Privacy policy

1. What we process

• Account data: your name, display name and email address. If you sign in with Google, we receive your name, email address and Google account ID from Google — we never see your Google password.
• Health and profile data: age, gender, height, weight, body-fat percentage, your 1RMs (bench, squat, deadlift, overhead press) and anything you write yourself about injuries, limitations and goals. This is special-category data (health).
• Training data: your programmes, workouts, sessions, sets, weights and reps, and your AI coach's remarks.
• Preferences: your language, your theme, and whether you work in kilograms or pounds and kilometres or miles.
• Your subscription (FITAMP Pro): which subscription you have (monthly or yearly), when it started, until when it runs, whether it renews and its status, the Google Play transaction numbers, and the notifications RevenueCat sends us about it (with the product, the dates, the price, the currency and the country of purchase). We never see your payment details: they stay with Google.
• Your profile picture: if you upload one we keep both the original and the cropped version. If you sign in with Google, that may include your Google profile picture.
• Your conversations with the coach: the messages themselves, and the notes the coach keeps about you to come back to later. Those may contain health or personal information you tell it.
• Feedback you send: your message, a screenshot if you attach one, and the page, browser and screen size you were on — so we can find the problem.
• Technical data: your device's time zone, so that "today" and "this week" are right wherever you are. When you sign in we record an IP address and browser or app details per session, to secure your account and spot suspicious sessions. For anonymous sessions we record those briefly so your data can be linked if you create an account later.

2. Why, and on what legal basis

We use your data to provide the service: building your programmes, tracking your progress and letting your AI coach guide you. The basis for this is the performance of our contract with you. For your health data — a special category under Article 9 GDPR — we rely on your explicit consent, which you can withdraw at any time. Withdrawing your consent does not affect processing that already lawfully took place before it.

If you have FITAMP Pro, we process your subscription data to provide Pro and to check that your subscription is running. The basis for this is the performance of our contract with you.

We also use aggregated, anonymised statistics (totals and averages across all users, never traceable to a person) to improve the app. Those figures contain no personal data.

3. The AI coach, payments and our processors

Hosting. The app and all your data live on servers run by Strato in Germany. We keep encrypted backups at OVH in France and on our own equipment in the Netherlands; OVH cannot read them. Strato and OVH act as processors, on our behalf.

E-mail. We send our e-mails (confirming your e-mail address or your access request, password resets, messages about deleting your account, and the reminder before a yearly renewal) through Brevo in France, as a processor. Brevo receives your e-mail address, your name and the text of the e-mail; no health or training data.

To make your AI coach work, we send relevant profile and training data and your chat messages to Mistral AI, an AI provider in the EU acting as our processor. This is your profile and training context — among other things your first name, age, gender, weight, height, experience level, goal, training frequency, available equipment, what you have written about injuries and goals, your 1RMs and settings such as your language, time zone and chosen coach — together with your earlier messages in the conversation and what the coach has remembered about you. We do not send your email address or surname as a profile field; if you type them into a chat message yourself, they naturally travel with that message. We share no more than the coach needs in order to answer usefully.

Google Play handles the payment for FITAMP Pro. Google does so as an independent controller, under its own privacy policy. We receive a confirmation of your purchase from Google, never your card or payment details.

RevenueCat, Inc. in the United States checks and manages subscriptions on our behalf, as our processor. For that, the app talks to RevenueCat directly. RevenueCat receives your FITAMP account ID (a random code, not your name or email address), the purchase details from Google Play, and with each request your device's brand and model, your Android version, the app version, your language settings, your Play country and, as with any internet request, your IP address. If you are not logged in, the app uses a random anonymous RevenueCat code; you cannot buy anything with it, and it holds no purchase and no account data. RevenueCat receives no advertising ID and no device ID. Because RevenueCat is outside the EU, we have agreed the European Commission's standard contractual clauses with RevenueCat.

Your data is never sold and never used for advertising.

4. When you share something yourself

The app can turn a finished workout into an image you can share. This happens only if you choose to. Such an image contains what you can see at that moment: your workout, your exercises, your sets and your volume. Your name is not on it. Once you share it, it leaves FITAMP and the terms of whichever app or platform you send it to apply. We never post anything on your behalf.

5. The app on your phone

The FITAMP app stores your login token, your preferences and a copy of the training data it needs to work on your device. These live in the app's private storage.

The app asks for no access to your contacts, your location, your calendar or your photo library. If you choose a photo as your profile picture, the app reads only that one image, in order to upload it.

When you log out we clear your login token and the ordinary caches. One thing deliberately stays: a workout you actually did that has not reached the server yet. It is yours, and discarding it would destroy it; it is sent as soon as you log in again. Uninstalling the app removes all local storage. Deleting your account removes your data on our side, as described in section 7.

6. Cookies

On the website we use only strictly necessary and functional cookies:

• Login and session cookies to keep you signed in and to secure the app.
• An anonymous-session cookie so you can use the app before creating an account, and link that data afterwards.
• A language cookie to show the app in your language.

