Privacy Policy

iUtils Fit is a training log. It records what you do so you can look back on it. This page describes every category of personal data the app handles, why it handles it, and how to get rid of it. It covers the Fit web app at fit.iutils.net, the iUtils Fit iOS app and the iUtils Fit Android app, which are the same service.

The short version

• Your training data is yours. It is not sold, rented, or used for advertising.
• There are no advertising or third-party analytics trackers in the app. Fit counts a few product events itself, on its own servers (see Product analytics below).
• Location is recorded only while you have a cardio activity running, and only to draw and measure that route.
• You can delete your account, and everything in it, from inside the app.

What is collected, and why

Account details

You sign in with an iUtils account. Fit receives your name, email address, and an account identifier from the iUtils Hub so it knows whose training log to show you. Fit never sees your iUtils password.

Product analytics

To know whether the app is working for people, Fit records a short list of events about your account on its own servers: that you signed up, finished setting up, logged a first workout, meal or cardio session, were active on a given day, saw the Pro upgrade screen (and which feature it was for), started a checkout, subscribed, started or ended a trial, or restored a purchase — with the device type (web, iPhone or Android). It never records what you typed: no food names, notes, weights or messages. These events are never sent to a third party or used for advertising. They are included in your data export, deleted with your account, and otherwise removed after about 13 months; only weekly totals with no account attached are kept longer.

Training data you enter

Workouts, sets, weights, reps, cardio sessions, habits, body weight and measurements, progress photos, food and nutrition entries, and notes. This is the substance of the app; it exists because you typed or logged it, and it is used to show you your history, progress, and the coaching summaries the app calculates from it.

Precise location

When you start a run, ride, or walk, the app records GPS positions for the duration of that activity, including while the screen is off or the app is in the background — that is the point of a route recording. Those points are stored with the activity so the app can draw the map and calculate distance, pace, and elevation. Location is not collected when no activity is running, and it is never used for advertising or shared with anyone. Deleting a cardio activity deletes its GPS points. If you opt in to a live circle ping during a run, Fit stores only a last position rounded to about 110 metres and shows it to members of the circle you picked. That share expires when you finish or discard the run, or after six hours. The circle feed says that you started and finished — never a coordinate or a trail.

Camera

The camera is used for two things: scanning a barcode on food packaging, and filming a short clip during a run so you can share it. Frames for barcode scanning are processed on your device and are not stored or uploaded. Only the resulting barcode number leaves your device, to look up the product (see below). Run clips are recorded on your device and handed to the share sheet you choose — Fit does not upload them.

Label, console and meal photos

Three features read a photo for you, and these photos are uploaded: a photographed nutrition label (to fill in a food you are adding), a photographed treadmill console (to fill in an indoor run), and a photo of a meal (to estimate what is on the plate). The photo is sent to Fit's server and from there to an AI vision provider, which returns the numbers it reads. Nothing about your account is sent with it. A label or meal photo is deleted as soon as the read finishes, and Fit never stores the image; a console photo is only a temporary upload, cleared automatically within a day. Under the provider's API terms it does not train its models on these photos.

You can also describe a meal in words, typed or dictated. That text, and any short note you add to a meal photo, goes to the same AI provider the same way and is used only for that estimate; it is not kept once the estimate is back. The estimate is a list of foods with guessed portions; it is held for at most 15 minutes for you to review. Nothing is saved to your log until you check the numbers and press Save, and the entries saved are marked as AI estimates. Fit's own usage counts record only that an estimate was made and how many items were saved, never what you ate. Scans are limited per day.

What you share with other people

Your display name, and anything you post — comments, circle and competition names, outings, spots, spot notes and spot photos — are shown to the people you share them with. A circle you list publicly, a public competition and a public spot can be seen by any Fit member. Before your first post you are asked to agree to the community rules, and Fit records when you did. Reports you make, and reports about what you post, are kept so moderators can review them.

Microphone

The microphone is used only when you film a run clip, so the clip can include sound. Audio stays on your device unless you share the video. You can decline the microphone and still record a silent clip.

