Fitness Tech

Privacy Policy

Effective date: May 17, 2026  ·  Last updated: October 1, 2026

MyFitnessTech ("the App") is developed and operated by Fitness Tech ("we," "us," or "our"), a small team of individuals currently organized as a Registered Student Organization (RSO) at the University of Washington, Seattle. Our organizational structure may evolve over time, but regardless of how we are organized, this Privacy Policy governs how the App handles your personal data. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

If any material changes occur to our data practices — including as a result of an organizational transition — we will update this policy and notify users through the App.

Data We Collect

Account Information A Firebase user ID (UID) and your email address, collected when you sign in via Email/Password, Google, Apple, or Phone verification. Your email and UID are used for authentication and account management only — they are never shown to other users. If you sign in by phone, your phone number is used for verification only.
Public Profile Information you choose to make part of the App's social features: your username, display name, an optional avatar image, and a friend code. This profile is visible to other users when you connect with them, and (if you enable it) discoverable through username search.
Friends & Social Graph Friend requests you send or receive, and the friendships that result once both people accept. This lets the App show your friends list and route messages between connected users.
Messages The content of 1:1 messages you send and receive, including text and photos. Message photos are handled on an ephemeral basis — see "Message Photos Are Ephemeral" below.
Teams & Coaching If you join a team: the teams you're on, what you've chosen to share with each team's coaches, your practice check-ins, and messages you post in team chats. If you're a coach: your coach role and sport, and the teams and team workouts you create. See "Teams & Coaches" below for what coaches can see.
Notifications & Device Info A push-notification token and your device platform (iOS or Android) so we can deliver message and friend-request notifications to the correct device. Notifications are optional and controlled through your device's operating system settings.
Anti-Abuse Counters Lightweight counters and timestamps (for example, how many friend requests or messages have been sent in a given window) used solely to enforce rate limits and spam cooldowns and to keep the social features safe.
Workout & Fitness Data Exercise type, repetition counts, sets, weight, workout duration, and session history logged manually through the App or automatically via connected devices.
Health Metrics Heart rate, sleep logs, nutrition entries, hydration data, glucose, steps, active energy, body measurements, weight, workouts, and other health information you manually enter, sync from connected devices, or optionally import from Apple Health (HealthKit) on iOS and Health Connect on Android.
Profile Your gender (Male, Female, Other, or Prefer not to say), used to tailor features such as strength rankings, cycle tracking and AI suggestions. It's optional, and you can change it anytime in Settings → Profile.
Cycle Tracking (optional, beta) If you choose to track your cycle: period days and flow, symptoms, mood, energy, notes and, if you choose to log it, sexual activity and sex drive. This data is private to your account. It is never shown to friends or coaches, and never sent to AI except the optional cycle phase described under AI-Powered Features. You can hide the sex and sex drive options, turn cycle tracking off, or permanently delete your cycle history in the App's cycle tracking settings (Settings → Profile → Cycle tracking). Hiding or turning off never deletes what you logged; only deleting your cycle history or your account does. Predictions are estimates calculated on your device from your own logs. They are not medical advice and not for preventing or planning pregnancy.
Progress Photos Photos you capture using the in-app camera or select from your device's photo library for the purpose of tracking physical progress over time. Photos may include metadata such as the date taken. Progress photos are stored in the cloud and associated with your authenticated account. They are private to you and are not shown to other users.
Bluetooth Device Data Sensor readings (accelerometer, gyroscope, flow rate, temperature) transmitted from BioBand, SipSync, and other compatible devices via Bluetooth Low Energy. Heart rate from a standard Bluetooth heart-rate monitor you choose to connect (for example a chest strap, an armband or Powerbeats Pro 2), used during runs and walks. The App remembers the last monitor you connected, on your device only, so it can reconnect. Device connectivity is optional — the App is fully functional without any connected hardware.
Usage Data App interaction patterns, feature usage, crash reports, and performance metrics collected to improve the App experience.

Message Photos Are Ephemeral

Photos sent inside 1:1 messages are treated as ephemeral content. When you send a photo in a message:

Because recipients retain a local copy, you should only send photos to people you trust. Text messages are retained as part of your conversation history until the conversation is deleted (for example, by unfriending) or your account is deleted.

