Privacy Policy

This page explains what information FitnessTracker collects, where it is stored, who it is shared with and how you can delete it. We have tried to keep it short and to describe what the app actually does.

1. Data controller

The developer of the app and the data controller for this policy:

• Developer: Efe Kesler
• App: FitnessTracker (efekesler.fitness)
• Contact: fitness.tracker.2027@gmail.com

2. What data we process

Account information (Firebase Authentication)

We use Google's Firebase Authentication service to create your account and verify your sign-in. It stores:

If you choose to sign in with Google, Google tells us only your name and email address. We do not see your Google password and do not access anything else in your Google account (contacts, files, calendar).

Your fitness data (Firebase Firestore)

Fitness information you enter is stored on your phone. In the updated app, it is synced to your account through Google Firebase Firestore only with separate, optional cloud permission. You can use fitness tracking on this device without cloud permission; your records then do not follow you to another phone. Firestore rules prevent other users from accessing your account records; an authorized operator can access them for technical administration. The fitness information processed includes:

• Profile: your name, email address, age, height, weight, sex, activity level and goal type (lose, maintain, gain)
• Goals: your daily calorie, step and water goals
• Meals: calories, protein, carbohydrate and fat, meal name and your optional note
• Saved meals: meal templates you define yourself
• Workouts: type, duration, intensity and calories
• Daily logs: your step count and water intake
• Weight logs (with dates)
• Workout programs you save (programs prepared by AI Coach that you chose to save)

This data may count as health-related information. We use it only to provide the app's features to you; we do not use it for advertising, profiling or sale, and we do not share it with anyone else. Firestore security rules allow each account to read and write only its own data.

Step counter

To count your steps, the app uses your phone's step counter sensor, and Android asks you for the "Physical activity" permission. So that steps are counted while the app is closed, the sensor is read in the background roughly every 15 minutes. Only your daily step total is stored; your location, route or type of movement is not recorded. If you do not grant the permission, the app keeps working; steps are simply not counted.

AI Coach

AI Coach is offered with a monthly or yearly subscription and using it is optional. If you use it:

• "Ask AI Coach": The text of your question, the app language and, so it can follow the conversation, your earlier questions and answers from the same day are sent through our server (Google Cloud Functions) to OpenAI to generate an answer. Conversations from previous days are not sent.
  Profile details (only with your consent): One shared AI permission covers questions, programs and photo analysis. If you agree, your profile's age, height, weight, sex, activity level, goal and daily calorie/step/water targets are sent with the question so answers fit you. If you decline, no AI request is sent. Profile details of users under 18 are never sent.
  Your name, email address, account ID and your meal, workout, water, step and weight logs are not included. Your questions, profile details and the answers are not stored on our server. Your chat history is kept only on your phone, is excluded from phone backups, and is deleted when you delete your account.
  If you write health information into your question yourself (for example an illness, medication or injury), that information is sent to OpenAI together with the question. We recommend not including anything that identifies you, such as your name or ID number.
• Program builder (with the subscription, up to 1 a week): Your answers in the program wizard (goal, level, days per week, equipment, sensitive areas), the notes you type at each step and the app language are sent through our server to OpenAI to create your weekly program. With your shared AI consent, your profile's age, height, weight and sex are sent as well; this feature is not available to users under 18.
  Your name, email address, account ID and your meal, workout, water, step and weight logs are not included. Your answers, notes and the program are not stored on our server. The program is shown on your screen while it is being written; it is saved to your account only if you choose Save program.
  If you type health information into your notes (for example an injury or illness), it is sent to OpenAI together with the request.
• Image analysis (with the subscription, up to 2 a day): The single photo you pick from your gallery, the analysis type you choose (movement and posture, meal, other) and your optional question are sent through our server to OpenAI for analysis. This also requires your shared AI consent.
  Before sending, the photo is resized on your phone (longest side at most 1024 pixels) and re-saved, which removes photo metadata (EXIF), including location. The photo is not stored on our server, in Firebase or anywhere else on your phone; it is sent only for that analysis. Your name, email, profile and logs are not included. The app does not ask for general access to your gallery; it only sees the photo you pick.
  If your face or other people appear in the photo, they are sent as part of the image. We recommend not sending photos that identify you or others. AI Coach is instructed not to identify people in photos.
  Calorie and nutrient values from meal photos are estimates and can differ a lot from the real values.

