fit-ai | Keep going, at your own pace.

At fit-ai, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

Information We Collect

We collect various types of information to provide and improve our services:

Account Information: Email address, password, and profile details you provide during registration. If you sign in with Apple or Google, we receive the email address, display name, and account identifier provided by that company (never your password).
Workout Data: Exercise records, sets, reps, weights, and training history you log in the app.
Body Metrics: Height, weight, body composition data, and fitness goals you choose to share, including values imported from Apple Health or Health Connect if you turn that connection on.
Activity Data: If you turn on the Apple Health or Health Connect connection, daily totals of your steps and distance, and a summary of workouts recorded by other apps or devices (type, start and end time, duration, distance, and the bundle ID or package name of the app that recorded it).
Trainer sharing information: If you use trainer sharing, your sharing settings (the categories and period you share and your time zone), a record of your consent (when you agreed, which version of the document you agreed to, your IP address, and information about the app and device), a record of the trainer's views, and the messages, stamps and feeling tags exchanged with the trainer.
Device Information: Device type, operating system, app version, and usage analytics.
Advertising Identifiers: We collect your advertising ID and device identifiers to deliver and measure ads.
Trainer Application Information: If you apply to become a trainer in the app, the contact email address, phone number, organization, qualifications, and reason for applying that you enter, and the result of our review.
Access Logs: Our servers and the cloud servers we use record logs of access, including IP address, date and time, and device and app information.

How We Use Your Information

We use the collected information for the following purposes:

To provide, maintain, and improve our fitness tracking services.
To power AI-driven features such as personalized workout recommendations and coaching.
To provide trainer sharing: only if you apply, choose the categories and period to share, and agree, we provide the records in the categories you chose to the trainer you accepted (by letting them view the records on the trainer screen) and deliver the trainer's messages of encouragement and advice to you. We also show you the record of views, prevent misuse of trainer sharing, and respond to reports.
To analyze usage patterns and enhance user experience.
To respond to your inquiries and provide customer support.
To review trainer applications and contact applicants.
To prevent misuse and keep the service secure.

Data Protection

We implement industry-standard security measures to protect your personal information. Data is encrypted in transit using TLS and at rest on our servers using AES-256 encryption. Data stored on your device is protected by your operating system's encryption. We regularly review and update our security practices to ensure the safety of your data. If you contact us, we will tell you without delay about the measures we take for the security control of personal data under Japan's APPI, including what we know about the personal information protection systems of the foreign countries where we handle personal data.

Where Your Data Is Stored and International Transfers

Your account and activity data are stored on our cloud infrastructure (Supabase / Amazon Web Services) in the Tokyo region, Japan. Data for AI coaching is sent to its recipient through our AI server (Google Cloud, Tokyo region). Transfers outside Japan are handled as follows.

AI coaching recipient: If you consent to AI coaching, the country where the recipient (Google) processes your data cannot be determined in advance, and your data may be processed outside Japan, including in the United States (see "Data Sharing with Third-Party AI Services").
Third-party services: Providers of the services we use for operating our database, syncing your data, sign-in, subscription management, crash reporting, advertising, and similar purposes (including companies in the United States) may process data outside Japan.
Residents of Japan: We provide personal data to third parties in foreign countries in accordance with Article 28 of Japan's Act on the Protection of Personal Information (APPI), either with your consent or after confirming that the recipient has established a system that meets the standards of the Act. For the personal information protection systems of the recipients' countries, see the survey of foreign personal information protection systems published by Japan's Personal Information Protection Commission. You may request information on the measures taken by recipients through "Contact Us".
Residents of the EEA, the UK, and Switzerland: We, a Japanese company, collect your data directly. The European Commission has found that Japan ensures an adequate level of protection for personal data (adequacy decision). When we transfer personal data from Japan to service providers in other countries, we rely on appropriate safeguards under Article 46 of the GDPR, such as the European Commission's Standard Contractual Clauses (SCCs), or on the EU-U.S. Data Privacy Framework where the recipient participates in it. You may request a copy of these safeguards through "Contact Us".