Device Permissions

The App may request the following device permissions. Each permission is optional and only used for the specific feature described. You can manage these permissions at any time through your device's Settings.

Camera Used to capture progress photos or take a photo to send in a message. The camera is only activated when you choose to take a new photo. We do not access your camera in the background.
Photo Library Used to select existing photos from your device for progress tracking or to attach to a message. We only access the specific photos you select — we do not scan, index, or access your full photo library.
Notifications Used to alert you about new messages and friend requests. Notifications are entirely optional and can be turned off at any time in your device's operating system settings.
Bluetooth Used to connect to Fitness Tech hardware devices (BioBand, SipSync) and to Bluetooth heart-rate monitors during runs and walks. Bluetooth access is entirely optional — all core App features work without it.
Apple Health (HealthKit) — iOS Used to read health and fitness data such as workouts, heart rate, steps, active energy, sleep, body measurements, and nutrition. The App reads data from Apple Health, and writes to it in one case: when you turn on "Record in Apple Health" for a run or walk (iPhone with iOS 26 or later), the App saves that run or walk to Apple Health as a workout, including the heart rate measured during it. It writes nothing else. You choose which data types to share when you first connect Apple Health, and you can change or revoke access at any time in iOS Settings → Privacy & Security → Health. The App is fully functional without granting Apple Health access.
Health Connect — Android Used to read health and fitness data such as workouts, heart rate, steps, active energy, sleep, body measurements, and nutrition through Android's Health Connect platform. The App currently only reads data from Health Connect and does not write data back. You choose which data types to share when you first connect Health Connect, and you can change or revoke access at any time in the Health Connect settings on your device. The App is fully functional without granting Health Connect access.

How We Use Your Data

We use your data solely to operate, maintain, secure, and improve the App and its features. This includes authenticating your account; tracking workouts and displaying health dashboards; storing and displaying your private progress photos; powering the social features (profiles, username search, friend requests, friendships, and 1:1 messaging); running teams, including showing coaches the data athletes choose to share with them; delivering notifications; enforcing anti-abuse rate limits; generating personalized fitness insights; and powering AI-driven features.

We do not sell your data. We do not use your data for advertising or for any third-party advertising or data-broker purposes. App data is processed and stored using Google Firebase and Google Cloud infrastructure, subject to Google's Firebase Terms and the Firebase Privacy and Security policy.

Apple Health (HealthKit)

When you grant MyFitnessTech permission to read or write health data through Apple Health, the following applies:

You can revoke our access at any time from iOS Settings → Health → Data Access & Devices → MyFitnessTech.

When you grant access, the App reads data such as workouts, heart rate, steps, active energy, sleep, body measurements, and nutrition in order to display your progress, generate insights, and personalize features within the App. The App writes to Apple Health only when you turn on "Record in Apple Health" for a run or walk (iPhone with iOS 26 or later): that run or walk is saved as a workout, with the heart rate measured during it. You can leave the switch off for any run, and you can delete saved workouts in the Health app. If we ever write other data, we will update this policy and the in-app permission prompts first. HealthKit data is processed on your device whenever feasible, and is only synced to our cloud when needed to provide cross-device access or features you have enabled.

Runs and walks. When you log a run or a walk, the App reads your step count for that session from Apple Health (on iPhone) or Health Connect (on Android; Samsung Health can share steps through Health Connect). The session's type, time, duration, steps and estimated calories are saved to your workout history. During a run or walk, the App can also show your heart rate: from a Bluetooth heart-rate monitor you connect, from AirPods Pro 3 while "Record in Apple Health" is on (iPhone with iOS 26 or later), or from a watch that shares heart rate with Apple Health or Health Connect. The average and peak heart rate are saved with the run or walk in your workout history.

Spoken updates. If you turn on spoken updates for a run or walk, your phone's built-in speech engine reads out your time, steps and heart rate. The App doesn't send them anywhere.

Your use of Apple Health is also governed by Apple's privacy practices.