Photos

Progress photos you choose to upload are stored with your account and are visible only to you. If you share an achievement card, the image is handed to your phone's share sheet — what happens next is your choice.

Purchase history

If you subscribe to Fit Pro, Fit records which plan you hold, when it renews or ends, and the store it was bought through. Card and bank details are handled by the store (Apple, Google Play or Stripe) and never reach Fit.

Push notification tokens

If you turn notifications on, your phone or browser gives Fit a delivery token. It is stored with your account, used only to deliver the notifications you asked for, and removed when you turn them off or sign out on that device.

Technical data

Standard server logs (IP address, timestamp, request path, user agent) are kept for security and debugging. If the app hits an error, a crash report may be sent to our error-monitoring provider so the bug can be fixed.

If the Fit app on your phone or watch crashes, it sends a crash report the next time it opens: the app version, your phone or watch's operating system version and model (for example "iPhone 15 Pro", never a device identifier), the page you were on (without any search terms or links in it), and where in the app's code the crash happened. A watch report travels through your phone. Crash reports carry no account details and no health or fitness data, and they are not linked to you.

Who your data is shared with

Fit does not sell personal data and does not share it with data brokers or advertisers. It is shared only with the service providers needed to run the app:

• iUtils Hub — sign-in and account identity.
• Open Food Facts and USDA FoodData Central — when you scan a barcode or search for a food, that barcode or search term is sent to look up nutrition information. No account details are sent with it.
• Apple Push Notification service (iPhone) and Google Firebase Cloud Messaging (Android) — the push token and the text of a notification you asked for, to deliver it.
• RevenueCat, Apple App Store and Google Play billing — when you subscribe in the app: a random billing identifier (not your Fit account number) and your purchase history, to process and verify the subscription.
• Stripe — when you subscribe on the web: checkout and payment, and your email address for the receipt.
• An AI vision provider (OpenAI by default) — only a label, console or meal photo you choose to scan, or a meal you choose to describe, to read or estimate the numbers. No account details are sent.
• Strava — only if you connect it: Fit sends Strava its own access token to read your activities, and to give that access back when you disconnect. Nothing about you is sent to Strava. See Strava below.
• Sentry — error and crash reporting.
• Our hosting and email providers — to run the servers and send the mail you ask for.
• Other people, only where you choose — if you join a circle, competition, or leaderboard, the members of that group see your display name and the scores relevant to it. They do not see your food log, progress photos, measurements, or routes. What you post publicly is visible to any Fit member (see above).

Data may also be disclosed where the law requires it.

How long it is kept

Your training data is kept for as long as your account exists, because a training log is only useful as history. Server logs are kept for a short operational window. When you delete your account, your data is deleted from the live database; residual copies in encrypted backups age out on the normal backup rotation.

Deleting your account and your data

In the app, go to Settings → Profile → Delete account. This permanently deletes your Fit account and the training data attached to it: workouts, cardio activities and their GPS points, nutrition entries, habits, measurements, photos, health daily metrics from Apple Health or Health Connect, menstrual cycle days, and meditation sessions. There is no waiting period and you do not need to email anyone. If you would rather have a copy first, export your data before deleting.

Deleting also cancels a web subscription and asks Stripe and RevenueCat to delete their customer record for you. A subscription bought in the App Store or Google Play is billed by the store and must be cancelled there. Your iUtils account, which you use to sign in to every iUtils app, is separate: delete it from iUtils → Settings → Delete account. The delete your account page lists exactly what is deleted and what is kept.

You can also email [email protected] to request access to, correction of, or deletion of your data, including under the GDPR and the CCPA. We do not sell personal information, so there is nothing to opt out of.

