Privacy Policy

Last updated 1 October 2026

Fit for Love is a workout app for couples. Each of you sets a weekly goal and logs workouts with a photo; your partner approves them, and approved workouts pay for rewards the two of you agreed on. The photos become a shared record of the weeks you trained. This policy explains what we collect, why, where it is kept, and what happens to it.

Fit for Love is operated by the Fit for Love team. For any question about this policy or your data, contact [email protected].

What we collect

Account details: username, email address, and a securely hashed password. If you sign in with Google or Apple, we store the identifier they give us instead of a password, and the email address they release to us. We also generate a code other people can use to find you.
Profile: your profile picture and avatar choices, if you set them.
Workouts: each workout you log: its category, duration, your own description, the date, and whether your partner approved it.
Photos: the proof photo attached to a workout, photos you attach to a claimed reward, and your profile picture.
Places, only if you use them: places you save yourself (your name for the place, its coordinates and a radius), and, when a workout is logged inside one of them, that workout's coordinates and your name for the place. See Places and location.
Rewards: the rewards you and your partner define (title, description, what they cost in workouts), who claimed what and when, and any photo and caption attached to a claim.
Plans and settings: your weekly goal, any workouts you plan for the week, your notification preferences, and partners you have muted.
Your partnership: who your partner is, when you paired, and a weekly record of whether each of you met your goal.
Notifications: if notifications are enabled, a token identifying your device, and a log of which kinds of notification were sent to you. The log records the kind and the item it referred to, never the text.
Timezone: so that weeks start and quiet hours apply where you actually are.

We do not use advertising trackers or analytics, and nothing in the app follows what you do in order to profile you or sell to you. The app does report crashes and errors, so that we can fix them. A report holds the error, the part of the code that failed, your phone model and app version, and your account number. It does not hold your name, email address, photos or location.

Health data

Workout records describe your physical activity, and in some regions this counts as health data with additional protection under laws such as the GDPR. We collect it only to provide the app's core function: the weekly goal, your partner's review, and the rewards that follow. We do not use it for advertising, we do not profile you with it, and we do not sell it.

Places and location

Location is optional and off unless you use the map. It works in one direction only: you save places yourself, and a workout can be marked as having happened at one of them.

The app asks for location permission only on the map screen, where you save your places.
When you log a workout, the app checks your position against the places you saved. It attaches coordinates only if you are inside one of them, and the place name it stores is the name you chose.
We never look your position up in a place database, so we never learn an address or a business name from it.
You can turn this off in the app's profile settings, on the device, without affecting anything else.
Your saved places are yours alone: your partner cannot see your list of places.

Where a workout carries a place, your partner sees its coordinates and your name for it, on the workout they are reviewing and in your shared gallery.

What your partner can see

This is more than people usually assume, so it is worth stating plainly. Your partner can see:

Your username, avatar and profile picture
Your weekly goal and how far through it you are
Every workout you submit (its category, duration, your description, and the proof photo), both while it waits for review and after
The place a workout was logged at, when one is attached
Your shared streak, and a week-by-week history of whether each of you met your goal since you paired
A day-by-day calendar of when each of you trained
Your shared gallery: the proof photos from both of you, and the photos and captions attached to claimed rewards
The reward ledger: which of you claimed what, and when

Your partner never sees your email address, your password, or the places you have saved. You choose your partner, and you can end a partnership at any time. There is no public leaderboard and no global ranking.

How we use it

To run the app: signing you in, showing your workouts and progress, carrying a workout to your partner for review, keeping the shared balance and the rewards ledger, building your shared gallery, and sending notifications you have enabled. We also send a small number of service emails: address verification, password reset, and a welcome message once your address is confirmed.

Where it is stored

Your account, workouts, rewards and partnership records are held in a managed database in the European Union (TiDB Cloud, on AWS in Frankfurt).

Two parts of the service run outside the EU, so your data is transferred to the United States as part of normal operation:

The application server runs on Railway in the US (Western United States). Everything you do in the app passes through it.
Photos are stored in Cloudflare R2, in a bucket located in Eastern North America. The bucket is private: it has no public address, and the app reaches each photo through a link that is generated on request and expires after one hour.

Service emails are sent through Resend, which processes them in the EU (Ireland). Notifications are delivered through Expo's push service. Crash and error reports go to Sentry, which stores them in the EU (Germany). If you buy something in the app, the payment is taken by Apple or Google, and the purchase is recorded through RevenueCat, which receives your account number and what was bought, never your card details. You sign in with your email and password: signing in with Google or Apple is not offered at the moment. Each of these providers processes only what that function needs.

Deleting your account

Open Profile → Delete account in the app. The screen sets out everything below and asks you to confirm; nothing is deleted until you do. If you cannot reach the app, email [email protected] from the address on your account and we will delete it for you. Either way:

Deleted straight away: your email address, password, any Google or Apple identifier, your profile picture and avatar, your friend code, your workouts and their photos, your plans, your weekly goal and settings, your saved places, your badges, the names you gave when inviting your partner, your notification preferences, log and device tokens, and any pending partner invitations. Your account can no longer be signed into or found.
Kept for 7 days: if you had a partner, your username and the partnership itself remain for a week, so your partner can still see who the partnership was with and save the shared photos from it. After 7 days the partnership, those shared photos and the remainder of your account record are permanently deleted. If you had no partner, everything goes immediately.
Kept beyond that: photos and captions attached to rewards that were claimed and completed remain part of the shared reward record, because they belong to both of you. Tell us if you want yours removed and we will remove them by hand.

Deleting your account also deletes the shared proof photos from that partnership for both people, including your partner's copies of them.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, object to how we use it, or receive a copy in a portable form. Email [email protected] and we will respond within 30 days. You also have the right to complain to your local data protection authority.

The waitlist

If you give us your email address on this website to hear when Fit for Love is available, that address is the only thing we keep, alongside the date you gave it and which part of the page you gave it from. It is stored in a database run by Cloudflare in the European Union, separate from the app's own database, and it is not connected to an account: you do not have one yet.

We use it for one thing: to tell you when the app is out. We do not sell it, share it, or send anything else to it. To be removed, email [email protected] from that address and we will delete the record.

To stop the form being abused we count how many times each visitor submits it. That count is kept against a one-way fingerprint of your IP address rather than the address itself, it holds no history beyond the current fifteen-minute window, and it is deleted once the window passes. We never store the address your connection came from.

Children

Fit for Love is not intended for children. You must be old enough to consent to the processing of personal data where you live to use the app.

Changes

If we change this policy we will update the date at the top, and for material changes we will tell you in the app before they take effect.