Google Health Connect (Android)

When you grant MyFitnessTech permission to read or write health data through Health Connect, the following applies:

When you grant access, the App reads data such as workouts, heart rate, steps, active energy, sleep, body measurements, and nutrition in order to display your progress, generate insights, and personalize features within the App. The App currently only reads data from Health Connect and does not write data back. If this changes in the future, we will update this policy and the in-app permission prompts to reflect the new data flows. Health Connect data is processed on your device whenever feasible, and is only synced to our cloud when needed to provide cross-device access or features you have enabled.

Runs and walks. When you log a run or a walk, the App reads your step count for that session from Apple Health (on iPhone) or Health Connect (on Android; Samsung Health can share steps through Health Connect). The session's type, time, duration, steps and estimated calories are saved to your workout history. During a run or walk, the App can also show your heart rate: from a Bluetooth heart-rate monitor you connect, from AirPods Pro 3 while "Record in Apple Health" is on (iPhone with iOS 26 or later), or from a watch that shares heart rate with Apple Health or Health Connect. The average and peak heart rate are saved with the run or walk in your workout history.

Your use of Health Connect is governed by Google's privacy practices for that platform.

AI-Powered Features

The App may offer AI-powered features such as fitness coaching, exercise analysis, image recognition, and personalized recommendations. When you use these features, relevant data (such as text prompts, images, or fitness context) may be sent to third-party AI service providers for processing. These providers are contractually obligated to process your data only for the purpose of delivering the requested functionality and in accordance with their respective privacy policies.

Which AI we use. Our AI features are powered by Google's Gemini. Your device never talks to Gemini directly: requests go through our servers, which send Gemini only what the feature needs. If we add or change an AI provider, we will update this policy and ask for your permission in the App again before any of your data is sent to it.

Scan with AI. When you scan a meal or a nutrition label, the photo is sent to Google's Gemini to estimate calories and macronutrients. We do not store the photo: it is not saved on our servers, and the scan does not keep a copy on your device. Nothing is logged until you review the result and confirm it. The App asks for your permission before your first scan, and you can withdraw it at any time in Settings → Social & Privacy.

Weekly Review. Once a week, a numbers-only summary of your past seven days is sent to Google's Gemini so it can write your review. The summary contains: how many days you logged food and your average calories, protein, carbs and fat; your workout count, minutes and training volume, with the previous week's workout count and volume for comparison; how many walks and runs you logged; the muscles you trained and the body areas you didn't; the names of up to three exercises you set records on, and the kind of record; your average, shortest and longest night of sleep; how many times you weighed in and your weight change; your average water intake; your logging streaks; your units; and your gender, if you chose one in your profile. It never includes your name, email address, goals, food names, photos or individual log entries. The review Gemini writes is saved to your account so that reopening it doesn't send your data again; the summary itself is not stored.

Daily Focus. If you turn it on, then for each of your morning, afternoon and evening notes the App sends Google's Gemini a summary of your day so far (counts and totals for food, water, workouts and steps), last night's sleep and how you rated it, and the same seven-day summary as the Weekly Review, so it can write a short note for your Home screen. It never includes your name, email address, goals, food names, photos or notes. Each note Gemini writes is saved to your account so that reopening it doesn't send your data again; the summary itself is not stored.

Cycle phase (optional). If you track your cycle and separately turn on "Let Focus AI use my cycle phase", only your estimated phase and day number (for example, "day 22, luteal") are added to these summaries. Never dates, flow, symptoms, moods, sexual activity, sex drive or notes.

Your choices. Nothing is sent to Gemini until you agree on the screen that explains what will be sent. You can withdraw that agreement at any time in Settings → Social & Privacy, and nothing more is sent after that.

Access. Most AI features require the AI Pro subscription (entitlement ID ai_pro). AI food scanning includes a one-time allowance of 3 free scans. The Weekly Review includes one free review per account, available for the week it's made; after that it requires AI Pro. Daily Focus always requires AI Pro. To check whether you are entitled to use these features, the App verifies your subscription status through RevenueCat and through our own backend before an AI request is processed. That check uses your subscription status and an anonymized user identifier only — it does not send your name, email, or payment details, and your payment details are never available to us. Photos you submit for AI scanning are sent to the AI provider for processing as described above.