Data Retention

We retain your personal data only for as long as it is necessary to provide fit-ai. While your account is active we keep your data to deliver the service; if you delete your account we handle it as described below.

While your account is active: account details, workout records, body data, activity data, meal logs, goals and AI chat history are retained so we can provide the service. You can delete individual records in the app at any time.
When you delete your account: your account is disabled immediately and you can no longer sign in. Local data on your device (offline cache) is erased at that point, and your account details, workout records, body data, activity data, meal logs, goals, AI chat history and authentication credentials (such as your email address) are permanently deleted from our servers.
Statistics after deletion: at the time of deletion we retain only non-identifying aggregate figures for service improvement (such as the number of deletions and total workout counts per month, age band and gender). Dates of birth are generalised to an age band before aggregation and no per-person record is created. Individuals cannot be re-identified from these aggregates.
Backups: data contained in backups is erased once the backup retention cycle has rotated.
Diagnostics and analytics: crash reports and usage analytics are retained, in a form that does not directly identify you, only for as long as needed to maintain service quality.
Data sent to AI coaching: data is used solely to generate that particular piece of advice and is not retained long-term by the recipient (see "Data sent to third-party AI for AI coaching").
Trainer sharing records: Your sharing status (categories and period), the record of views, and messages, feeling tags and stamps are kept while you are connected and for 1 year after the connection ends so that you can check them in the app, and are then deleted. After the connection ends, the trainer cannot view your records or the feeling tags and stamps you sent. During that year, however, the trainer can still see the details of the connection (your display name as it was when you started sharing, the categories, period and time zone you shared, and when the connection started and ended), the messages the trainer sent, and the trainer's own record of views. If you delete your account, all of them are deleted immediately, and the trainer can no longer see them either. However, the record of provision to the trainer (the record of your consent: when you agreed, which version of the document you agreed to, your IP address, information about the app and device, and when you withdrew consent; which trainer received records of which categories and period, when the trainer viewed them, and when the connection ended; to identify you, it includes your email address and display name as they were when the record was made; it does not include the content of your records) is kept for 3 years from the last date of provision (the date the connection ended), as required by the Act on the Protection of Personal Information, and is then deleted. This record is kept for that period even after you delete your account.
Legal retention: records we are required to keep by law (for example tax and accounting records) may be stored with restricted access for the period required by that law, and are fully deleted once that period expires.

Cookies and Tracking

Our mobile app may use local storage and similar technologies to enhance your experience. Our website uses cookies for analytics and to remember your preferences. You can control cookie settings through your browser.

Third-Party Services

We may use third-party services for analytics, cloud storage, authentication, and advertising. You can sign in with Apple (Sign in with Apple) or Google (Google Sign-In), in which case their authentication services are used. We use Google AdMob to deliver ads, and advertising identifiers such as your advertising ID may be shared with Google to display and measure ads. These services have their own privacy policies, and we encourage you to review them. We do not sell your personal information to third parties.

Advertising Identifiers and "Sale or Sharing"

On the free plan we show ads through Google AdMob, and advertising identifiers (Apple IDFA / Google Advertising ID) are provided to Google to deliver and measure ads. We do not sell personal information for money. Providing identifiers for advertising may, however, count as "sharing" under some laws (for example the California CCPA/CPRA). You can opt out at any time: on iOS, decline app tracking under Settings › Privacy & Security › Tracking; on Android, turn off ad personalization under Settings › Google › Ads; or subscribe to Premium, which shows no ads. You can also send an opt-out request to the contact below.

Apple Health and Health Connect

fit-ai can connect to Apple Health (HealthKit) on iPhone and Health Connect on Android. The connection is optional and off by default. You can turn it off at any time in the app's settings or in your device's permission settings.

