat. 7. Contact & Your Rights: The app is intended for users aged 16 and over. Our database is hosted on Google Cloud servers in Israel. Media files (photos and videos), some of our servers and the AI service run on Google servers outside Israel (the US and Europe). You may request to access, correct or delete your data by contacting [email protected]. Usage Data, Performance & Crash Reports (Analytics) To improve the app, we ask for your consent to collect usage data via Google LLC's Firebase services. Collection is off by default and starts only after you give explicit consent in the in-app consent screen. If you consent, the following data is collected: • App usage events (screens viewed and actions taken) • Device and performance data (model, operating system, load times) • Crash reports and technical errors The data is sent to Google LLC and processed under the Firebase privacy policy: https://firebase.google.com/support/privacy Your consent is valid for 12 months, after which you will be asked to confirm again. You may withdraw consent at any time via your profile settings (AI Privacy → Share usage data) — withdrawal is as easy as granting, and all collection stops immediately upon withdrawal. Declining or withdrawing consent does not affect any feature of the app. Collection is based solely on your consent, in accordance with the Israeli Privacy Protection Law, 5741-1981, including Amendment 13. The fitshare.fit website (Google Analytics and Cloudflare) On the website's pages (home, calculators and guides) we use Google Analytics by Google LLC to understand how the site is used: where you came from, which pages you viewed, calculator use, and clicks through to the app or the app stores. Google Analytics sets cookies in your browser and runs only after you accept it in the website's consent banner — without your consent none of it is loaded. Your consent is valid for 12 months, and you can change it at any time from "Cookie settings" at the bottom of every page; withdrawing deletes the Google Analytics cookies and stops collection. The website choice is separate from the consent to usage data inside the app. In addition, Cloudflare, Inc. counts visits to the website's pages in aggregate, without cookies or any personal identifier, to measure traffic and performance.