FitTrack Privacy Policy

FitTrack is a fitness, nutrition, workout, and wellness tracking app. This Privacy Policy explains how FitTrack handles information when you use the app.

Information stored on your device

FitTrack stores most app data locally on your device. This may include your profile, calorie goals, weight goals, food logs, quick add foods, saved recipes, water logs, workout preferences, step data, and app settings.

This local data is used to provide the app’s tracking features. It is not sold to advertisers.

Information sent to FitTrack services

FitTrack may send limited information to FitTrack services when you use online features, including account sign-in, food search, barcode lookup, recipe search, feedback reporting, or a private trophy claim link.

If you choose Google sign-in, Google provides FitTrack with a verified Google account identifier and may provide your email address, display name, profile photo, and email-verification status. FitTrack uses the Google ID token only to verify the sign-in request and does not store that token or receive your Google password. FitTrack stores an account record and a cryptographically hashed FitTrack session token on its backend. The usable session token is stored encrypted on your Android device using Android Keystore.

A FitTrack account is optional. You can continue using the app locally without signing in. When you choose Google sign-in, automatic account sync turns on so your existing local FitTrack history can be merged with any history already stored in that account.

While signed in, FitTrack may store your profile and goals, nutrition logs, quick-add foods, water logs, daily step totals, workout history, weight history, personal recipes, trophy progress, notifications, learned food choices, and selected preferences in your FitTrack account. This allows your data to be restored or merged on another device. FitTrack does not upload raw step-sensor events, Google passwords, Google ID tokens, legal-acceptance records, or device-only sensor internals.

If notifications are enabled, FitTrack may store a Firebase device registration token linked to your signed-in account and app installation. The token is used to deliver account, friend, Arena, trophy, moderation, and other FitTrack notifications to that device. FitTrack attempts to remove the token when you sign out, removes invalid tokens after delivery failures, and deletes account-owned notification tokens when the FitTrack account is deleted. The token is not used for advertising.

Friends and Arena features are optional. If you create a social profile, FitTrack stores your chosen username, optional bio, selected built-in profile icon, equipped Arena icon/frame/title, permanent friend code, username-change timing and temporary previous-username record, friend requests, friendships, blocks, challenge or match participation, recent online-presence time, and social privacy settings. Your username and bio may be visible to other signed-in users when discoverability is on.

For social features, FitTrack may store limited daily summaries such as step totals, workout counts, active-day status, trophy total, and activity streak. When trophy sharing is enabled, FitTrack may also store the identifiers and unlock dates of trophies in your collection and which trophies you selected for your showcase. These records support friend profiles, trophy comparisons, leaderboards, and challenges. FitTrack does not share your weight, calorie goal, individual food logs, water amounts, recipes, personal goals, or detailed workout entries with friends.

When you use Arena, FitTrack may store matchmaking preferences, invitations, teams, match rules, match start and end times, the step total recorded when a match begins, later step totals submitted while the match is active, scores, participation status, and results. FitTrack uses the difference between submitted totals to calculate match progress; it does not upload raw step-sensor events, GPS routes, or detailed movement traces for these step games.

FitTrack also calculates aggregate Arena service metrics such as players searching or battling, mode and format popularity, matchmaking wait time, completion or cancellation rates, rematch activity, and busy hours. Public activity displays use aggregate counts rather than exposing a private list of who is playing.

FitTrack may also publish optional community events. If you join one, FitTrack stores your event membership and calculates your qualifying step or workout contribution from the same limited social daily summaries used for challenges. Event pages may show participant counts, combined community progress, and your own contribution. They do not expose another participant’s food, weight, calorie, water, goal, route, or raw sensor data.

Social daily activity summaries are limited to recent history and are scheduled for deletion after 45 days. Ended long challenges, completed or cancelled Arena matches, and completed, declined, or cancelled request or invitation records are scheduled for deletion after 90 days. Active friendships, blocks, pending requests, social profiles, shared trophy records, current matches, and current challenge memberships remain until they are changed, deleted, or the FitTrack account is deleted.

You can remove friends, decline or cancel requests, leave challenges, change social visibility settings, report an account or challenge, or block another account. Reports are private and may include the reported username, profile bio or challenge title, selected reason, optional explanation, reporter account identifier, and time of report so FitTrack can review safety concerns. Blocking removes the connection and prevents the two accounts from finding or interacting with each other through FitTrack social features.

You can sign out to stop account syncing on that device. You can also delete the signed-in FitTrack account from Account & sync, which removes the account-owned cloud records described below.

