Privacy policy

The short version

The app works fully offline and does not require an account.
Your workouts, measurements, and nutrition entries are stored in a database on your device.
Nothing is uploaded unless you sign in and turn on cloud backup, ask the AI coach a question, or send us a support message.
We do not sell your data and we do not show you ads.
You can export everything, and you can ask us to delete anything we hold.

Data on your device

By default, Fitmeister is a local application. The following is written to private app storage on your phone and is not transmitted anywhere:

Workouts, exercises, sets, routines, programs, and personal records
Body measurements such as weight, body fat, and height
Nutrition and water entries
Daily step totals and their source
Workout photos you attach
Your settings, including units, goals, rest defaults, and theme

Android sandboxes this storage, so other apps cannot read it. Uninstalling the app removes it. If you want a copy that survives an uninstall, use the export described under imports and backups.

If you create an account

Creating a Fitmeister account is optional and exists for one purpose: keeping a private backup of your data so you can restore it or use more than one device. If you sign in, we process:

Your identifier. The email address and account ID provided by your sign-in provider. We do not receive your password.
Your synced training data. The same records listed above, stored against your account.
Technical metadata. Timestamps and device identifiers needed to resolve conflicts between devices.

This data is held in a managed Postgres database operated by Supabase in the European Union, protected by row-level security so that an account can only reach its own rows. We use it to provide sync and backup, and for nothing else. You can sign out at any time, which stops further syncing, or delete the account, which removes the server-side copy.

Health Connect and sensors

Fitmeister can read steps, weight, and body fat from Android Health Connect, and can use your phone step counter for a live count during the day. Both are optional and require permissions that you grant, and can revoke, in Android settings.

Health and fitness data read through Health Connect is used only to display your activity inside the app and to fill in the metrics you asked for. It is stored locally on the same terms as everything else, it is included in cloud backup only if you have turned that on, and it is never used for advertising, sold, or shared with third parties. If you revoke the permission, we stop reading new data.

AI coaching

AI coaching is an optional feature. When you ask it to generate or discuss a training program, the relevant context — selected personal records, recent workouts, and routines — is sent to a third-party large language model provider to produce a response.

Nothing is sent to an AI provider until you actively use the feature.
Requests carry your training context, not your name, email address, or contact details.
If you supply your own API key, requests go directly from your device to that provider under your own agreement with them, and we never see the content.
Your training data is not used to train third-party models by us.

Imports and backups

Importing a Hevy or Strong CSV copies the file you select into private app storage so it can be parsed and audited. Parsing happens entirely on your device; the file is not uploaded.

Exports are written to a location you choose through the Android file picker. Once a backup leaves the app it is under your control, and its security depends on where you put it. A JSON backup contains your full training history, so treat it accordingly.

Internal testing sign-ups

If you sign up for internal testing on this website, we store the email address you submit, plus the optional name and device details, in the same EU-hosted database described above. We use them to add you to the Google Play tester list, send you the opt-in link, and email you about the test.

We do not add you to a marketing list, and we do not share the address. Ask us to remove it and we will, which also removes you from future invites. Note that adding you as a Play tester means Google processes your address under its own privacy policy.

This website

fitmeister.app sets no advertising or tracking cookies and runs no third-party analytics. Our hosting provider keeps standard server logs, including IP address, user agent, and requested URL, for security and for diagnosing faults. The site loads a web font from Google Fonts, which means your browser contacts Google to fetch it.

We do not sell personal data and we do not share it with advertisers. We rely on a small number of processors who handle data on our instructions:

Supabase — database and authentication hosting in the EU, for accounts, sync, and tester sign-ups.
Our web host — serving fitmeister.app and its server logs.
Google Play — app distribution, billing for Pro subscriptions, and crash reporting where you have opted in through Android.
AI providers — only for the requests you make with the AI coach.

We may also disclose data where we are legally required to, or where it is necessary to protect our rights or someone else’s safety.

How long we keep it

On-device data stays until you delete it or uninstall the app.
Account data stays while your account is active, and is deleted within 30 days of a deletion request.
Tester sign-ups are kept until the testing programme ends, or until you ask us to remove your address.
Server logs are retained for a short period, then rotated out.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold, to object to or restrict processing, and to complain to a data protection authority. For users in the EU and UK, our lawful basis is your consent for optional features such as sync, AI coaching, and testing invitations, and our legitimate interest in operating and securing the service.

Most of these you can exercise without asking us: the app exports your full dataset, and deleting your account removes the server copy. For anything else, email hello@fitmeister.app and we will respond within 30 days.

Children

Fitmeister is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us with data, contact us and we will delete it.

Changes to this policy

The app is still in testing, so this policy will change as features land. We will update the date at the top whenever it does, and we will tell testers by email if a change materially affects how your data is handled.

Contact

Questions, deletion requests, or anything else about your data: hello@fitmeister.app.

See also our terms of service and the support page.