Privacy Policy

Last updated: 8 August 2026

FitFriends is a workout accountability app. You log a workout, a partner you have chosen reviews it, and only then do the points count. This policy explains what we collect, why, and what happens to it.

FitFriends is operated by the FitFriends team. For any question about this policy or your data, contact hello@fitfriends.quest.

What we collect

• Account details — username, email address, and a securely hashed password. If you sign in with Google or Apple, we store the identifier they give us instead of a password.
• Workout data — the workouts you log: type, intensity, duration, points, any description, and the date.
• Photos — proof photos attached to workouts, images sent in chat, and your profile picture.
• Messages — direct messages between you and your accountability partners.
• Partnerships — who your partners are, and your shared challenges and rewards.
• Device tokens — if you enable notifications, a push token so we can deliver them.

Health data

Workout records describe your physical activity, and in some regions this counts as health data with additional protection under laws such as the GDPR. We collect it only to provide the app's core function, and only after you have given explicit consent. We do not use it for advertising, we do not profile you with it, and we do not sell it.

What your partners can see

This is more than people usually assume, so it is worth stating plainly. An accountability partner can see:

• Your username and profile picture
• Workouts you send them for review, including proof photos
• Your weekly progress against your goal, and your workout history
• Your weekly plan, unless you turn that off in settings
• Everything in your shared chat

You choose your partners, and you can remove a partnership at any time. There is no public leaderboard and no global ranking — your data is visible to the partners you have accepted, and to nobody else.

How we use it

To run the app: authenticating you, showing your workouts and progress, delivering the partner review flow, carrying your messages, and sending notifications you have enabled. We also send a small number of service emails — address verification, password resets, and a welcome message once your address is confirmed. We do not send marketing email and we do not use advertising trackers.

Where it is stored

Account and workout data is held in a managed database hosted in the European Union (AWS, Frankfurt). Photos and chat images are stored in Cloudflare R2 in a private bucket — they are never publicly accessible, and the app reaches them through short-lived signed links generated per request. The application server is operated on Railway.

We use Resend to deliver service emails, and Google and Apple to support optional social sign-in. These providers process only what is needed for those functions.

Deleting your account

You can delete your account at any time from within the app, under Settings.

When you do, we immediately and permanently delete your login credentials, email address, workouts, workout photos, weekly plans, settings, and profile information. Your account cannot be signed into or recovered after this point.

One thing is kept temporarily. If you had an accountability partner, the direct-message conversation between you — including any photos either of you shared — is retained for 7 days, together with your username, so that your partner has a chance to save photos they shared with you. Your partner is notified in the chat when this period begins. After 7 days the conversation, the photos, and the remainder of your account record are permanently deleted. Nothing is retained beyond that point, and nothing is retained at all if you had no accountability partner.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, object to how we use it, or receive a copy in a portable form. Account deletion is built into the app; for anything else, email hello@fitfriends.quest and we will respond within 30 days. You also have the right to complain to your local data protection authority.

Children

FitFriends is not intended for children. You must be old enough to consent to the processing of personal data where you live to use the app.

Changes

If we change this policy we will update the date at the top, and for material changes we will tell you in the app before they take effect.