LEGAL
Privacy Policy
Pre-release notice: This draft must be reviewed and completed with the data controller's legal identity, contact information, processing purposes and lawful bases, recipients, transfer information and applicable regional rights before release.
1. What FitMotion does
FitMotion uses your phone's camera for on-device pose detection and exercise technique feedback. Camera video, photos, raw body landmarks and frame-by-frame pose trajectories are not transmitted to the FitMotion backend.
2. Data we process
Account data includes Firebase identifiers, email address, optional display name and preferences. The service stores calibration summaries, completed workout/session summaries, aggregate biomechanical measurements, structured feedback, and subscription/entitlement status when relevant. The app may retain pending session summaries on your device for later synchronization.
3. Why we use it
To authenticate and manage accounts, operate the app, provide movement feedback and session history, enforce free-tier limits and paid entitlements, maintain security, and respond to verified account deletion requests.
4. Services and disclosures
FitMotion's architecture uses Firebase Authentication for identity, Azure-hosted backend infrastructure and PostgreSQL storage, and RevenueCat for subscription administration when enabled. Their handling of information is governed by applicable agreements and policies. No camera stream is sent to those services by FitMotion.
5. Storage and security
Backend communication uses HTTPS when correctly deployed. Access control and storage encryption are part of FitMotion's infrastructure security design. Absolute security cannot be guaranteed. The final policy must specify hosting regions and applicable international transfers.
6. Retention and account deletion
Account-linked workout, calibration, feedback and subscription records are designed to be deleted when an account is deleted. Limited records may remain temporarily to complete deletion or where necessary under applicable legal, security or backup obligations. Pending unverified web deletion requests are retained for up to 30 days under the current backend configuration.
7. Your choices
You can request account deletion inside the app or through our account deletion page. You may be asked to verify account ownership. Additional privacy rights depend on applicable law and must be documented with the verified contact channel before public release.
8. Children and updates
Age-related restrictions and children’s privacy controls must be confirmed before launch. Material policy changes will be documented through updated versions and, when required, renewed consent in the app.
9. Contact
A verified privacy support email, the responsible company or individual, and an effective date must be supplied before the policy is approved for production use.