Data we read: When the connection is on, and within the permissions you grant on your device, we read your weight, height, and body fat percentage, and your steps, workouts (exercise type, start and end time, and duration), and distance, including data recorded by other apps and devices such as smartwatches. We do not read workout routes (location), sleep, or your saved heart-rate history.
Only daily totals are stored: Your steps and distance are added up on your device into one total per day, and only those totals are saved. For workouts from other apps and devices, we save only a summary (type, start and end time, duration, distance, and the bundle ID or package name of the app that recorded it) and an identifier that keeps the same workout from being imported twice. We do not import calories burned. Minute-by-minute or second-by-second step and distance data (raw data) never leaves your device and is not stored on our servers. Workouts that fit-ai itself wrote are skipped so they are not counted twice.
Data we write: We write the weight, height, and body fat percentage you record in fit-ai, and your strength training and running workouts (type, duration, and distance). We do not write calories burned.
Apple Watch: During a workout, we read your heart rate on Apple Watch to show it, and when you finish we save the average and the maximum, the average for each kilometer on runs, and 5-second averages (your heart-rate trend) as part of your training record. The heart-rate trend is used only to show you a chart on the workout detail screen. We also use it to measure running distance. This happens only when you work out with Apple Watch, within the permissions you grant on your device.
Storage and use: Values we import are saved as your fit-ai records (body composition, the height in your profile, daily activity, and workout summaries) and are synced, like your other records, to the cloud described in "Where Your Data Is Stored." We use them only to provide the service to you, such as showing and looking back on your records, reflecting active days on your calendar and weekly goal, managing your goals, and, if you choose, sharing with a trainer as described below. We (including our officers and employees) look at values we import and values read on Apple Watch individually only for specific records you agree to let us check as part of your inquiry, when necessary for security purposes such as investigating misuse, or when required by law (apart from the trainer you accepted viewing them through trainer sharing as described below). When investigating a malfunction, we handle these values only in aggregated form that does not identify you.
AI coaching: If you have agreed to send data for AI coaching, the weight, height, and body fat percentage imported from Apple Health or Health Connect may be sent, as part of your body records, to the recipient described in the section on sending data to third-party AI. We do not send your steps, distance, workouts from other apps or devices, or heart rate to AI.
Sharing with a trainer: Only if you apply in the app to connect with a trainer, choose the categories and period to share, and agree, can the trainer you accepted (a person acting as a trainer in their individual capacity) view the records in the categories you chose, on a screen for you alone, only to coach you. This includes values imported from Apple Health or Health Connect and values read on Apple Watch that fall within those categories (Body: weight and body fat percentage; Workouts: summaries of workouts from other apps and devices, daily steps and distance, average and maximum heart rate, and for runs, your split time for each kilometer and your average heart rate for each kilometer). Your second-by-second heart-rate trend (the graph) and your height and other profile details are not shared. Sharing is off by default. You can see in the app a record of each time the trainer opens your records on the trainer screen, and you can stop sharing at any time, which ends the trainer's access immediately. Trainers may use your records only to coach you, and may not use them for advertising or solicitation or pass them to others. For details, see "Sharing Your Records with a Trainer."
What we never do: We do not use data from Apple Health or Health Connect for advertising, usage analytics, or marketing, and we do not sell it. Apart from AI coaching with your consent and sharing with a trainer you choose, both described above, we do not share it with third parties.
If you turn the connection off: We stop reading and writing. Values already imported remain as your fit-ai records. You can delete your daily activity and workout summaries under Settings > Health in the app, delete body records individually in the app, and deleting your account erases all of them. Values fit-ai wrote to Apple Health or Health Connect remain there; please delete them in those apps.
Medical notice: This app (fit-ai) is not a medical device. It is not intended to diagnose, treat, cure, or prevent any disease or injury, and values such as steps, distance, and heart rate are estimates. For medical advice, diagnosis, or treatment, consult a doctor or other healthcare professional.

