Your privacy at Fit By Design

Information you provide

Account details include your name, email, password sign-in, registration answers, and any contact details you choose to enter. Fitness records may include goals, height, weight, workouts, meals and nutrition targets, sleep and recovery ratings, photos, messages, and meeting requests.

Only basic account details and consent are required; lifestyle, goals and training questions are optional. Optional photos and entries are provided by you. Do not put passwords, payment-card details, or unnecessary sensitive information in messages or support reports.

How the app uses it

The app uses these details to sign you in, save and display your records, personalize workout and meal suggestions, and provide support. Suggestions and photo estimates are general wellness features, not medical diagnoses. Recovery and sleep entries are self-reported or estimated from your button presses.

Your assigned coach and the app owner can access relevant profile, registration, workout, nutrition, recovery, and communication records to provide coaching and support. The app is designed to keep other members from accessing your account records.

Optional Apple Health connection

In the iPhone app, Recovery → Apple Health lets you choose whether to display sleep, weight, steps, active calories, workouts and resting heart rate from Apple Health. Each category is optional and requires your permission through Apple’s Health access screen. FBD does not write or delete Apple Health records.

These readings are processed on your iPhone and held only in memory during app use. They are cleared when you leave the app, sign out, or stop displaying Health data. Only your category choices are remembered for your FBD account on that device. Health readings are not sent to FBD’s servers, Firebase, your coach, analytics or advertising services, or AI services. They are not used for advertising or data brokerage.

Health values shown here remain separate from entries you manually save for your coach. The connection does not automatically copy Health workouts into your FBD workout log. You can stop displaying the data in FBD at any time; to revoke Health access, open Apple Health and manage Fit By Design under your profile’s app access settings. Your original Health records remain in Apple Health under your control.

A missing value can mean no records are available or that reading is not permitted. FBD cannot determine which. Sleep is recorded asleep time, with overlapping samples combined; it is not a diagnosis or a measure of time in bed.

Optional sleep tracker and bedtime reminder

Going to bed and I’m awake record manual time in bed on this iPhone. If you enable the FBD Today widget, it shares this state with the app so either can record your taps. The widget also stores a dated summary of food calories logged and workout days in the app’s shared storage on this iPhone. These totals appear on your Lock Screen and refresh when you use the connected app. Calories and activity alternate during the day; the sleep button appears from 8:30 PM until 6 AM local time, or until you save that night. An active night keeps its wake-up button available. Tapping I’m awake automatically saves the night on this iPhone. FBD syncs saved nights to your account for your trainer when you next use the connected app. You can change the date, hours, or notes later in Past Recovery. Recorded time in bed is an estimate, not measured sleep, and is not written to Apple Health. The optional bedtime reminder is scheduled on this iPhone at 8:30 PM local time. You can turn either option off in Recovery. Signing out disconnects the widget and cancels the reminder; saved and unfinished periods remain available when you sign back into the same account.

Optional iPhone trainer-message notifications

If you enable trainer message alerts, FBD stores this app’s Apple notification token and its link to your signed-in profile in Firebase. Google Apps Script sends only the message identifier, recipient profile identifier and creation time to the notification server. Apple receives a generic new-message alert and routing identifiers; your message text and health records are not included in the alert. Tapping opens your private conversation after sign-in. You can turn alerts off in FBD settings or iPhone notification settings. Signing out disconnects this device, and deleting your account removes its device registrations. Inactive device registrations expire after 90 days; technical delivery records expire after seven days. Email reminders are separate.

The optional daily check-in reminder is scheduled on your iPhone at 10 AM local time. Its preference is saved separately for your FBD profile on this device. It does not send your activity or health records to the notification server. Tapping opens Home after sign-in to the same profile. Turning it off or signing out cancels the reminder. Manage daily check-ins, trainer messages, bedtime reminders and rest-timer alerts together in More → Settings → Notifications.

Optional FBD Coaching membership

Workout planning and logging, nutrition, recovery, and progress remain free. The optional Apple subscription adds private trainer messages and personal workout guidance, with replies on business days. Apple processes payment; FBD does not receive your card details. We link an opaque purchase token and Apple transaction identifiers to your FBD account to verify membership, handle renewals and refunds, and restore purchases. The payment service stores membership status and expiration separately from your health and workout records. Health information is not sent to Apple to verify payment. If your membership expires, your saved tracking records and previous messages remain available. You can manage or cancel renewal in Apple Subscriptions. Deleting your FBD account does not cancel your Apple subscription; cancel it separately in your iPhone’s subscription settings.

