Privacy Policy

1. Introduction

The legal identity of SmartFit AI's publisher — company name, registered office — is being finalized. In the meantime, write to us at privacy@smartfit-pro.tech for any question about your data, or to support@smartfit-pro.tech for anything else.

2. Data we collect

• Name, email address, and account identifier: the basic information needed to create and manage your account. Your password is never stored in plain text: it is hashed with bcrypt before being saved, so that no one — including us — can retrieve it. You can also sign in with Google or with Sign in with Apple: in that case, it is Google or Apple that sends us your identifier and email address. With Sign in with Apple, we also keep, encrypted, the token Apple gives us at sign-in, solely so that we can ask Apple to cut that link if you delete your account: it is not used for any other purpose.
• Workouts, body measurements, progress photos, hydration, and health and fitness information: everything you enter yourself or import from a connected device, beyond what is strictly necessary for the training log to work. A profile picture, if you add one. This is health data within the meaning of Article 9 of the GDPR: it is only processed on the basis of your explicit consent, which you can withdraw at any time by deleting this information or your account. Your body measurements are additionally encrypted before being stored (AES-256-GCM).
• Form analysis: your squat is analysed on your phone. The camera records no video, and no image is sent to our servers or to an AI provider. Only the score, the number of reps, the measurement of each checkpoint and the date are saved to your history.
• Your precise location, only if you enable the nearby-gyms search, and only for the duration of the request: we do not link it to any account or store it associated with your identity.
• A history of your purchases (subscription, packs): the type of plan, the amount, the date, and a truncated technical transaction reference — never your card number, see section 4.
• A technical device identifier (push notification token), optional, used to send you notifications. And, if you connect Apple Health or Google Fit, the measurements those services send us — nothing more. If you turn on both Meta toggles ("Meta analytics tracking" and "Meta ad measurement"), your IP address, device model, and system and app versions are also sent to Meta, along with an app-specific install identifier — never your advertising identifier: see section 10, "Advertising measurement (Meta)."
• Content that you publish yourself: stories, posts in a club, messages exchanged with other users, your messages to the AI coach (see section 9), and the reports and blocks you make (see section 11).
• The smartfit-ai.fr website does not set any advertising cookies or audience-measurement trackers. Your login session and language preference are kept in your browser's local storage (localStorage): a technical detail that keeps you signed in from one page to the next, not a tracker within the meaning of "cookie" regulations.

3. Why we process your data

We use your data to run the service: training log, nutrition, AI coach. To personalize your programs and recommendations. To process your purchases. To send you useful notifications and reply when you write to us. To calculate your own sports statistics, such as the recovery score, based on your recent training volume — not on biometric sensors. To review reports and apply blocks between users. And to detect or fix technical issues. Depending on the case, this processing is based on the performance of the contract between us, your consent (health, connected devices, notifications, AI processing, Meta advertising measurement), a legal obligation (billing), or our legitimate interest in keeping the service and the community safe.

4. Sharing your data: who receives it

We never sell your data. It is only shared with the providers necessary for the service to run, listed below, with your explicit consent where the law requires it, to comply with a legal obligation, or to protect our rights and security.

The mobile app does not embed any third-party crash-tracking tool (Sentry, described further below, runs server-side). It does embed the Meta SDK for advertising measurement, active only if you have turned on both Meta toggles — see section 10, "Advertising measurement (Meta)." OpenAI receives the data of the AI features (coach, AI Photo, programs, recipes, meal plans, fridge, reports, daily tip), and Anthropic only if you bring your own key in the coach, in both cases with your prior consent — see section 9. Stripe processes payments, and never receives your card number from us. Supabase hosts your progress photos and profile picture, and is involved in the technical deletion of your authentication account. Firebase Cloud Messaging (Google) delivers push notifications, using only your device's token. Resend, or its SendGrid relay, sends our transactional emails, including the alert sent to our support team when a report is recorded (section 11). Apple, if you sign in with Sign in with Apple, receives from us the request to cut that link when you delete your account (section 2). Finally, on the server side, an error-monitoring tool (Sentry) receives technical information when an incident occurs: error type, technical trace, with sensitive fields — passwords, tokens, keys — automatically filtered out before anything is recorded. To find nearby gyms, your location is sent to OpenStreetMap (Overpass API), our default provider, or to Google Places if that service is enabled — only for the duration of the request.