Permissions the iOS app asks for

• Location, including background — to record a route while an activity is running. Decline it and everything except GPS route recording still works.
• Camera — barcode scanning and filming a run clip you choose to make.
• Microphone — optional sound on a run clip. Decline it and clips still record without audio.
• Notifications — reminders you have asked for.
• Apple Health, reading — only if you connect it: workouts, routes, heart rate, weigh-ins, sleep and daily activity, read into your Fit log. Anything Fit itself wrote to Health is skipped, so it is never imported back.
• Menstrual cycle data — off unless you turn on cycle tracking in Fit (Progress → Recovery). Then Fit keeps the period start days you log and, if you allow it on the Health sheet, the menstrual flow days your iPhone has recorded. It is used only to show your cycle phase on your own Recovery page and as a note beside your readiness. It is never shown to your circles, on shared activities or link previews, in emails or notifications, or to anyone else, and it is included in your data export and deleted with your account. Turning tracking off stops Fit using it; Delete cycle history on the same page removes it.
• Apple Health, writing — off until you turn it on, one category at a time, under Settings → Apple Health → Write to Apple Health: strength workouts and runs or walks recorded in Fit (with the route for GPS runs and an energy estimate), weigh-ins you type into Fit, your food diary's energy, protein, carbohydrate and fat per meal, and completed meditation as mindful minutes. Only what you record in Fit after turning a category on is written. Nothing that came from Health, or that your Apple Watch saved itself, is written back. Editing or deleting the item in Fit updates or removes it in Health. Fit's servers keep a record of which items your phone has written so edits and deletes reach Health; the data written stays on your iPhone in Health, under Apple's control, and turning a category off stops new writes without removing what is already there.

Every one of these is optional and can be changed at any time in the iOS Settings app.

Permissions the Android app asks for

• Location — to record a route while an activity is running. While a recording is in progress Fit runs a foreground service with a persistent notification so the route keeps recording with the screen off; the app does not ask for background location and records nothing when no activity is running.
• Camera — barcode scanning, a new progress photo, and filming a run clip you choose to make. Existing photos are picked with the system photo picker; Fit does not ask for access to your photo library.
• Microphone — optional sound on a run clip. Decline it and clips still record without audio.
• Notifications — reminders you have asked for.
• Alarms & reminders — off on Android 14 and later until you turn it on from the rest timer's settings. It lets the "Rest over" alarm ring on the second with the phone locked; Fit sets one only while you are resting between sets. Nothing is collected with it.
• Health Connect, reading — only if you connect it under Settings → Health sync, and only the types you allow on Health Connect's own permission screen, in the background too if you allow that. What is read and why is set out in Health Connect below.
• Health Connect, writing — off until you turn it on, one category at a time, under Settings → Health sync → Write to Health Connect. Set out in Writing to Health Connect below.

Every one of these is optional and can be changed at any time in Android Settings, under Apps, iUtils Fit; Health Connect permissions are changed in the Health Connect app.

Health Connect

On Android, Fit can read health data from Health Connect, Google's on-device store that your watch and other health apps write to. It is off until you connect it in Settings → Health sync, and Fit then reads only the types you allow, each of which you can withdraw at any time in Health Connect. Fit writes to Health Connect only the categories you turn on (see Writing to Health Connect), and only ever changes or deletes records it wrote itself.

• Exercise sessions, with their routes (where Android allows Fit to read them), distance and heart rate — to add the runs, walks, rides and other workouts your watch recorded to your cardio log, with the map, pace, measured calories and the heart-rate figures that drive your training load.
• Steps — your daily step count, for your activity history and step competitions you join.
• Active calories burned — the energy your watch measured, for your activity history and the calorie targets the app calculates for you.
• Sleep, with its stages — for your Recovery page, your readiness and sleep habits you set.
• Resting heart rate and heart rate variability — for your Recovery page and readiness.
• Weight — for your weight trend and the calorie targets based on it.
• Menstruation — asked for only if you turned on cycle tracking in Fit, and used only as described under the iOS app's menstrual cycle permission above: on your own Recovery page, never shown to anyone else.
• Health data history — lets the first sync read the 90 days before you connected, so your history starts with something in it.
• Reading in the background — asked right after the types above. If you allow it, Fit reads the same types about every few hours while it is closed, so a run your watch recorded reaches your log without opening the app. If you do not, Fit reads only while it is open.

