Privacy Policy

FitLog is a workout, nutrition, and fasting tracker, available as a web app at fitlog-two-gamma.vercel.app and as an Android app on Google Play. It is developed and operated by Milan Solarov, an independent developer based in Serbia ("we", "us"). This policy explains what data FitLog handles, why, who else is involved, and the choices you have. It applies to both the web app and the Android app.

1. Data we collect

Account data

• Your email address, which we also use to send account emails such as password resets.
• Your password, which is handled by our authentication provider and stored only in hashed form. We never see it.

Health and fitness data you enter

• Workouts: sessions, exercises, sets, repetitions, weights, effort ratings, supersets, rest days, whether you took pre-workout, and exercise notes.
• Nutrition: meals and the foods in them, amounts, calories and nutrients, custom foods, recipes, water intake, and alcoholic drinks.
• Fasting: the start, end, and target length of fasts.
• Body and profile: age, sex, height, body weight entries and notes, body measurements (waist, chest, arms, hips), activity level, and your weight, calorie, and water goals.
• Photos you choose to add: progress photos and meal photos.
• Your workout and meal presets, programs, and goals.

This information can reveal details about your health. We process it only to provide the features you use, and only after you agree to it in the app.

App preferences

Units, theme, color palette, haptics, bottom-bar layout, and similar settings.

Barcode scans and camera

When you scan or type a barcode, the barcode number is sent to Open Food Facts to look up the product. Camera images are processed on your device to read the barcode and are never uploaded. The camera is used only while the scanner is open.

Notifications

If you turn on push notifications, we store the technical subscription details your browser or device provides (an endpoint address and encryption keys) so we can send the weekly summary and streak reminders. Turning notifications off deletes them.

On the web, if rest timer notifications are on, the same details and the time your rest ends are sent to our server while the rest timer counts, so it can send the "Rest over" alert even when your phone is locked. They're deleted as soon as the alert goes out or the rest is skipped. In the Android app, the rest timer runs on your phone and sends nothing to us.

In the Android app, push notifications go through Google's Firebase Cloud Messaging instead. Turning them on stores a token Firebase gives your phone, so we can send the weekly summary and streak reminders. Turning them off deletes it.

Tips

The Android app has an optional tip jar. Tips are paid through Google Play, and we never see your payment details: Google only tells the app that a tip went through. How many tips you've left is counted on your phone and never sent to us. Google's privacy policy covers the payment itself.

Diagnostics

When the app hits an unexpected error while you're signed in, it records the error message, technical details about where it happened, the app page, and your browser's user-agent string (browser and operating system version). We use this only to find and fix bugs.

Messages you send us

If you use Send feedback in the app, we receive the subject, message, and reply email you enter, along with the app version, whether you're using the web or Android app, and the email of the account you're signed in with. The message is kept in our contact inbox and a copy is emailed to the developer so we can reply. We use it only to answer you and improve the app, and delete it on request.

Data stored on your device

The app keeps a copy of recently viewed data, your sign-in session, and a few preferences in your browser's storage so it works offline and loads quickly. Signing out clears your session. These are functional storage only; FitLog uses no advertising or analytics cookies.

Technical data

Like any website, our hosting provider processes your IP address and basic request information (such as browser type and time of access) to deliver the app and keep it secure.

2. How we use your data

• To provide FitLog's features: logging, history, charts, goals, achievements, and calculations.
• To sync your data across your devices and keep it available offline.
• To send notifications you have turned on.
• To keep your account secure and to diagnose and fix problems.
• To reply when you contact us.

We do not use your data for advertising, profiling, or automated decisions, and we do not use it to train artificial-intelligence models.

3. Legal bases (GDPR and Serbian law)

• Providing the service you signed up for: account data, preferences, and the data needed to run the features you use.
• Your explicit consent: health and fitness data, which you give in the app before entering it. You can withdraw consent at any time by deleting your account.
• Our legitimate interest in keeping the app secure and working: diagnostics and technical data.

4. Who else processes your data

We use a small number of service providers. Each receives only what it needs to do its job:

These providers may process data on servers outside Serbia and the European Economic Area, including in the United States. Where that happens, they rely on recognized safeguards such as the European Commission's Standard Contractual Clauses.

5. Sharing with other users

Nothing you log is visible to anyone else by default. If you choose to share a workout preset, meal, recipe, program, meal plan, or diet to Community, that item (its name and contents) becomes visible to other FitLog users so they can save a copy. Each shared item also has a link you can send to anyone. When a link is posted or sent in an app such as WhatsApp or Instagram, its preview shows the item's name and description, so people without a FitLog account can see those two things; opening the item itself needs an account. Shared items don't show your name or email. You can stop sharing at any time, but copies other people already saved are theirs and stay in their accounts. If you report a Community item, we store the report (which item, and the reason you give, if any) with your account so we can review it. We never sell or rent your data, and we disclose it to authorities only when legally required.

6. How long we keep it

• We keep your data for as long as you have an account.
• When you delete your account, your account, logs, photos, notification subscriptions, and diagnostics are permanently removed from our live systems right away. Any copies in our provider's backups expire within 30 days.
• One exception: if another user saved a meal or recipe that uses a custom food you created, that single food entry (name and nutrition values only, no link to you) may remain so their log still works.
• Deleting individual entries in the app removes them immediately.

7. Your rights and choices

Depending on where you live, you have the right to:

• Access and portability: download all your data from Settings → Export my data.
• Correction: edit or delete any entry in the app.
• Deletion: delete your account in Settings → Delete account, or at fitlog-two-gamma.vercel.app/delete-account even if you no longer have the app installed.
• Withdraw consent for health data at any time, by deleting your account.
• Object to or restrict certain processing, by contacting us.
• Complain to a supervisory authority. In Serbia, that's the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs). In the EU or EEA, it's the data protection authority in your country.

You can also email us to exercise any of these rights. We'll reply within 30 days.

8. Security

All data travels over encrypted connections (HTTPS). Database access rules ensure each account can reach only its own data, and photos are stored privately and shown only through short-lived links. No system is perfectly secure, but we take reasonable measures to protect your data. If a breach affects you, we'll notify you and the relevant authorities as the law requires.

9. Children

FitLog is not intended for anyone under 16, and we don't knowingly collect data from them. If you believe a child has created an account, contact us and we'll delete it.

10. Health disclaimer

FitLog is a personal tracking tool, not a medical device. Calorie, macro, and body-weight estimates are approximations and are not medical, nutritional, or professional advice. Talk to a doctor or qualified professional before starting a diet, a fasting routine, or an exercise program, especially if you have a health condition.

11. Changes to this policy

If we change this policy, we'll update the date at the top. For significant changes, we'll also let you know in the app before they take effect.

12. Contact

Questions, requests, or concerns: departmentofone.app@gmail.com