Subscription and payment (Google Play)

You buy the Premium membership (including AI Coach) through Google Play. Your card details and the payment are handled entirely by Google; we do not see or store your payment information. To check whether your subscription is valid:

• The purchase token issued by Google Play is stored on our server, linked to your account, and before each AI Coach request we ask Google Play whether the subscription is still active. The app itself receives this token from Google Play and sends it to our server to verify the subscription.
• When you buy an extra question, program or photo analysis pack, we store an irreversible digest of that purchase's token, the pack type and the date, so the same purchase can never grant questions twice, plus a remaining extra questions, programs and analyses counters linked to your account. The token is sent to Google Play for verification.
• To calculate your allowances, we store an irreversible digest (hash) of the purchase token, the relevant usage dates and usage counters: 3 questions a day, 2 photo analyses a day and 1 program a week. The program week starts on Monday at 00:00 Türkiye time; question and photo allowances reset every day at 00:00 Türkiye time. We also store daily refund counters to enforce at most 1 technical-failure allowance refund per day for each allowance type. These counters do not contain the question, answer, program input or photo itself.

Ads (Google AdMob)

Users without a Premium membership see full-screen ads at screen transitions in the app. Ads are served by Google AdMob. Premium members do not see ads.

• To show and measure ads and to prevent fraudulent clicks, Google processes your phone's advertising ID, device and app information (such as device model, operating system, language and IP address) and your interactions with ads.
• In regions that require consent, such as the European Economic Area, the United Kingdom and Switzerland, Google's consent dialog is shown before ads are loaded, where you can make your choice.
• Your fitness and health data (profile, meals, workouts, water, steps and weight logs), your AI Coach questions, your photos, your name and your email address are not shared with the ad provider and are not used to target ads.
• You can turn off personalized ads, and reset or delete your advertising ID, in your phone's Settings → Google → Ads (or Settings → Privacy → Ads).

How Google uses data in ads: policies.google.com/technologies/ads.

3. What we do not collect

The app does not request, read or collect:

• Your location
• Your contacts, messages or files
• Other apps on your phone
• Camera or microphone
• Other health sensors such as heart rate (only the step counter is used)
• Your card or bank details

Permissions the app requests: internet access (for sign-in, syncing your data, AI Coach and ads), physical activity (for the step counter) and advertising ID (for ads only; see "Ads").

Apart from the Google AdMob ads shown to users without Premium, the app has no analytics or tracking tools (no Google Analytics, Firebase Analytics, Crashlytics or similar). Your usage habits are not tracked.

4. Why we process data

• Performance of a contract: The app does not work without an account, so account creation and sign-in information are processed. Email/password registration requires a password; Google sign-in does not require a separate app password, and we do not receive your Google password. Verifying your subscription and counting your daily allowance are needed to provide the service you paid for.
• Legitimate interest: The connection records kept by Firebase are for preventing account abuse. Keeping the purchase-token digest for 48 hours after account deletion prevents the usage allowance from being reset by deleting and recreating an account.
• Explicit consent: Separate approval is requested to process fitness and health data on this device for target calculations, tracking and displaying records. Cloud storage and cross-device syncing have a second, optional choice. Accepting the terms or reading this policy does not replace these approvals. Declining cloud permission does not prevent fitness tracking on this device. Sending questions, conversations, program inputs, permitted profile fields and selected photos to OpenAI is disclosed separately and requires the separate AI sharing permission. Step-sensor use also requires a separate choice.

5. Who it is shared with

We do not sell your data and we do not share your fitness data for advertising. We use these service providers:

Google's privacy policy: policies.google.com/privacy · OpenAI's privacy policy: openai.com/policies/privacy-policy. The app asks OpenAI not to store questions on its side; under its own policy OpenAI may keep this data for a limited time to prevent abuse, and states that it does not use data sent through its API to train its models by default.

Apart from this, we do not share any information with anyone unless required by law (for example a court order).

International transfers

Google (including Firebase, Google Play and AdMob) and OpenAI servers may be outside Türkiye, including in the United States. Firebase account and subscription services, and cloud syncing or AI sharing you permit, may involve these providers processing the relevant data abroad. Creating an account or reading this policy does not constitute explicit consent to international transfers. Processing permissions do not replace the legal requirements for international transfers. If you do not use AI Coach, no data is sent to OpenAI.

