Privacy Notice

1. Information we collect

Account data: your email address and password (stored securely, hashed).

Subscription data: your plan, subscription status, renewal dates and a customer reference received from our payment provider, Stripe.

Fitness data you enter: workouts, food logs, body weight and measurements, goals and wearable activity. This is stored on your device.

Health and activity data (Premium, only if you allow it): in the Fitprep phone app, steps, active calories, heart rate and workouts read from Apple Health or Google Health Connect; and live heart rate from a Bluetooth heart-rate monitor you choose to pair. This data is stored on your device. Bluetooth is used only to connect to the monitor you select, never to find your location.

AI requests: questions you ask the AI coach, meal photos and the workout/nutrition context you send with them. Premium AI coach chat messages are saved to your account so your conversation appears on all your devices; you can clear them at any time with the clear button on the AI Coach screen.

Technical data: IP address, device and browser type, and basic usage logs needed to run and secure the Service.

2. Why we use it and our legal basis

To create your account and provide the Service, including Premium features (performance of our contract with you).

To process AI insights and meal scans you request (contract). AI requests are processed to generate your answer and are not used to build a profile of you.

To keep the Service secure and prevent fraud and abuse (legitimate interests).

To provide customer support and comply with legal, tax and accounting obligations (legal obligation).

Health information is sensitive; we only process it with your consent, which you can withdraw at any time (for example by turning off Fitprep's access in Health Connect or Apple Health settings, or disconnecting your Bluetooth device).

Data from Google Health Connect and Apple Health is used only to show your activity in Fitprep and to personalise the AI coach you ask. It is never sold, never used for advertising, never shared with data brokers, and never used to decide eligibility for credit, insurance or employment. Use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.

3. Who we share it with

Service providers who host our app, database and authentication, and the AI provider that generates insights and meal estimates, under contracts requiring them to protect your data.

Stripe, our payment provider (and Merchant of Record where end-to-end compliance handling applies), for the sale of Premium, subscription management, payments, tax compliance and invoicing. Stripe's own privacy policy applies to the payment data it collects.

Professional advisers (such as legal and accounting advisers) where needed.

Authorities, where required by law.

We never sell your personal information.

4. International transfers

Some providers, including Stripe and our hosting and AI providers, may process data outside Australia (for example in the UK, EU or USA). We take reasonable steps under APP 8 to make sure they protect it to a comparable standard.

5. How long we keep it

We keep account data while your account is open. Subscription and transaction records may be retained afterwards where tax, legal or dispute obligations require it. Fitness logs stay on your device until cleared. Premium AI coach chat messages are kept until you clear them or delete your account; other AI answers are not saved to your account by Fitprep; our hosting and AI providers may retain request or diagnostic logs under their own retention and security practices. When information is no longer needed, we delete or anonymise it. Account deletion and clearing device data are separate actions.

6. Your rights

You can ask to access or correct your personal information, withdraw consent, or delete your account at any time. If you are unhappy with how we handle your information you can complain to us, and then to the Office of the Australian Information Commissioner (oaic.gov.au). We respond to requests within 30 days.

7. Security

We use encryption in transit, hashed passwords, access controls and database security rules so each person can only access their own data.

8. Cookies and local storage

We use only essential browser storage to keep you signed in and save your fitness data on your device. We do not use advertising or marketing cookies. You can clear this storage in your browser settings, which signs you out and removes on-device data.

9. Children

Fitprep is not directed to children under 13 and we do not knowingly collect their information.

10. Deleting your account

See our Account Deletion page at https://fitprep.lovable.app/delete-account for how to delete your account and data.

11. Contact us

Privacy questions, access or correction requests, and complaints: email glitterbutter45@gmail.com. We respond within 30 days.