In-App Purchases

MyFitnessTech offers optional cosmetic purchases (themes, icon borders, username changes) and one optional auto-renewing subscription, AI Pro (entitlement ID ai_pro), which unlocks the App's AI-powered features. All payments are processed by Apple or Google through their respective in-app purchase systems.

Promotional Codes

From time to time we may offer promotional codes, for example a free or discounted period of AI Pro. Codes are redeemed on Apple's or Google's own redemption screens (in the App, or through a link we send you), and Apple or Google handles redemption and any billing under their terms. As with any purchase, RevenueCat and our backend record the resulting subscription, including which offer it came from, so the right features unlock. We never receive your payment details.

UW Student Access Requests

If you email [email protected] to request a UW student code, we receive your name, your email address and the kind of phone you use (iPhone or Android). We use them only to confirm that you are a UW student and to send you a code, and we keep a record of which code was sent to which address so that each student receives one. We don't add you to a mailing list, share your details, or use them for marketing. We delete these records within 6 months, or sooner if you ask.

Third-Party Services

The App relies on the following categories of third-party services to operate. Firebase, our primary cloud provider, is operated by Google and hosted in the United States.

Cloud Infrastructure & Authentication We use Google Firebase and Google Cloud (United States) for user authentication, cloud database storage, messaging delivery, push notifications, app attestation, and analytics. Firebase acts as our data processor. Data is processed under Google's Privacy and Security policy and the Firebase Terms.
In-App Purchase Management RevenueCat manages purchase records and entitlements for our in-app purchases and for the AI Pro subscription, on both the App Store and Google Play. RevenueCat receives only an anonymized user identifier, the product purchased, and the transaction ID — not your name, email, or payment details. Data is processed under RevenueCat's Privacy Policy.
Cloud Media Storage Progress photos and message photos are stored using cloud storage tied to your authenticated account and are not accessible to other users. Stored media is encrypted at rest. Message photos are deleted on the ephemeral schedule described above.
AI & Machine Learning Providers We use Google's Gemini for Scan with AI, the Weekly Review and Daily Focus (described above), and Google Cloud Vision, which automatically screens profile photos and photos sent in messages for unsafe content. Data sent to these services is limited to what is necessary for the requested functionality.
Analytics & Performance We may use analytics services to understand how the App is used and to diagnose technical issues. This data is aggregated and not used to personally identify you.

We do not sell, rent, or trade your personal data to any third party for marketing or advertising purposes.

Data Storage & Security

We use industry-standard safeguards to protect your data, including:

While we implement reasonable security measures to protect your data, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

Social Features

If you opt into MyFitnessTech's social features (friends, messaging, leaderboards), the following data is stored on our servers (Firebase, hosted in the United States):

Photos sent in messages are ephemeral — they are deleted from our servers shortly after delivery and within at most 7 days of being sent.

We retain user-reported content for moderation review for up to 30 days after the report is resolved.

You can hide yourself from username search at any time via Settings → Social & Privacy. You can delete your account at any time via Settings → Account → Delete Account. Account deletion removes all associated data within 30 days, except where retention is legally required.

Teams & Coaches

MyFitnessTech lets coaches run teams for their athletes. We set up coach accounts, and a coach can invite co-coaches and squad leaders to help run their teams. You join a team with a code from your coach, and only after the App shows you what your coach will see.

What coaches can see. Coaches see only the athletes on the teams they coach. For each athlete, they see your display name and whichever of these you share:

All four are shared when you join. You can turn any of them off for each team in Settings → Coach & Teams, and your coach then stops seeing it, including what you've already shared. Coaches never see your nutrition, sleep, heart rate, cycle tracking, progress photos, 1:1 messages, AI reviews or notes, or any of your other health data. Coaches agree in our Terms of Service to use what you share only to coach you.

What your teammates can see. Everyone on a team, coaches included, can see the team leaderboard, which shows each member's display name, weekly workout count, training volume and gym streak. If you've turned off workout or wellness sharing, those numbers show as zero. Messages you post in a team chat, or in a chat a coach runs across all their teams, can be read by everyone in that chat, including coaches.