Sharing Your Records with a Trainer

Only if you apply in the app, choose the categories and period to share, and agree, can the trainer you accepted view your records and send you encouragement and advice. Nothing is shared by default. This section explains who the trainer is, what is shared, how views are recorded, and how to stop sharing.

Trainers: A trainer is an individual whom we have accepted as a trainer, and acts as a trainer in their individual capacity. A trainer is connected with you only if you apply in the app, choose the categories and period to share, and agree (accept). The consent screen shows the trainer's name and, if they have provided one, their self-introduction. Only the trainer you accepted views your records as a trainer (access by us is limited as described under "Access by us" in this section).
Provision to the trainer: Letting a trainer view your records is a provision of your personal data to a third party based on your consent (Article 27(1) of the Act on the Protection of Personal Information of Japan). We ask for your consent when you apply, and again when you share more categories or widen the period. If the trainer is outside Japan, before asking for your consent we will tell you the name of the country, its system for protecting personal information, and the measures the trainer takes to protect your data.
What is shared: You choose which of the following three categories to share (all are off by default). (1) Workouts: your strength training and running records (everything in them, such as exercises, weight, reps, time, distance, pace, rest and notes, including the average and maximum heart rate read on Apple Watch and, for runs, your split time for each kilometer and your average heart rate for each kilometer); summaries of workouts from other apps and devices imported from Apple Health or Health Connect (including the bundle ID or package name of the app that recorded them) and your daily steps and distance; exercises you created; and your exercise goals (such as weekly sessions, weight, distance and time). (2) Body: your weight, body fat percentage, muscle mass and notes (including values imported from Apple Health or Health Connect), and your body goals (such as target weight and target body fat percentage). (3) Meals: your meal records (everything in them, such as what you ate, amount, calories, protein, fat, carbohydrates and notes) and foods you registered. Only your current goals are shared. Goals you have replaced with new ones are not. For each current goal, all the values in that goal (such as a calorie target) and its notes are visible together. The trainer also sees your display name as it was when you started sharing, and the time zone used to divide the sharing period by date (such as Asia/Tokyo, which indicates your approximate region). If you signed in with Apple or Google, your display name may contain the name on that account. The consent screen shows the name the trainer will see, and you can change your display name before applying. Changing your display name after the connection starts does not change the name the trainer sees. Because notes are shared too, we recommend not writing details of illnesses or injuries in them.
What is not shared: Your profile (date of birth, gender and height), email address, conversations with the AI coach, second-by-second heart-rate trend during workouts (the graph), routines, app settings, and goals of types that belong to neither Body nor Workouts are not shared.
Sharing period: You can choose "all records," "records from today's date," or "records from a date you choose." Dates are calendar dates in the time zone you were in when you started sharing. If you choose "records from today's date," records dated today are included even if you logged them before agreeing. If you change the period after the connection has started, you can choose "records from the date the connection started" instead of "records from today's date." Your current goals (including their notes) and the exercises you created and foods you registered (their names and nutrition values, including ones created before you agreed and ones not used in any record) are visible regardless of the period you chose, as long as you share the corresponding category.
Changing or stopping sharing: You can change the categories and period at any time in the app. When you share more categories or widen the period (such as changing it to "all records" or moving the start date earlier), we ask for your consent again. If you turn off all categories or end the connection, the trainer can no longer view your records from that moment. However, even with all categories turned off, until the connection ends the trainer can still see the feeling tags and stamps you send and can send you messages. From your feeling tags and stamps, the trainer can tell when you sent them and whether you sent them after finishing a workout. When the connection ends, the trainer can also no longer see your feeling tags or stamps or send you messages. What the trainer viewed before you stopped cannot be undone. The trainer or we may also end the connection. We may also temporarily stop trainers from viewing records if we suspect a malfunction or misuse.
Limits on the trainer's use: The trainer views your shared records only to encourage and coach you, on a screen for you alone. The trainer screen has no features to aggregate or compare multiple users or to export records (downloads or print views). The trainer may not use your records for anything other than coaching (including advertising, solicitation or sales), pass them to others, or keep them after the connection ends. The trainer's encouragement and advice are not medical care.
Record of views: Each time the trainer opens your records on the trainer screen, the date and time and the categories shared at that moment are recorded. You can check this record in the app at any time. It does not include IP addresses or device information.
Messages: The trainer can send you prepared phrases, a short note of up to 140 characters, and stamps. You can send prepared feeling tags and stamps (there is no field for free text). Notifications do not show the content of messages or any numbers or counts from your records. Besides you and the trainer, we may check messages and feeling tags to the extent needed to prevent misuse or respond to reports.
Access by us: We do not view your individual records for our business or administrative purposes. Even if a trainer is also one of our officers or employees, they view your records only on the trainer screen, within the categories and period you accepted, and never in a business or administrative capacity for us. We may refer to your records, to the extent necessary, only when needed to respond to an inquiry from you, to investigate a malfunction or misuse, or to comply with the law. Values imported from Apple Health or Health Connect and values read on Apple Watch are further limited: we do not look at them individually except for specific records you agree to let us check as part of your inquiry, when necessary for security purposes such as investigating misuse, or when required by law. When investigating a malfunction, we handle these values only in aggregated form that does not identify you. We do not use what we learn in these cases for a trainer's encouragement or advice. When we check messages, feeling tags and stamps exchanged with the trainer, we do so only as described under "Messages."
Age: Trainer sharing is available only to people aged 18 or over. If you have not registered your date of birth, we ask you to enter it (or confirm that you are 18 or over) before you start. A date of birth you enter when starting is saved as the date of birth in your profile (it is not shared with the trainer).
If you live in the EEA, the UK or Switzerland: Sharing with a trainer is based on your explicit consent (GDPR Article 6(1)(a) and Article 9(2)(a)). You can withdraw your consent at any time by stopping sharing. Withdrawal does not affect the lawfulness of processing before withdrawal.