Our hosting provider, Hostinger International Ltd., runs the website and the API on a private server (dedicated VPS, PostgreSQL database).

If you connect Strava or another supported device (Fitbit, Garmin, Whoop, Apple Health, Google Fit), we retrieve your activities and metrics such as distance or effort time. The other way around, if you enable automatic posting or manually publish a workout to Strava, we send that workout to Strava — at your request, never by default. This is health data within the meaning of the GDPR (Article 9): it is only processed on the basis of your explicit consent, given when you connect the device or publish a workout, and which you can withdraw at any time by disconnecting the device.

Some of these providers — OpenAI, Anthropic, Google, Meta, part of Stripe's processing — are located outside the European Union, in particular in the United States. These transfers are governed by the safeguards provided for under the GDPR, in particular the European Commission's standard contractual clauses.

5. Data security

Exchanges between the app, the website, and our servers are encrypted in transit (HTTPS). Your body measurements are additionally encrypted before being stored in our database (AES-256-GCM). Your password is hashed, never stored in plain text (section 2). Like any security measure, these safeguards reduce risk without eliminating it: should an incident affect your data, we would inform you in accordance with the law.

6. Your rights

You have the right to access, rectify, erase, restrict, and object to the processing of your data, as well as a right to data portability. You can also withdraw your consent at any time for the processing that depends on it: health, connected devices, notifications, AI processing, Meta advertising measurement — the last two with the toggles under Profile > Privacy & security in the app. A full export of your history and permanent deletion of your account are both available directly from "My Account" in the app, or from smartfit-ai.fr/mon-compte/, without having to write to us. For any other request, contact us at privacy@smartfit-pro.tech. You can also lodge a complaint with the CNIL, the French data protection authority.

7. Minimum age

SmartFit AI is intended for people aged 18 and over. We do not knowingly collect data about minors. If you are under 18, please do not use the app. If you believe a minor has provided us with data, write to us at privacy@smartfit-pro.tech: we will delete it.

8. Data retention and changes to this policy

Your data is kept for as long as your account exists. If you delete it, your data is erased along with it — including workouts, measurements, and exchanges with the AI coach — subject to documents the law requires us to keep longer, invoices in particular. If you had signed in with Apple, we first ask Apple to cut the link, then the token we were keeping is erased with the rest. Your blocks and the reports you sent are erased with your account; a report about an account that has since been deleted is kept, no longer linked to that account. Events already sent to Meta as part of advertising measurement are not recalled by this deletion: see section 10. This policy may change as the service evolves: the version published on this page, dated at the top, is the one that applies. In the event of a significant change, you will be notified within the app.

9. AI features and providers

SmartFit AI's AI features are not third-party assistants connected to your account: they are built-in features that call an artificial-intelligence provider's API from our servers. They only open with your prior consent: the first time you use one of them, the app shows you what will be sent, to whom and why, and nothing leaves until you have accepted. The same consent then covers all of these features, and if you decline, no data is sent to an AI provider. Here is what each feature sends:

• AI coach: your profile (name, age, weight, height, goal, level, declared injuries, equipment), your recent workouts and records, your measurements, today's nutrition and hydration, your check-ins (energy, sleep, stress, mood), the contents of your fridge, and the messages you write to the coach.
• AI-generated programs: the requested goal, level, number of days and equipment, plus your profile — name, age, sex, weight, declared injuries, a summary of your recent workouts and records, diet preference and calorie target.
• AI Photo: the photo of the meal you choose, and the app language.
• Recipes: the goal, the target calories, the number of servings, and the ingredients and preferences you enter.
• Meal plans: your calorie and macro targets, the number of meals, your diet and your food restrictions.
• Fridge suggestions: the name, quantity and expiry date of the foods in your fridge.
• Weekly and monthly reports: your figures for the period — workouts, duration, volume, average energy, sleep and stress, nutrition adherence, records and badges.
• Daily tip on the home screen: your name, this week's training volume compared with last week's, your most trained muscle, your streak, this month's records, your hydration, today's calories and protein against your targets, your latest check-in (energy, sleep, stress) and the number of fridge items about to expire.