Health Connect data is read while the app is open and, if you allowed it, in the background about every few hours. It is sent to Fit's servers over an encrypted connection and stored with your training log, under the same rules as everything else on this page: used only to provide the features above to you, never sold, never used for advertising, credit or insurance decisions, never shared with anyone except the hosting providers that run Fit, and never read by people except where you ask for support, for security, or where the law requires it. Anything Fit wrote to Health Connect itself is never read back. Data read from Health Connect is included in your export and deleted with your account. Fit's use of information received from Health Connect adheres to the Health Connect Permissions policy, including its Limited Use requirements.

Writing to Health Connect

Off until you turn it on, one category at a time, under Settings → Health sync → Write to Health Connect. Turning a category on asks Health Connect for permission to write that category's types, and only those.

• Strength workouts — workouts you finish in Fit, as exercise sessions with an estimate of the energy burnt.
• Runs and walks — runs and walks recorded in Fit by GPS or on the treadmill, with their distance, energy, and the route for GPS ones.
• Weigh-ins — weigh-ins you type into Fit. Weigh-ins that came from Health Connect are not written back.
• Food diary — energy, protein, carbohydrate and fat, one entry per meal.
• Mindful minutes — meditation sessions you complete in Fit, on phones whose Health Connect has mindfulness sessions.

Only what you record in Fit after turning a category on is written, and never anything Fit read from Health Connect. A workout another app (your watch's, for example) already put in Health Connect for the same time is not written a second time. Editing or deleting the item in Fit updates or removes Fit's record in Health Connect. Fit's servers keep a record of which items your phone has written, and at which version, so edits and deletes reach Health Connect; the data written stays on your phone in Health Connect, under your control there, and turning a category off stops new writes without removing what is already there. If you use Fit on an iPhone and an Android phone, Fit writes from one of them at a time — the one where you last turned a category on — so nothing is written twice.

Strava

If you connect Strava under Settings → Connected apps, Fit reads your Strava activities into your Fit log: the sport, name, start time, distance, moving and elapsed time, elevation, heart rate, calories when Strava has them, and the GPS route. Fit asks Strava only for permission to read activities (including ones you made private on Strava) and never posts, edits or deletes anything on Strava.

Fit stores Strava's access tokens encrypted, uses them only to fetch your activities, and never shows them to anyone or includes them in your export (the export says only whether Strava is connected). Activities synced from Strava are shown to you and nobody else: they are left out of circles, competitions and leaderboards, public share links, your profile as other members see it, and the read API and MCP server that other apps and AI assistants use. They are not used to train or ground any AI model.

When the same session reaches Fit twice (your watch saved it to Health and also uploaded it to Strava), Fit keeps one copy: the one from Fit's own recording, then your watch, then Apple Health or Health Connect, then Strava, then a file you imported. An activity you delete on Strava is removed from Fit as soon as Strava tells Fit, normally within minutes, and a nightly check catches any notice that went missing.

Disconnecting Strava gives back Fit's access at Strava and stops syncing. Activities imported from Strava are then removed after 30 days; reconnecting before then keeps them, and you can choose to remove them straight away instead. The same 30 days apply if you remove Fit's access from Strava's own settings (Settings → My Apps on strava.com). Runs Fit or your watch recorded itself are never removed, even if Strava had a copy. Deleting your Fit account gives back the access and deletes everything synced from Strava at once.

Children

Fit is not directed at children under 13, and accounts are not knowingly created for them. If you believe a child has an account, email [email protected] and it will be removed.

Security

Traffic is encrypted in transit with TLS. Access to production data is limited to the people who operate the service. No system is perfectly secure, and this policy does not promise otherwise.

Health disclaimer

Fit is a fitness tracking tool, not a medical device. Its estimates — including VO₂ max, training load, calorie figures, and strength standards — are calculated from published formulas and your own logged data. They are informational, they are not diagnoses, and they are not a substitute for advice from a qualified professional.

Changes

If this policy changes in a way that materially affects how your data is handled, the date at the top will change and you will be told in the app.

Contact

Questions about this policy: [email protected].