Privacy Policy

Effective date: August 22, 2026

FitNemo ("we", "our", "the App") is a fitness and nutrition tracking application. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.

1. Data We Collect

1.1 Account Information

Email address and password (or Google account via OAuth)
Display name and avatar (optional)

1.2 Body & Health Data

Height, weight, body fat percentage
Gender, date of birth
Activity level, fitness goals
Body measurements (waist, etc.)

1.3 Nutrition Data

Food journal entries (meal name, calories, macronutrients)
Food photos (when you use AI food recognition)
Water intake

1.4 Workout Data

Workout sessions, exercises, sets, reps, weights
Training programs and schedules

1.5 Apple Health / Health Connect Data

With your explicit permission, we may read and write:

Steps, distance, active calories
Heart rate
Sleep duration and quality
Weight entries
Workout records

This data is only accessed when you grant permission. You can revoke access at any time in your device Settings.

1.6 Photos

Food photos — sent to our AI service for food recognition
Progress photos — stored securely for your body composition tracking
Body composition photos — optionally sent to AI for body fat estimation

1.7 Subscription Data

Subscription status (free or Pro)
Purchase transactions are processed by Apple App Store, Google Play, and our subscription management partners — Adapty and RevenueCat
We do not store your payment card information

1.8 Product Analytics & App Improvement

To understand how users interact with the app and to diagnose issues, we use PostHog (EU region, Germany):

Usage events (screen views, button taps, onboarding steps)
Device technical data (OS version, model, locale)
User ID (to associate events with your account)
Onboarding session replay — only during first launch, for UX diagnostics. All text input and images are masked; payment screens are excluded.

We do not sell this data or use it for third-party advertising.

1.9 Marketing Attribution

When you purchase a subscription, aggregated event data (country, currency, amount, hashed email/IP) may be sent server-side to advertising platforms (Meta Conversions API) through our partner Adapty to measure ad campaign performance. IDFA (Apple's advertising identifier) is not used; the App Tracking Transparency prompt is not shown.

2. How We Use Your Data

Purpose	Data Used
Provide core app functionality	All user-entered data
AI food recognition	Food photos (processed server-side, not stored after analysis)
AI body fat estimation	Body photos (processed server-side)
AI sleep analysis	Sleep duration, quality data
AI workout generation	Fitness level, goals, equipment preferences
Calorie and macro calculation	Body metrics, activity level, goals
Sync health data	Apple Health / Health Connect (with permission)
Manage subscriptions	User ID, subscription status

3. Data Storage & Security

Your data is stored on Supabase (cloud database with PostgreSQL)
All data is transmitted over HTTPS (encrypted in transit)
Database access is protected by Row-Level Security (RLS) — you can only access your own data
Photos are stored in secure cloud storage buckets with access controls
Passwords are hashed and managed by Supabase Auth (never stored in plaintext)
Local data cache is stored on your device using AsyncStorage (encrypted by the OS)

4. Third-Party Services

Service	Purpose	Data Shared
Supabase (EU)	Backend, database, auth, AI processing	All app data
Adapty	Subscription management (primary)	User ID, purchase transactions, country, currency
RevenueCat	Subscription management (legacy users, transition period)	User ID, purchase transactions
PostHog (EU)	Product analytics and onboarding session replay (no text input, no images)	User ID, screen events, device technical data
Meta (Facebook) Conversions API	Subscription purchase attribution (server-side via Adapty)	Hashed email/IP, country, currency, purchase amount
Google	OAuth sign-in (optional)	Email, name, avatar
Apple Health / Health Connect	Health data sync (optional)	Steps, calories, sleep, weight, workouts

We do not use in-app advertising SDKs, IDFA, or device-level tracking. Analytics and subscription attribution rely on aggregated server-side events.

5. Data Retention

Your data is retained as long as your account is active
When you delete your account, all associated data is permanently deleted
AI-processed photos (food recognition, body fat) are not retained after processing is complete

6. Your Rights

You have the right to:

Access your data — all your data is visible within the app
Correct your data — edit any information in the app at any time
Delete your data — delete your account from the app settings; all data will be permanently removed
Revoke permissions — disable Apple Health access, camera access, or notifications in your device settings at any time
Export your data — contact us to request a data export

7. Children's Privacy

FitNemo is not intended for children under 17. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. The "Effective date" at the top of this page indicates when the policy was last updated.

9. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: support@fitnemo.com