Personal information protection

Your privacy and data security are our top priorities. Learn how Fitdays protects your personal information.

Data Collection

What We Collect

Personal Information:

• Name (optional)
• Gender
• Birthday
• Height
• Email (for account)

Health Data:

• Weight measurements
• Body composition metrics
• Trend history
• Goals and targets

Usage Data:

• App usage statistics
• Device information
• Crash reports

Data Storage

Local Storage

• Primary data stored on your device
• Encrypted using device security
• Not accessible by other apps
• You control deletion

Cloud Storage (Optional)

• End-to-end encrypted
• Stored on secure servers
• Accessible only to you
• Can be disabled anytime

Privacy Features

User Controls

Data Access:

• PIN protection for app
• Biometric authentication
• Multi-user privacy separation
• Guest mode for temporary users

Data Sharing:

• You control what to share
• Selective metric sharing
• Revokable permissions
• No automatic sharing

Third-Party Integration

When you connect to Google Fit, Apple Health, or Fitbit:

• Explicit permission required
• Only selected data is shared
• You can disconnect anytime
• No data sold to third parties

Data Security Measures

Technical Protection

1. Encryption:

   • Data encrypted in transit (TLS/SSL)
   • Data encrypted at rest (AES-256)
   • Secure authentication protocols

2. Access Control:

   • Multi-factor authentication
   • Session management
   • Automatic logout
   • Failed attempt protection

3. Server Security:

   • Regular security audits
   • Firewall protection
   • Intrusion detection
   • DDoS protection

Organizational Measures

• Privacy by design: Built into development
• Data minimization: Collect only what's needed
• Regular audits: Security assessments
• Staff training: Privacy awareness
• Incident response: Quick action on breaches

Your Privacy Rights

Access & Control

You have the right to:

• Access: View all your stored data
• Export: Download your data (CSV/PDF)
• Correct: Update incorrect information
• Delete: Remove your data permanently
• Object: Opt out of certain processing

How to Exercise Your Rights

View Your Data:

1. Go to Settings → Privacy
2. Select "My Data"
3. Review all stored information

Export Data:

1. Settings → Account
2. "Export My Data"
3. Choose format and confirm

Delete Account:

1. Settings → Account Management
2. "Delete Account"
3. Confirm with password
4. All data permanently deleted within 30 days

Data Retention

Active Accounts

• Data retained as long as account is active
• You can delete anytime
• Regular data cleanup available

Inactive Accounts

• After 2 years of inactivity, we may:
  • Send reminder email
  • Archive data
  • Eventually delete (with notice)

After Account Deletion

• Data deleted within 30 days
• Backups purged within 90 days
• Some logs retained for security (anonymized)

Third-Party Services

Analytics

We use analytics to improve the app:

• Anonymized usage data
• Crash reporting
• Performance monitoring
• No personal health data in analytics

Advertising

• No personal data sold to advertisers
• No targeted ads based on health data
• Optional marketing communications
• Easy opt-out available

Children's Privacy

• App not intended for children under 13
• No knowingly collecting children's data
• Baby Mode doesn't collect personal identifiable information
• Parents control all baby data

International Data Transfers

If you're outside our primary region:

• Data may be transferred internationally
• Same protection standards apply
• Compliant with GDPR and similar regulations
• Standard Contractual Clauses used

Updates to Privacy Policy

We may update our privacy practices:

• You'll be notified of significant changes
• Continued use implies acceptance
• Previous versions available on request
• Effective date clearly stated

Contact & Questions

Privacy Inquiries

For privacy concerns or questions:

• Email: [email protected]
• Response time: Within 48 hours
• Escalation: Available for serious concerns

Data Protection Officer

Contact our DPO for:

• Privacy violations
• Data breach concerns
• GDPR requests
• Compliance questions

Best Practices for Users

Protect Your Account

1. Strong password: Use unique, complex passwords
2. Enable PIN: Lock app with PIN or biometric
3. Regular reviews: Check account activity
4. Secure device: Use device lock screen
5. Public Wi-Fi: Avoid on unsecured networks

Sharing Safely

• Don't share account credentials
• Review before posting to social media
• Use privacy features when sharing
• Consider what data is visible to others

Recognize Phishing

We will NEVER:

• Ask for password via email
• Request sensitive data in messages
• Send unsolicited links
• Pressure for immediate action