1. Who we are & scope
FitLantic ("FitLantic", "we", "us") is operated by FitLantic. This policy applies to the FitLantic mobile applications for iOS and Android, this website and related services (together, the "Services"). We act as the data fiduciary / data controller for the personal data described here.
This policy is designed to meet the requirements of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and its rules, and, where they apply to you, the EU/UK General Data Protection Regulation ("GDPR") and US state privacy laws.
2. Information we collect
Information you give us
| Category | Examples |
|---|---|
| Account | Name, email address, password (stored only as a secure hash) or the identifier provided by Sign in with Apple / Google. |
| Health profile | Date of birth, height, weight, target weight, activity level, fitness goal, preferred unit system and country. |
| Dietary preferences | Diet type (e.g. vegetarian, vegan), food allergies and intolerances, favourite cuisines. |
| Food logs | Meal photos you capture or upload, foods and portions you log manually, and the calorie and macro data associated with them. |
| Water & sleep | Water you log (amount and time) and sleep you log (bedtime, wake time and an optional quality rating). Your daily water and sleep goals stay on your device. |
| Workouts | Exercises, sets, reps, weights and durations you log. Workout history is stored only on your device and is not sent to our servers. |
| Coach conversations | Questions you ask the AI coach and the answers it gives. |
| Support | Messages and attachments you send when contacting us. |
Some of this information (for example weight, allergies and eating patterns) may be considered health-related or sensitive personal data. We collect it only because it is necessary to provide the Services you ask for, and only with your consent.
Information collected automatically
- Device & app data: device model, operating system version, app version, language and time zone.
- Usage data: feature usage such as the number of photo analyses and coach questions used each day (needed to apply plan limits).
- Diagnostics: crash reports and error logs, which help us find and fix bugs.
Information from third parties
- Sign-in providers: if you use Sign in with Apple or Google, we receive your name, email address (or Apple's private relay address) and a unique account identifier.
- App stores & billing: Apple and Google, through our subscription partner, tell us about your subscription status and purchases (product, dates, renewal and refund status). We never receive your full card or bank details.
3. How we use your information
- Create and secure your account, and keep you signed in across devices.
- Calculate personalised daily calorie and macronutrient targets.
- Analyse meal photos and log calories and nutrients.
- Answer your questions through the AI coach, using your profile and logs as context.
- Show your daily summary, history, streaks and weekly charts, including water and sleep.
- Process subscriptions, honour any remaining coach question balance, and apply plan limits.
- Provide customer support and send service messages (for example billing or security notices).
- Diagnose problems, prevent fraud and abuse, and keep the Services secure.
- Improve the Services using aggregated or de-identified statistics.
- Comply with legal obligations and enforce our Terms of Service.
We do not use your health data for advertising, and we do not sell or rent personal data to anyone.
4. AI processing
Photo analysis and coach answers are generated by large language and vision models from third-party AI providers (currently Google's Gemini models, with Anthropic's Claude models as a fallback). When you use these features, we send the relevant meal photo or question, along with the minimum profile and log context needed to answer (for the coach, this can include your food, water and sleep logs), to the provider through its API.
- Requests are sent from our servers. Our API keys are never shipped inside the app.
- Under our agreement with the provider, your data is processed only to generate a response for you and is not used to train the provider's models.
- AI output can be inaccurate. Always review estimates before logging, and see our Health Disclaimer.
5. Legal basis & consent
Under the DPDP Act, we process your personal data on the basis of your consent, which you give when you create an account and complete your health profile, and for certain legitimate uses permitted by law. You may withdraw consent at any time by deleting your account (see Delete Account). Withdrawal does not affect processing that took place before it.
If the GDPR applies to you, we rely on: performance of a contract (providing the Services); your explicit consent (for health-related data); our legitimate interests (security, fraud prevention, product improvement); and legal obligations (tax and accounting records).
6. Sharing & service providers
We share personal data only with the following, and only as needed:
| Recipient | Purpose |
|---|---|
| Cloud hosting & storage providers | Running our servers and databases and storing meal photos |
| AI model providers (Google, Anthropic) | Meal photo analysis and AI coach answers |
| RevenueCat | Managing subscriptions and in-app purchases across the App Store and Google Play |
| Apple & Google | Sign-in, app distribution and payment processing |
| Sentry | Crash reporting and error monitoring |
| Email service provider | Sending account and support emails |
These providers act on our instructions under contracts that require them to protect your data. We may also disclose information if required by law, to protect the rights, safety or property of our users or the public, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.
7. International transfers
Some of our providers process data outside India, including in the United States. Where we transfer data across borders, we do so in line with applicable law. For transfers from the EU/UK, we rely on Standard Contractual Clauses or equivalent safeguards.
8. Retention
- Account, profile, food logs, photos and coach conversations: kept while your account is active, and deleted within 30 days of an account deletion request.
- Purchase and transaction records: kept for as long as tax, accounting and legal obligations require (usually up to 8 years), with no health data attached.
- Diagnostic logs: kept for up to 90 days.
- Backups: deleted data may stay in encrypted backups for up to 30 more days before it is overwritten.
9. Security
We use industry-standard safeguards. Data is encrypted in transit (TLS). Sign-in tokens are kept in your device's secure storage (iOS Keychain / Android Keystore). Passwords are hashed, access to production systems is restricted, and third-party keys stay on our servers only. No system is perfectly secure. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.
10. Your rights & choices
Depending on where you live, you have the right to:
- Access a summary of the personal data we hold about you and how we process it.
- Correct and update inaccurate or incomplete data. Most of it can be edited in the app.
- Erase your data. See Delete Account.
- Withdraw consent at any time.
- Data portability and to object to or restrict certain processing (GDPR).
- Nominate another person to exercise your rights if you die or become incapacitated (DPDP Act).
- Grievance redressal: raise a complaint with our Grievance Officer, and if you are not satisfied, with the Data Protection Board of India or your local supervisory authority.
To exercise any right, email privacy@fitlantic.app from the email address on your account. We will respond within 30 days, or sooner where the law requires, and may need to verify your identity first.
11. Children
FitLantic is intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you in the app or by email before they take effect. The "Last updated" date at the top always shows the current version.
13. Contact & grievances
Questions, requests or complaints about privacy can be sent to our Grievance Officer. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
FitLantic
General support: support@fitlantic.app
Privacy requests: privacy@fitlantic.app
Grievance Officer: grievance@fitlantic.app