Data Sharing with Third-Party AI Services

When you use our AI Coaching features (AI Advice, Nutrition Advice, Custom Prompts, etc.), the following personal data is sent through our AI server to Google's generative AI service (Vertex AI on Google Cloud).

Data we send

Training records (exercises, sets, reps, weights, workout history)
Body composition records (weight, body fat, muscle mass, fatigue level, PR records)
Meal records (food entries, macronutrient data)
Goal settings (goal type, target values)
Profile (gender, age, height)

Recipients

Google LLC — via Vertex AI (Gemini models) on Google Cloud. The processing country is not fixed (see "Where the data is processed" below) — Google Privacy Policy

Where the data is processed

We use the "global" endpoint of Vertex AI. With this setup, we cannot choose the country or region where Google processes the data, so it cannot be determined in advance. Your data may be processed outside Japan, including in the United States.

Data protection level

Google processes the data only on our instructions under the Google Cloud data processing terms (Cloud Data Processing Addendum). Transfers of the data of residents of the EEA, the UK, and Switzerland are covered by safeguards included in those terms, such as the Standard Contractual Clauses (SCCs).

Obtaining consent

Data transmission only occurs after you have explicitly granted consent through the in-app AI Coaching consent dialog. You may withdraw consent at any time from Settings → AI Coaching → 'Allow data sharing with third-party AI'. No further data is transmitted after withdrawal.

How the data is handled

Transmitted data is used only to generate the requested advice for that session. Under the Google Cloud terms, Google does not use this data to train its AI models without our permission.

