Privacy policy

This policy explains what personal data FitroLab collects, why, who it is shared with and the choices you have. FitroLab is operated by FitroLab, which is responsible for your data. You can reach us at hello@fitrolab.com.

What we collect

Your account

Your name, email address, a hashed version of your password (we never see the password itself) and your billing country, which sets the currency prices are shown in.

Your fitness profile

What you tell us during setup and later in your profile: your goal, gender, date of birth, height and weight, training experience, schedule, equipment, injuries, exercises you like or dislike, the supplements you take and any notes you add. Some of this, such as injuries and body measurements, is health information.

What you log

Workouts and the sets, weights and reps you record, foods and meals, body weight, body measurements and weekly check-ins.

Progress photos

Photos you choose to upload, along with the date you agreed to store them. They are kept in private storage and are only shown to you. A photo is sent for AI analysis only when you ask for it.

AI Coach conversations

The messages you send to the AI Coach and its replies, so you can scroll back through them.

Wallet and payments

Your wallet balance, every charge and top-up, and the amount, currency and status of each payment. Card details are entered on the payment provider’s page and never reach our servers.

Technical data

Your IP address and browser details in our server logs, a session cookie that keeps you signed in, and your chosen language and theme.

How we use it

• To run the service you signed up for: writing your workout program and meal plan, tracking your progress, answering your questions in the AI Coach and keeping your wallet. This is necessary to perform our contract with you.
• Health information is used only for these purposes and only because you chose to give it to us. You can delete it from your profile at any time, which withdraws that consent.
• To keep FitroLab secure and working, for example preventing abuse, fixing errors and enforcing request limits. This is in our legitimate interest.
• To meet legal obligations, such as keeping payment records for tax purposes.

We do not sell your data, show you advertising or build advertising profiles.

How the AI features use your data

When you ask FitroLab to write a program, a meal plan or supplement advice, to analyse a progress photo or to answer a coach message, we send the details that request needs to an AI provider that processes it on our behalf. For example, a program request includes your profile and training history; a photo analysis includes that photo. We currently use OpenRouter, which forwards requests to the model developer, and Liara. We do not use your data to train AI models.

AI output can be wrong. Check anything that matters for your health with a qualified professional.

Who we share it with

• AI providers, as described above, only when you use an AI feature.
• The payment provider that handles your top-up.
• Companies that host our servers, store our files and send our emails.
• Authorities, when the law requires it.

These providers may be located outside your country. Where that happens we rely on the safeguards the law requires for such transfers.

Cookies and local storage

We use one essential cookie to keep you signed in and protect forms against forgery. Your language choice is stored in that session, and your light or dark theme preference is saved in your browser’s local storage. We do not use analytics, tracking or advertising cookies, so there is nothing to opt out of.

How long we keep it

We keep your data while your account is open. If you ask us to delete your account, we delete your profile, logs, photos and coach conversations within 30 days. Payment and wallet records are kept for as long as tax and accounting law requires, then deleted. Server logs are kept for a short period for security and are then removed.

How we protect it

Passwords are hashed, connections are encrypted and progress photos are only served to your own signed-in account. No system is perfectly secure, but we limit access to your data to what running FitroLab requires.

Your rights

Depending on where you live, you can ask us to:

• give you a copy of your data, including in a portable format,
• correct data that is wrong,
• delete your data and your account,
• restrict or object to how we use it,
• withdraw your consent for health information or photos at any time.

Most of your data can be edited or deleted directly in the app. For anything else, email hello@fitrolab.com and we will reply within 30 days. You also have the right to complain to your local data protection authority.

Age

FitroLab is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a minor has created an account, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If the change affects how we use data you have already given us, we will tell you by email or in the app before it takes effect.