Privacy Policy
Last updated 19 October 2026
Short version. Your camp data is yours. We use it only to run FITEWEEK for you. We never sell it and there are no ads. Your coach sees only what you choose to share. You can export or delete everything at any time from Me in the app.
Who we are
FITEWEEK is operated by [COMPANY LEGAL NAME], [REGISTERED ADDRESS] ("we"). Contact: support@fweek.app.
What we collect
- Account: email address, name, password (stored hashed by our authentication provider).
- Camp data you enter: body weight, weight class, fight dates, training sessions, meals and nutrition, water, sleep, recovery and readiness check-ins, notes, cut-night logs, checklist progress.
- Health-related data: weight, body-fat estimate, heart rate, blood pressure and wearable readings you add. This is sensitive data; we process it only because you choose to enter it, to give you your plan.
- Photos (optional): meal photos, body-scan photos, progress photos and wearable screenshots you add. Body-scan photos are analysed once and only kept if you choose to save them, on your device.
- Payments: handled by Stripe. We receive your plan status and a customer reference, never your full card number.
- Club (optional): your public profile (name, @handle, bio, sport), posts, kudos, comments, who you follow and who follows you. Weight numbers are never posted unless you choose to show them.
- Usage: anonymous app events (for example "finished onboarding", "logged a weight", "started checkout") with a random device id, the app language and platform, so we can improve FITEWEEK. They contain no weights, messages or health values. You can ask us to delete them.
- Website email sign-ups: the email you give us for the fight-week checklist, used only to send it and FITEWEEK news; unsubscribe any time.
- Reminders (optional): if you turn on reminders, your phone's push address, time zone and app language, so we can send the morning weigh-in, evening check-in and coach or Club notifications at the right local time. Turn them off any time in Me.
- AI usage: a daily count of AI requests per account, to keep the service fair. The content of your questions isn't stored by us.
- Technical: basic logs (time, device type, errors) needed to keep the service secure and working.
Without an account, FITEWEEK keeps your data only on your device.
How we use it
- To build and update your plan, alarms, meals and fight-week schedule.
- To sync your camp across your devices.
- To share a live summary with the coach or gym you join, only while sharing is on. Progress photos are never shared.
- To answer your questions with the AI coach, when you use it.
- To process payments and provide support.
Legal bases: performing our contract with you, your explicit consent for health-related data (you can withdraw it by deleting the data), and our legitimate interest in security.
Who processes it for us
- Supabase: database, sign-in, file storage and server functions.
- Hostinger: website hosting.
- Stripe: payments.
- Anthropic: AI processing when you use AI features (coach chat, meal scan, body scan and screenshot reading). Requests are sent only when you use these features.
- Apple / Google / Mozilla: app distribution and delivery of push notifications (the notification text passes through their push services encrypted end to end).
These providers process data on our instructions under data processing agreements. Some are located outside your country; transfers are protected by standard contractual clauses or equivalent safeguards.
How long we keep it
While your account is active. When you delete your account, your data, messages, plans and photos are deleted immediately from our database and storage; backups roll off within 30 days. Payment records are kept as required by tax law.
Your rights
You can access, correct, export (Me → Export my data) and delete (Me → Account → Delete account) your data, object to processing, and complain to your data protection authority (in Morocco the CNDP; in the EU your local authority). Email us for anything else.
Age
FITEWEEK is for adults 18 and over. We do not knowingly collect data from anyone under 18.
Security
Encrypted connections, row-level access rules so each person only reaches their own data, and hashed passwords.
Changes
We'll tell you in the app before material changes take effect.