These need no consent, because they are necessary for the service you are using. We use no analytics cookies and no advertising or tracking cookies. Should that ever change, we will ask you first.

7. How long we keep things

• We keep your account and training data for as long as you have an account.
• If you delete your account it goes dormant immediately, and your data is permanently erased after a 30-day recovery window. That window exists so you can change your mind; if you would rather not have it, you can tick a box when you delete to have everything removed right away. That is immediate and final, with no cancellation link.
• Your subscription data with us and your customer profile at RevenueCat disappear together with your account, at the same time as your other data. We cancel your Google Play subscription as soon as you request the deletion; we do that through RevenueCat.
• Payment notifications that Google Play still sends after your account is deleted are kept for at most 90 days and then deleted. They contain no payment details.
• One thing stays longer: the record of your consent. It is one line each time — which consent (health, terms or privacy), whether you gave or withdrew it, by which route and when — plus the exact wording we showed you at the time. It contains no training or health data. We keep it because we need to be able to show that you consented and to what, including after you have gone; the basis for that is our legitimate interest in being able to substantiate a claim about it. We keep it for one year after your account is deleted and then erase it automatically. Only we can access it, and it is not used for anything else. If you request your data, it is included.
• Expired session tokens and anonymous sessions (with the technical data that goes with them, such as the IP address) are cleaned up automatically and periodically.
• Your conversation with the coach is kept for about an hour after you stop talking. If something goes wrong with a conversation, we keep it for at most seven days so we can investigate.
• Feedback you send is kept for as long as we need it to fix the problem.
• Ever submitted an access request? We keep your name, email address and motivation until we have decided: if you are invited and create an account, the request itself disappears; if we decline, we delete it after 6 months; if it stays open, after 12 months. The IP address and browser details we record with that request — purely to spot abuse of the form — are erased after 30 days.

8. What the app decides by itself

FITAMP adjusts your training automatically. To do that it looks at your logged sessions and at your gender, body weight and current level, measured against strength standards. No person is involved.

• Hit your target and weights or reps go up. Genuinely miss it twice in a row and they come down by about 10%.
• After a number of weeks on a programme the app schedules a lighter week. That follows the week count, your level and your goal — the app does not measure how tired you are.
• Your level can move between beginner, intermediate, advanced and expert. That is saved without asking you, and it changes what the app sets up for you afterwards.
• On a phased programme the app may offer you the next phase. That step only happens if you accept it.

You can steer this: enter a different weight on a set; skip the lighter week for that programme and cycle; or set your level back by hand on your profile page — bearing in mind that a later evaluation can promote you again.

These choices are about what the app SUGGESTS. They do help decide what you actually lift, so treat them as a proposal rather than an instruction: you know how you feel today and the app does not.

9. If you live outside the EU/EEA

We handle your data according to this policy everywhere. If you live outside the EU/EEA, the following also applies.

Switzerland. The Swiss Federal Act on Data Protection (FADP) also applies. You can complain to the Federal Data Protection and Information Commissioner (FDPIC). Switzerland recognises the EU as providing adequate protection; for RevenueCat in the US we use the standard contractual clauses, with the adjustments for Switzerland.

Canada. Your data is stored and processed outside Canada: with our hosting in Germany, with encrypted backups in France and the Netherlands, at Mistral AI and Brevo in France, and at RevenueCat in the US. Authorities there may access it under local law. The person responsible for privacy is the director of Arcanium - AI Solutions, reachable at info@arcanium.nl. You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information.

Australia. We comply with the Australian Privacy Principles in the Privacy Act 1988. Your data is stored and processed in the EU (Germany, France and the Netherlands) and, for subscriptions, at RevenueCat in the US. If you are not satisfied with how we handle your complaint, you can turn to the Office of the Australian Information Commissioner (oaic.gov.au).

New Zealand. The Privacy Act 2020 also applies. Our hosting, Mistral AI, Brevo and RevenueCat hold or process your data on our behalf and do not use it for themselves. You can complain to the Office of the Privacy Commissioner (privacy.org.nz).

United States. For health data of US residents, our Consumer Health Data Privacy Policy also applies.

10. Your rights

• No account, but you did request access? Then there is nothing for you to delete yourself. Email us and we will remove your request straight away — no reason needed.
• Access and portability: download all your data as a ZIP (JSON + CSV) from your profile page.
• Erasure: delete your account from your profile page; for 30 days you can undo this using the link we email you.
• Rectification: correct your profile and account details in the app.
• Withdrawing consent: by erasing your health data or deleting your account.
• Restriction and objection: you can ask us to restrict processing, and object to processing we base on a legitimate interest. Email us and we will handle it.
• Complaints: you can complain to the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

11. Contact

Our terms of service are separate. Questions about your privacy or this policy? Reach us at info@arcanium.nl.