Privacy Policy | FortisTrack

FortisTrack ("we", "us", or "our") provides a strength-training and workout-tracking application (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to the practices described here.

1. Information We Collect

Account information: your name, email address, and password (stored securely in hashed form).
Profile & fitness data: information you choose to provide such as date of birth, height, weight, gender, fitness goals, experience level, and injuries.
Workout content: the workouts, exercises, sets, templates, schedules, and notes you create.
Apple Health data (optional): only if you switch on Apple Health sync in the iOS app. See "Apple Health" below for exactly what is read and written.
Usage & analytics data: app interactions and diagnostic events, collected via PostHog, to help us understand and improve the Service.
Subscription data: if you purchase a subscription on the web, payment is processed by Stripe. We do not store your full card details.

2. How We Use Your Information

To provide, maintain, and improve the Service and its features, including AI-assisted insights.
To create and secure your account and authenticate you.
To personalise your experience, such as tracking streaks and progress.
To communicate with you about your account, updates, or support requests.
To analyse usage so we can improve performance and reliability.

3. Sharing of Information

We do not sell your personal information. We share data only with service providers that help us operate the Service, including:

PostHog: product analytics.
Stripe: payment processing for web subscriptions.
OpenAI: generates the AI Coach replies and workout analysis from your training data and profile.

These providers are bound to use your data only to perform services on our behalf. We may also disclose information if required by law.

4. Apple Health

Apple Health sync is off until you switch it on in your profile in the iOS app, and you can switch it off again there or in the Health app at any time. While it is on:

What we write: each workout you finish is saved to Apple Health as a strength training workout, with its duration and calories. Deleting a workout in FortisTrack removes it from Apple Health.
What we read: your body weight, and, when you record a workout with the FortisTrack Apple Watch app, your heart rate and active energy during that workout.
Where it goes: your body weight is saved to your profile, and the average and maximum heart rate and the calories of a workout are saved with that workout on our servers, so they appear in your history on any device.
How it is used: to show it to you, to estimate calories, and to make the AI Coach and workout analysis more accurate, which means it is sent to OpenAI together with the rest of that workout.

Data from Apple Health is never used for advertising or marketing, is never sold, and is not shared with anyone other than as described here. Deleting your account deletes it from our servers. Workouts already saved to Apple Health stay there until you remove them in the Health app.

5. Data Retention

We retain your information for as long as your account is active. When you delete your account, we delete or anonymise your personal data, except where we are required to retain it to comply with legal obligations.

6. Your Rights & Choices

Access & update: you can view and edit your profile information in the app.
Delete your account: you can permanently delete your account and associated data from the profile settings within the app.
Access requests: depending on your location, you may have rights to access, correct, or erase your data. Contact us to exercise these rights.

7. Security

We use industry-standard measures, including encryption in transit (HTTPS) and secure password storage, to protect your information. No method of transmission or storage is completely secure, but we work to safeguard your data.

8. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, where appropriate, notify you within the Service.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at [email protected].