Privacy Policy

Last updated: August 6, 2026

At FitDiv, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the FitDiv mobile application and related services (collectively, the "Service"). By using FitDiv, you consent to the practices described in this policy.

1. Information We Collect

We collect the following categories of information to provide and improve the Service:

1.1 Account Information

• Email address (for registered accounts)
• Authentication credentials (via Google Sign-In, Apple Sign-In, or email/password)
• Profile name and avatar (optional)
• Account creation date and last activity timestamp

1.2 Fitness & Workout Data

• Exercise types completed (overhead arm raises, squats, sit-ups, marching, walking)
• Repetition counts, sets completed, and workout duration
• Rank progression, division level, and achievement unlocks
• Rush Mode scores, high scores, and attempt history
• Store purchases and coin balance
• Workout streaks and daily activity logs

1.3 Diet Objective Data

• Hydration, fruit, vegetable, and protein objective completion status
• Objective completion timestamps and streak data
• Photos submitted for diet verification (see Section 3 below)

1.4 Device & Technical Information

• Device type, model, and operating system version
• App version and build number
• Device motion sensor data (accelerometer, gyroscope) used for rep counting
• Crash logs and diagnostic data (via Firebase Crashlytics)
• IP address and general location (country/region level only)

1.5 Communication Data

• Push notification preferences and tokens
• Support requests and correspondence with our team
• Feedback and report submissions

2. How We Use Your Information

We use your data to:

• Provide core functionality: Track workouts, calculate reps, manage rank progression, and sync progress across devices
• Personalize your experience: Adapt difficulty, suggest objectives, and display relevant challenges
• Verify diet objectives: Process submitted photos using on-device ML Kit text recognition to confirm fresh food items
• Maintain the coin economy: Track earned coins, store purchases, and reward distribution
• Send notifications: Workout reminders, Rush Mode availability, rank-up celebrations, and streak alerts (only if enabled)
• Improve the app: Analyze usage patterns, fix bugs, and optimize performance
• Ensure security: Detect fraudulent activity, prevent cheating, and enforce Terms of Service
• Comply with legal obligations: Respond to lawful requests and protect our rights

3. Photos, Camera & Image Processing

When you submit a photo for a diet objective:

• The image is processed using on-device Google ML Kit text recognition to detect packaging, labels, or logos
• Photos that pass verification may be temporarily stored in Firebase Cloud Storage for record-keeping and fraud prevention
• Photos are retained for a maximum of 90 days after submission, after which they are automatically deleted
• Photos are never shared with third parties, used for advertising, or sold
• We do not use facial recognition or identify individuals in photos
• You may delete individual photos or your entire account at any time (see Section 7)

4. Third-Party Services

FitDiv uses the following third-party services to operate the app:

Service	Purpose	Data Shared
Firebase (Google)	Authentication, Cloud Firestore database, Cloud Storage, Cloud Functions, Analytics, Crashlytics	Account data, workout data, photos, device info, crash logs
Google ML Kit	On-device text recognition for diet photo verification	Photos (processed locally on device)
Google Sign-In	Account authentication	Email, profile name
Apple Sign-In	Account authentication	Email (optional), anonymous identifier

These services are governed by their own privacy policies. We only share the minimum data necessary for each service to function.

5. Data Storage & Security

We implement industry-standard security measures to protect your data:

• Encryption in transit: All data transmitted between the app and our servers uses HTTPS/TLS encryption
• Encryption at rest: Data stored in Firebase is encrypted using Google Cloud's default encryption
• Authentication: Secure token-based authentication with Firebase Auth
• Access controls: Firebase Security Rules restrict data access to authenticated users only
• Password security: Passwords are never stored in plaintext; Firebase Auth handles secure hashing
• App Check: We use Firebase App Check to prevent unauthorized API access

While we take reasonable precautions, no system is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

• Active accounts: Workout data, rank progress, and account information are retained as long as your account is active
• Diet photos: Retained for 90 days after submission, then automatically deleted
• Crash logs: Retained for 90 days for debugging purposes
• Deleted accounts: All personal data is permanently removed within 30 days of account deletion (see Section 7)
• Anonymized data: Aggregated, non-identifiable usage statistics may be retained indefinitely for analytics

7. Your Rights & Choices

You have the following rights regarding your personal data:

• Access: Request a copy of all data associated with your account
• Correction: Update your profile information through the app settings
• Deletion: Permanently delete your account and all associated data via in-app settings
• Portability: Export your workout history (feature available in app settings)
• Notifications: Enable or disable push notifications through device settings or in-app preferences
• Camera access: Grant or revoke camera permissions through your device settings at any time
• Motion sensors: Grant or revoke accelerometer/gyroscope permissions through device settings

To exercise any of these rights, contact us at support@fitdiv.com.

8. Children's Privacy

9. Guest Mode

FitDiv offers a Guest mode for users who do not wish to create an account. In Guest mode:

• Workout data is stored locally on your device only
• Progress, ranks, coins, and achievements are not synced to our servers
• Data will be lost if the app is uninstalled or device data is cleared
• Guest users cannot access cross-device sync, rank progression, or store purchases
• Upgrading to a registered account will not recover previous Guest mode data

10. International Data Transfers

FitDiv is operated from Jamaica. Your data is stored on Firebase servers located in the United States and other regions as determined by Google Cloud infrastructure. By using FitDiv, you consent to the transfer of your data to these locations. Firebase complies with applicable data protection frameworks including the EU-U.S. Data Privacy Framework.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, features, or legal requirements. Material changes will be communicated via:

• In-app notification upon next login
• Email to your registered address (for significant changes)
• Updated "Last updated" date at the top of this page

Continued use of FitDiv after changes constitutes acceptance of the revised Privacy Policy.

12. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect about you
• Know whether your personal information is sold or shared (we do not sell or share your data)
• Request deletion of your personal information
• Non-discrimination for exercising your privacy rights

To exercise these rights, email us at support@fitdiv.com with the subject line "California Privacy Request."