FittyBitty ("the App") is developed by Geoff Baron. This policy explains what data the App collects, how it is used, and your rights.
Profile information you provide: name (optional), age, sex, height, weight, goal weight, activity level, fitness objectives, equipment, workout style, and notification preferences. This data is stored on your device and is used solely to generate your personalized workout plan.
Competition data (optional): if you choose to join the competition feature, we store your display name, XP, streak, level, and a randomly generated friend code on our servers (Supabase) so you can appear on private leaderboards with the friends and groups you invite. This requires an anonymous account — no email or password. Competition is invite-only; your profile is visible only to people you add as friends or share a group with.
Plan generation: when generating a workout plan, your profile data (age, sex, height, weight, goals, equipment, workout style) is sent to our server-side coach (a Supabase Edge Function that calls the Anthropic Claude API) to build your plan. This data is used only to generate your plan and is not stored on our servers after the response is returned.
Food tracking (Premium): if you use the Premium food-logging features, the meal photo you capture, or the text/voice description of your meal, is sent to our server-side estimator (a Supabase Edge Function that calls the Anthropic Claude API) to estimate its calories and macros. Voice is transcribed to text on your device before being sent — we do not upload audio recordings. Meal photos and voice transcripts are processed only to produce the estimate and are not stored on our servers after the response is returned. The resulting food-log entries (and any meal photo) are stored locally on your device, not uploaded.
Subscription status: for Premium subscriptions we store a single entitlement record (whether your subscription is active and its expiry) on our servers (Supabase), keyed to your anonymous account, so gated features can be unlocked. We never receive your payment details — purchases are handled by Apple.
Step count (Apple Health): if you grant permission, the App reads your daily step count from Apple Health (HealthKit) to automatically mark your daily steps goal complete. This is read-only — the App never writes anything to Health — and your step count is processed entirely on your device and is never sent to our servers.
Your workout plan, daily task completions, XP, streaks, badges, weight log, food-diary entries, any meal photos, and notification settings are stored locally on your device using Hive (an on-device database) and the app's file storage. This data is never uploaded to our servers unless you opt into the competition feature.
On-device data persists until you delete the app. Competition data (leaderboard entries, friendships, group memberships) persists on Supabase until you delete it in the app — Settings → Competition → Delete my competition data — or request deletion by email. Plan-generation requests are not stored after the response is returned.
The App is rated 4+ and does not knowingly collect personal information from children under 13. The competition feature uses anonymous accounts with no personally identifiable information required.
You can delete all on-device data by uninstalling the app. You can delete your competition data at any time from Settings → Competition → Delete my competition data, or email us at geoffbaron@gmail.com and we'll remove it for you.
We may update this policy from time to time. The updated version will be posted at this URL with a revised effective date.
For questions about this privacy policy, contact Geoff Baron at geoffbaron@gmail.com.