You can withdraw your consent at any time with the "AI processing" toggle under Profile > Privacy & security. Once withdrawn, no more data is sent to an AI provider for these features.

The built-in engine is OpenAI's (United States). For the coach, if you bring your own API key, OpenAI or Anthropic, in settings, that provider processes the message on your behalf instead: your key is only used for that call, and is never stored or logged on our servers. These exchanges are processed by OpenAI or Anthropic under their professional API offerings; refer to their own privacy policies to find out how they handle this data on their end.

A photo of a meal that you submit to AI Photo is sent to OpenAI for analysis, and is not kept on our servers afterwards. This is different from a progress photo or your profile picture, which you choose to save: those are stored with Supabase, our file-storage provider. Your squat analysis, for its part, happens on your phone and uses no AI provider (see section 2).

10. Advertising measurement (Meta)

The mobile app embeds the Meta SDK (via react-native-fbsdk-next), used to measure our advertising campaigns on Facebook and Instagram. This SDK stays inactive by default: it does not initialize or send anything until you have enabled, under Profile > Privacy & security, both the "Meta analytics tracking" and "Meta ad measurement" toggles at once — turning either one off stops sending immediately. Once this double consent is given, the SDK's automatic events — app activation (session start) and install — are sent, along with events we trigger ourselves: signup completed (with the method used — email or Apple), account setup finished, and, in the versions of the app where a payment is offered, checkout opened and subscription purchased. No health, nutrition, or training data is ever sent to Meta: events tied to your workouts, nutrition, or badges stay strictly local, with nothing sent. Along with these events, Meta receives your IP address, device model, system and app version, an app-specific install identifier generated by the SDK, and a timestamp — never your advertising identifier (IDFA on iOS, GAID on Android), which we do not collect, and without any App Tracking Transparency prompt being shown to you.

This measurement is meant to assess how effective our advertising campaigns are on Meta's platforms and to improve their targeting in aggregate. It relies on your consent (Article 6.1.a of the GDPR), which you can withdraw at any time by turning off either toggle; events already sent, however, are not recalled — their retention at Meta is governed by Meta's own policy. The recipient of this data is Meta Platforms Ireland Ltd for the European Union; its privacy policy is available at https://www.facebook.com/privacy/policy/. This data is transferred to Meta's servers, with transfers outside the European Union governed by Meta's standard contractual clauses.

11. Reporting and blocking between users

When users interact with each other (messages, posts, clubs, challenges), you can, from the app, report a user, a message or a club post, and block a user. A block works both ways: you no longer see each other's content, the blocked person can no longer write to you, and any friendship or follows between you are removed. You can find the list of your blocks in the app and lift them at any time.

A report contains your identifier, the identifier of the user concerned, the message or post in question, the reason you choose and, if you write one, your comment. It is recorded in our moderation queue and our support team is notified by email; we review reports within 24 hours: content that breaches our terms of use or the law may be removed, and offending accounts deleted. An automatic filter also masks a short list of abusive or hateful terms in published text.

This processing is based on our legitimate interest in protecting the community and keeping the service safe. How long it is kept is described in section 8.

If a piece of content bothers you, or if you think a mistake has been made, write to us at support@smartfit-pro.tech.

12. Contact us

For any question about this policy or your data, write to privacy@smartfit-pro.tech. For any other question, support is available at support@smartfit-pro.tech.