Privacy Policy

This Privacy Policy explains how FitBear (“FitBear”, “we”, “us”) collects, uses, discloses, and protects personal information. We aim to follow applicable Canadian privacy laws (including the Personal Information Protection and Electronic Documents Act (PIPEDA)) and other laws that may apply based on where you live.

1. What we collect

Information you provide

• Account information: name, email address, authentication details, and account identifiers.
• Profile information: goals, schedule, experience level, equipment, and optional metrics like height/weight, injuries, medical-condition context, cycle context, contraception context, pregnancy/postpartum context, and wellness preferences.
• Workout and nutrition data: workouts you log, meals you log, and preferences.
• Connected health data (optional): if you choose to connect Apple Health or supported wearable sources, we may read health, fitness, workout, route, recovery, sleep, cycle, temperature, heart, respiratory, blood-glucose, workout-effort, power, and state-of-mind data where available and permissioned. If you explicitly log cycle context and grant Apple Health sharing permission, FitBear can write cycle samples such as flow, symptoms, and contraception method back to Apple Health. Health data is used solely to personalize workout recommendations, recovery guidance, and related wellness feature quality when you enable those controls; it is never used for advertising, shared with data brokers, or sold.
• Location data (optional): if you enable weather coaching, FitBear stores a rounded current location for outdoor weather context. If you grant Apple Health workout-route access, synced workout route previews can include precise route coordinates.
• Messages: chat messages you send to FitBear’s coach.
• Photos (optional): images you upload for features such as meal analysis, fridge scanning, or progress photos.
• Audio (optional): voice input clips you choose to send for transcription.

Information collected automatically

• Usage data: app interactions, screens viewed, and feature usage (to improve stability and performance).
• Device and network data: device type, OS version, network information, approximate location inferred from IP address, and APNs push tokens when you enable push notifications.
• Operational diagnostics: request-failure and sync-status events used to keep the app reliable. If we add a dedicated crash-reporting or performance SDK in the future, we will update this Policy and our App Store privacy disclosures.

2. How we use personal information

• Provide and operate the app, including account access and core features.
• Personalize workouts, recommendations, and coaching responses.
• Adapt workout intensity and recovery guidance using optional connected health signals when you enable that consent toggle.
• Analyze and improve product performance, safety, and reliability. Optional connected health data is used for wellness feature quality only when you enable that separate control.
• Communicate with you about support requests, service updates, and (with consent where required) product announcements.
• Protect against fraud, abuse, and security incidents.

3. Consent and lawful purpose (Canada)

Under PIPEDA, organizations generally collect, use, and disclose personal information with your knowledge and consent, for purposes that a reasonable person would consider appropriate in the circumstances. By using FitBear and providing information, you consent to the handling of your information as described in this Policy. You may withdraw consent where legally permitted, subject to contractual or legal restrictions and reasonable notice.

4. AI processing and third-party service providers

FitBear may use third-party providers to host infrastructure, deliver analytics, and process information to generate AI-assisted coaching responses or analyze optional images. When connected health data is included in AI-assisted coaching, it is used only to deliver requested wellness and recovery guidance. When we use service providers, we limit sharing to what is necessary and require appropriate protections through contractual and technical measures.

Because some providers may operate outside Canada, your personal information may be processed or stored in other countries (for example, the United States). In those cases, information may be subject to the laws of the jurisdiction where it is processed.

5. How we share information

• Training buddies you choose: if you and a friend become training buddies, each of you sees the other's first name, current workout streak, how many workouts they did in the last 7 days, and when they last trained, and can get a notification when the other finishes a workout or sends a high five. Buddies never see your plans, meals, health data, or anything else. You can remove a buddy at any time, which stops the sharing for both of you.
• Service providers: vendors who help us run the app (hosting, analytics, AI processing, customer support tooling).
• Legal and safety: if we believe disclosure is necessary to comply with law, protect users, or prevent fraud or abuse.
• Business transactions: if we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred subject to appropriate protections.

6. Retention

We retain personal information only as long as needed for the purposes described in this Policy, unless a longer retention period is required or permitted by law (for example, to meet legal obligations, resolve disputes, and enforce agreements).

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights and choices

• Access and correction: you can request access to personal information we hold about you and request corrections.
• Deletion: you can delete your account in-app from Profile → Privacy & data → Delete account, or contact us for help. We may retain limited information where required by law or for legitimate business needs such as security and fraud prevention.
• Health data controls: in-app you can pause sync, disconnect a source, export imported health summaries, delete imported health data, or revoke Apple Health permissions in iOS Settings.
• Privacy choices: a summary of available privacy controls is available at Privacy Choices.
• Marketing choices: where required (including under Canada’s Anti-Spam Legislation (CASL)), we obtain consent for marketing communications and provide unsubscribe options.

9. Children’s privacy

FitBear is not intended for children. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete the information.

10. Cookies and website analytics

The FitBear website may use limited third-party resources (such as font delivery) and may not set cookies by itself. If we add analytics or cookies in the future, we will update this Policy and provide required notices and choices.

Invite links: when someone opens a FitBear invite link, we count the visit against that invite code. We store only the code and the time; we don't use cookies, and we don't use or keep anything about the person who opened it, including their IP address. The person who shared the link never sees who opened it. Visit counts are deleted after about 13 months.

11. Contact us

For privacy requests or questions, contact: privacy@fitbear.app.

For general support, contact: support@fitbear.app.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the “Last updated” date and may provide additional notice in the app or on our website.