FitBuddy Privacy Policy
FitBuddy ("we", "our", or "the App") is a personal fitness and nutrition tracking iOS application. This Privacy Policy explains what data we collect, how it is used, and the choices you have.
By using FitBuddy, you agree to the practices described below.
1. Data Controller
This app is developed and operated by an individual developer:
- Developer: Kyrylo Holovchenko
- Contact email: kyrylo.holovchenko@gmail.com
2. Data We Process
2.1 Data stored on your device
FitBuddy stores the following locally using Apple's SwiftData framework:
- User profile: name, age, sex, height, weight, activity level, fitness goals
- Workouts, exercises, sets and reps
- Meal entries, hydration log, body metrics (weight, body fat)
- AI chat history with the in-app assistant
This data never leaves your device unless you explicitly enable iCloud sync (see §2.3).
2.2 Apple Health (HealthKit) data
With your permission, FitBuddy reads the following HealthKit data to personalize recommendations:
- Body measurements (height, weight, body fat)
- Biological sex and date of birth
- Activity data (active energy, workouts, step count)
- Sleep analysis
FitBuddy may also write workout sessions back to Apple Health.
HealthKit data is processed locally on your device. We do not transmit HealthKit data to our servers or to any third party. You can revoke HealthKit access at any time in iOS Settings → Privacy & Security → Health.
2.3 iCloud synchronization
FitBuddy uses Apple CloudKit to back up and sync a limited subset of data across your devices signed in to the same Apple ID:
- Daily nutrition summaries
- Daily hydration summaries
This data is stored in your personal iCloud account. We have no access to it. You can disable sync in iOS Settings → Apple ID → iCloud → FitBuddy.
2.4 AI assistant (Google Gemini)
FitBuddy includes an AI assistant powered by Google's Gemini API. When you send a message to the assistant, the following is transmitted to Google:
- Your message text
- Relevant context from your profile and recent entries (e.g. age, goals, last meals) needed to generate a personalized response
Google processes this data under its own terms: Gemini API Terms and Google Privacy Policy. We do not store AI conversations on our servers — they remain on your device only.
2.5 Camera and photos
With your permission, FitBuddy may access the camera or photo library to analyze food photos or smart scale screenshots. Photos you select are processed locally and/or sent to the AI assistant as described in §2.4. We do not store photos on our servers.
2.6 Notifications
FitBuddy schedules local notifications on your device (workout reminders, hydration, etc.). No remote push notifications are sent by us, and we do not collect device tokens.
3. Data We Do NOT Collect
- We do not operate our own backend server.
- We do not collect analytics, crash logs (beyond what Apple provides via opt-in), advertising identifiers, or location data.
- We do not sell or rent any data.
- We do not use third-party trackers or SDKs for advertising.
4. Data Retention
All personal data lives on your device and (optionally) in your iCloud account. When you delete the app, local data is removed by iOS. iCloud-synced summaries can be deleted through Settings → Apple ID → iCloud → Manage Account Storage → FitBuddy.
Google Gemini retains prompts according to its own retention policy.
5. Your Rights
Because data is stored on your device and in your iCloud, you have full control:
- Access / export: view your data directly in the app
- Delete: remove entries in-app, or delete the app and iCloud data
- Withdraw permissions: revoke HealthKit, Camera, Photos, or Notifications access in iOS Settings at any time
If you are in the EU, UK, or a jurisdiction granting additional rights (GDPR, UK-GDPR, CCPA), you may contact us at the email above to exercise those rights.
6. Children
FitBuddy is not directed to children under 13. If we learn we have processed data from a child under 13 without parental consent, we will take steps to delete it.
7. Security
Data is protected by iOS sandboxing and Apple's standard on-device encryption when your device is locked. Transmissions to the Gemini API occur over HTTPS.
8. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date above reflects the current version. Material changes will be communicated in-app.
9. Contact
Questions or requests: kyrylo.holovchenko@gmail.com