After your FBD sign-in is deleted, background cleanup removes its billing account details, purchase links, membership status and request counters. Failures retry automatically. A one-way hash of the deleted account identifier remains with a deletion flag to prevent an already-running payment request from recreating its records. That marker contains no name, email, health information or Apple transaction details. Apple’s own payment records are outside this cleanup.

Optional buddy workouts

In Workouts, you can choose a username and allow invitations from members who know its exact spelling. This is off until you enable it. An invitation shares your username; accepting shares the exercise list and set progress for that session with that one buddy. Your weights, rep values, notes, body statistics, meals, contact details and other workout history are not included.

You can decline or block invitations, turn invitations off, or end a shared session. Each member saves their own workout separately. Unaccepted invitations expire after 30 minutes; accepted sessions expire after 12 hours. Ending the session removes the shared session data. Expired data is removed when the panel is next used or during scheduled maintenance; outages can delay cleanup. Your username and invitation preferences remain until account deletion. Account deletion also removes your buddy invitations and shared sessions. A buddy may retain information they saw or copied while you were sharing.

Services involved

• Google / Firebase: website hosting, password authentication, saved preferences, live updates and notification delivery. Google Apps Script and Google Sheets hold app records; Google Drive stores uploaded photos.
• Notifications: if enabled, a device delivery token and your notification preferences are stored. Alerts use a general message so private workout or message content does not appear in the push notification.
• Payments: Apple processes optional iPhone coaching subscriptions. Firebase stores the identifiers and status needed to verify access; Google Apps Script links verified coaching to the member profile. Existing Square payment or subscription information may also show legacy membership status. Apple and Square retain their own payment records.
• Photo analysis: if this optional feature is enabled and you choose it, the image and relevant request are sent to OpenAI for an estimate. Manual meal logging does not require photo analysis.
• External links: opening music, maps, meeting or payment links takes you to that provider, whose own privacy practices apply.

Your device and technical information

The app uses browser or app storage for sign-in restoration, settings, drafts, cached views and basic connection diagnostics. Clearing that storage can remove drafts that have not been saved to your account. Support reports include your account identity; attaching basic technical details is optional and has a preview.

Service providers also operate their own security and service logs. The current app does not include an advertising network or sell information through an advertising feature.

Delete your member account

Open More → Settings → Account controls → Delete my account. Confirm with your password and the deletion checkbox. You can request an email when cleanup finishes. A private status reference remains on the device that submitted the request.

Deletion removes your Firebase sign-in and active app records: profile and registration, workouts and drafts, personal templates, meals, nutrition preferences and saved meals, recovery entries, uploaded photos, messages, meetings, support reports, notification devices and other member settings.

Processing runs in the background, normally about 15 minutes. A brief waiting period allows already-running saves to finish before records are removed. A service failure leaves the request pending for automatic retries, rather than reporting a false success. Contact support with your reference if it remains pending after 24 hours.

Deleting your FBD account does not cancel subscriptions. Cancel Apple renewal in iPhone Settings → your name → Subscriptions, and any existing Square subscription separately. Provider-held payment records, copies already emailed or downloaded, and provider-managed backup, revision history or operational logs are outside the active app cleanup. Those copies follow the relevant provider’s retention controls. Ask support if you need help addressing them.

While cleanup is pending, its job record contains the member identifiers needed to finish. After completion the contact details and profile ID are removed from that job. A Firebase UID is kept in the deletion job and an access-blocking record for up to two days, then removed by the cleanup worker. The remaining status receipt is kept for up to 30 days. Service outages can delay those scheduled removals.

A sign-in that also manages a coaching workspace needs separate handling so deleting it does not orphan other members. Contact support to arrange the workspace transfer; the current self-service flow applies to member-only accounts.

Other choices and retention

You can update available personal details and goals in Settings, manage supported meal and draft entries, and disable phone notifications. Active account records are kept to provide workout history and the service until removed through available controls or account deletion. Ask support about access, corrections, exports, or records not covered by those controls.

Do not use support email to send your password or a verification code. Changes to this notice will be published here with an updated date.