When a private trophy link is previewed or claimed, FitTrack sends the claim token, app version, package name, and a randomly generated installation identifier. The trophy service stores the token only as a cryptographic hash, records successful redemption against that installation identifier, and returns a digitally signed trophy grant. A recipient label entered by the trophy creator may also be stored with the invite; it is a display label and is not an identity check.

When you submit feedback or a bug report, FitTrack may collect the message you write, app version, device model, Android version, app diagnostics, recent app screen context, optional food context, and any screenshot or photo you choose to attach. This information is used only to troubleshoot bugs, improve the app, and support beta testing.

FitTrack may use third-party food data providers and backend services to return food, barcode, and nutrition search results.

Health and fitness information

FitTrack allows users to track fitness and wellness information such as calories, food logs, weight goals, workouts, water intake, and steps. FitTrack is intended for general fitness and wellness tracking only. It does not provide medical advice, diagnosis, or treatment.

Photos and screenshots

If you attach a screenshot or photo to a feedback report, that image is uploaded with the report. Attachments are optional and are used only for troubleshooting and app improvement.

Advertising, direct sponsors, and privacy choices

FitTrack may display limited advertising on selected browsing screens, such as recipes, history and trends, trophy history, battle history, or the You page. FitTrack does not use app-open ads or full-screen interstitial ads, and ads are not intentionally placed in active food logging, barcode scanning, workouts, or Arena matches.

Some placements may show a clearly labeled direct FitTrack sponsor before using an ad-network fallback. To choose a direct sponsor, the app sends the sponsor service only the placement name and app build. When a direct sponsor is displayed or opened, FitTrack records the campaign identifier, placement, whether the event was an impression or click, and a random per-card engagement token used only to avoid counting repeat taps on the same rendered sponsor card as multiple qualified clicks. The engagement token is not tied to a FitTrack account or device and is scheduled for deletion after 7 days. FitTrack does not send your account identifier, device identifier, weight, food logs, calorie goal, workout details, recipes, water logs, step totals, or Arena scores to a direct sponsor for ad targeting. Sponsor links may open an external website governed by that sponsor’s own privacy practices.

When no direct sponsor is active for a placement, FitTrack may use the Google Mobile Ads SDK (AdMob) to request and display an ad. The Google Mobile Ads SDK may automatically collect and share information such as IP address, app interactions, diagnostic information, and device or account identifiers for advertising, analytics, and fraud-prevention purposes. FitTrack does not send your weight, food logs, calorie goal, workout details, recipes, water logs, or Arena scores to AdMob as ad-targeting fields.

Where required, FitTrack uses Google’s User Messaging Platform (UMP) to request or manage advertising consent before requesting Google ads. A privacy-options entry is available in FitTrack settings when advertising is enabled so applicable users can review advertising privacy choices.

Data sharing

FitTrack does not sell user data. FitTrack may share limited data with service providers used to operate or monetize the app, such as backend hosting, storage, food data APIs, Firebase/Google notification delivery, feedback notification tools, and Google Mobile Ads. Direct sponsor reporting is limited to aggregate campaign, placement, impression, and click events as described above. These services are used to provide app functionality, process food searches, deliver requested app notifications, store feedback reports, improve the app, serve limited advertising, measure ad performance, and help prevent advertising fraud.

Data deletion

You can delete a signed-in FitTrack account from Account & sync in the app. Deleting the FitTrack account removes the account identity, active server sessions, account-owned cloud-sync records, social profile, friendships, requests, blocks, activity summaries, shared trophy records, Arena invitations and participation, community-event memberships, and challenge participation. Matches or challenges created by that account are also removed. Local logs on your phone remain until you separately reset local data from Data & storage settings.

If you no longer have the app installed, you may request deletion of your FitTrack account and associated cloud data by emailing tylerabrannen@gmail.com with the subject “FitTrack account deletion request.” FitTrack may need to ask for limited information to locate and verify the account before deletion.

A server trophy-redemption record may remain to enforce one-time claim limits and prevent duplicate use. Submitted feedback may be deleted manually by the FitTrack administrator. Reports marked fixed are scheduled for deletion after 30 days, including any stored attachment. Archived reports remain until they are manually deleted.

Security

FitTrack uses reasonable safeguards to protect information sent to its services. No method of transmission or storage is completely secure.

Children

FitTrack is designed for adults age 18 and older. FitTrack may enforce this adult-only requirement through store eligibility and in-app age checks.

Contact

For privacy questions or data deletion requests, contact: tylerabrannen@gmail.com