Your Rights

You have the following rights regarding your personal information (their scope may vary depending on the laws of the country or region where you live):

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data and account. However, records we are required by law to keep (such as the record of provision to the trainer; see "Data Retention") are kept until the required period has passed and are then deleted.
Data Portability: Export your workout data in a standard format.
Stopping trainer sharing and checking views: You can reduce or stop sharing with a trainer in the app at any time, and you can check in the app the record of views on the trainer screen.
Restriction: Request that we stop using your personal data or restrict its processing.
Objection: Object to processing based on our legitimate interests (see "For Residents of the EEA, the UK, and Switzerland (GDPR)").
Withdrawal of consent: Stop processing based on your consent, such as sending data to AI coaching connecting Apple Health or Health Connect, or trainer sharing, at any time from the app or device settings. Withdrawal does not affect the lawfulness of processing carried out before it.
Complaints: Please contact us first through "Contact Us". Residents of Japan may also lodge a complaint with the Personal Information Protection Commission, and residents of the EEA, the UK, and Switzerland with the data protection supervisory authority of their country.

How to make a request: We accept the requests above at the email address in "Contact Us". After verifying your identity, we will respond without undue delay (where the GDPR applies, generally within one month of receipt). You can also delete your account from within the app.

For Residents of the EEA, the UK, and Switzerland (GDPR)

If you live in the EEA (the EU member states, Iceland, Liechtenstein, and Norway), the UK, or Switzerland, your personal data is governed by the EU General Data Protection Regulation (GDPR), the UK GDPR, or the Swiss Federal Act on Data Protection. The controller is the company listed under "Operator Information". We process personal data on the following legal bases for each purpose.

Performance of a contract (GDPR Art. 6(1)(b)): creating your account and signing you in; storing, syncing, and displaying your training, body, meal, and other records; managing goals; providing paid plans; reviewing trainer applications; and responding to inquiries.
Consent (Art. 6(1)(a)): sending data to a third-party AI for AI coaching, connecting Apple Health or Health Connect, reading your heart rate on Apple Watch during a workout, providing records in the categories you choose to the trainer when you apply (trainer sharing), and delivering and measuring ads using advertising identifiers. For health-related data, when we send data such as your weight and body fat to the AI, import data such as your weight and body fat from Apple Health or Health Connect, or read your heart rate on Apple Watch during a workout, we rely on the explicit consent you give on the respective screen, including your device's permission screen (Art. 9(2)(a)). We ask for your consent to ads through Google's consent management tool (User Messaging Platform). In version 2.5.0 or later of the app, on the free plan, before we show ads, if you use the app in a region where consent is required, such as the EEA, the UK, and Switzerland, we show a consent screen and deliver ads according to the choices you make there. Until you have made your choices, we do not request any ads, including when the consent screen cannot be shown. Versions 2.4 and earlier of the app do not support this consent screen, so if you use the app in a region where consent is required, please update the app to the latest version. You can change your choices at any time in the app under Settings > About > Ad privacy settings (shown only on the free plan in regions where consent is required). On iOS, we ask for "Allow Tracking" afterward only if, on this screen, you consent to storing and accessing information on your device (TCF Purpose 1) and to creating and using profiles for personalized ads (Purposes 3 and 4), and you also consent to Google as an ad vendor. If you withhold consent to any one of these, we do not ask for "Allow Tracking", and we show non-personalized ads even if you allowed tracking before.
Legitimate interests (Art. 6(1)(f)): preventing misuse and keeping the service secure, fixing bugs using crash reports, and improving the service by analyzing usage. You may object to this processing at any time.
Legal obligation (Art. 6(1)(c)): keeping records that we are required by law to retain, such as tax and accounting records, and keeping the record of provision to the trainer under Japan's Act on the Protection of Personal Information.

Operator Information

The company that handles your personal information under this Privacy Policy (the business handling personal information under Japan's APPI and the controller under the GDPR) is:

Name: i-Willink LLC
Address: 2-2-15 Minami-Aoyama, Minato-ku, Tokyo 107-0062, Japan
Legal representative of the company: If you contact us, we will tell you the name of the person who represents our company without delay.
Contact: support@fit-ai.jp (see "Contact Us")

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@fit-ai.jp