Leaving a team. You can leave a team at any time in Settings → Coach & Teams. When you leave, or if a coach removes you, everything you shared with that team is deleted: your shared stats, your practice check-ins, your workout-feed entries, and the messages you posted in that team's chats. Deleting your account does the same for every team you're on. If you're a coach, deleting your account also deletes the teams you own, including their chats, workouts, check-ins and leaderboards.

Content & Conduct Policy

The App's social features are intended for friendly, fitness-oriented communication. You may not use messaging, profiles, or any other feature to send or display content that is sexually explicit or lewd, harassing, threatening, hateful, or otherwise abusive, or that is illegal or promotes illegal activity.

Images sent through the App are automatically screened for unsafe content. Accounts that violate this policy may be restricted, suspended, or terminated, and offending content may be removed. You can report abuse or unwanted contact at any time — see "Your Privacy Controls & Rights" below.

Your Privacy Controls & Rights

You have meaningful control over your data and how you appear in the App:

Discoverability toggle A privacy setting — "Discoverable by username search" — controls whether other people can find your profile by searching your username. When turned off, others can still connect with you only via your friend code or QR code.
Unfriend Unfriending a user removes the friendship and permanently wipes the 1:1 conversation for both sides, including any messages and message photos still held in the cloud.
Notifications Push notifications are optional and can be enabled or disabled at any time through your device's operating system settings.
Account deletion You can delete your account at any time from Settings → Account → Delete Account. Deletion is initiated immediately and all associated data — including your account record, public profile, username, friends and friend requests, conversations and messages, message and progress photos, push-notification token, and health and workout data — is removed from our active systems within 30 days, except where retention is required by law. See our account deletion instructions.
GDPR & CCPA rights — access, deletion, export If you are a resident of the EU/EEA, UK, or California (or another jurisdiction with similar protections), you have the right to access, correct, export, or request deletion of your personal data, and to restrict or object to certain processing. To exercise any of these rights, email us at [email protected] from the address tied to your account. We will respond within 30 days.
Report abuse You can report abusive messages or users from within the App, or by emailing us at [email protected]. We review reports and may restrict or remove violating accounts.

To request a copy of your data or full deletion of your account and data, you can use the in-app account deletion option or contact us at [email protected].

Data Retention

We retain your personal data for as long as your account is active or as needed to provide the App's services. Some categories of health and activity data are retained for shorter, fixed windows so that detailed data does not accumulate beyond what is useful:

Heart rate Retained for 1 day, then aggregated. The average and peak heart rate of a run or walk are kept with that workout in your history.
Sleep Retained for 365 days.
Glucose Retained for 180 days.
Water / hydration Retained for 90 days.
Weight Retained for 730 days.

Text messages are retained as part of your conversation history until the conversation is deleted (for example, by unfriending) or your account is deleted. Message photos follow the ephemeral schedule described above (deleted after delivery, and within 7 days at most). User-reported content is retained for moderation review for up to 30 days after the report is resolved.

If you delete your account, deletion is initiated immediately and all associated personal data — including profile, username, friends, messages, message and progress photos, push-notification token, and health and workout data — is removed from our active systems within 30 days, except where retention is required by law. See our account deletion instructions.

You may delete individual progress photos at any time from within the App. Deleted photos are removed from cloud storage promptly.

UW student code requests: kept up to 6 months, then deleted.

Age Requirements

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

App store age ratings differ by platform: MyFitnessTech is rated 16+ on the Apple App Store and Teen on Google Play. You must meet the minimum age required by your platform's store rating and any applicable minimum age in your jurisdiction to use the App, and by using the App you confirm that you do.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or organizational structure. Material changes will be communicated through the App or via email. The "Effective date" and "Last updated" dates at the top of this page indicate when the policy was most recently revised. Continued use of the App after changes constitutes acceptance of the revised policy.

Contact

If you have questions about this Privacy Policy, your data, or wish to exercise your privacy rights, contact us at:

[email protected]

Fitness Tech — Seattle, Washington