6. How long it is kept

OpenAI's standard API abuse-monitoring logs may retain content, usually for up to 30 days or longer if legally required. store:false does not remove those security logs. See OpenAI API data controls.

• Your account information and fitness data in the cloud: Until you delete your account.
• Data on your phone and your AI Coach chat history: Until you delete it, delete your account or uninstall the app.
• AI Coach questions, profile details and photos sent with them: Not stored on our server. OpenAI's own retention periods apply on its side.
• Subscription record: For as long as your account exists. When you delete your account the subscription link is deleted immediately; the purchase-token digest, usage dates and question/image/program usage and refund counters are marked for automatic deletion after 48 hours. Firebase TTL cleanup may complete later. The digest is not anonymous data.
• Extra pack records: For as long as your account exists. When you delete your account the remaining extras counters are deleted immediately; pack purchase digests are unlinked from your account and marked for automatic deletion after 48 hours.
• Firebase security records: Google's own retention periods apply.

7. Deleting your account and data

There are two ways:

1. In the app: Profile tab → Delete my account. Confirmation starts deletion. Once it completes successfully, your account, cloud fitness data and local data on the phone where you performed deletion are removed. Server-side cleanup of subscription links and content reports completes in the background and is retried after temporary failures. The retention exceptions above and the account deletion page still apply.
2. By email: Send a deletion request to fitness.tracker.2027@gmail.com from your account's email address. We will complete your request within 30 days at the latest.

Deleting your account does not cancel your Google Play subscription. You need to cancel it separately in Google Play → Payments & subscriptions. See the account deletion page for details.

8. Security

• Your password is stored irreversibly hashed by Google; the plain password is never kept anywhere.
• All communication between the app, Firebase and OpenAI is encrypted (HTTPS).
• Your data in the cloud can be accessed only with your own account; one user cannot read another user's data.
• The OpenAI access key is kept only on the server; it is not inside the app.
• Data on your phone is kept in the private area Android reserves for the app; other apps cannot read it. In the updated version, the local database and permission preferences are excluded from Android backup and device transfer.

Still, no system is completely secure. To protect your account, we recommend a strong password that you do not use anywhere else.

9. Children

The app is not designed for children under 13, and an age under 13 cannot be entered during profile setup. The AI Coach program feature is for ages 18 and over, and profile details of users under 18 are not sent to AI Coach. If we learn that an account belongs to a child under 13, we will delete it.

10. Your rights

Under Article 11 of Turkish Personal Data Protection Law No. 6698 (KVKK), you have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties it is transferred to in Türkiye or abroad, to request correction of incomplete or inaccurate data, to request its deletion or destruction, and to object to a result against you arising solely from automated analysis. You can withdraw your explicit consent at any time. In the updated app, Profile → AI sharing permission lets you select Allow or Remove permission for one permission covering questions, program generation and photo analysis together for your account on this device. If removed, consent is requested again before a new share. Started requests and previously sent data cannot be recalled; this does not cancel your subscription or delete records or reports. Consent is separate on each device. If this option is absent in an older version, email us or delete your account.

Profile → Step counter and data use lets you disable sensor readings and background step counting for your account on this device. Previously recorded totals are not deleted. Before step counting starts, sensor use, background readings and transfer of daily totals to your Firebase account are explained and your consent is requested.

To use these rights, simply write to fitness.tracker.2027@gmail.com. We will respond within 30 days at the latest.

Fitness data permissions

In the updated app, use Profile → Fitness data and cloud sync to change cloud permission. Leave the cloud box unchecked and save to stop new syncs; transfers already started or queued in Firebase cannot be recalled. Existing cloud records are not deleted automatically; use a deletion request or account deletion. Re-enabling cloud permission also syncs existing fitness records from this device. Withdraw permissions also withdraws local fitness processing permission, clears AI and step permissions and signs you out on this device. Existing records remain until you request deletion. Your next sign-in requires new approval. Choices and their dates are stored only for this account on this device; old acceptance of terms is not treated as new consent. Change permissions on other devices separately.

11. Changes to this policy

This policy may change as the app changes. If there is a significant change, we will update the effective date and notify you in the app. In particular, if a new type of data starts being sent to AI Coach, we will say so clearly.

12. Contact

For questions: fitness.tracker.2027@gmail.com