Privacy Policy

Mikhail Tatarenko ("we", "us" or "our") is the controller responsible for the personal data processing described in this policy. This means we decide why and how personal data is processed in connection with the Fitgamma app, its online services and this website. For privacy questions and requests, contact .

Most of your data lives on your iPhone and, if iCloud is turned on, in your private iCloud database (Apple CloudKit). We have no access to it:

• your profile: gender, date of birth, height, weight, goal, experience, schedule and limitations
• workout places and equipment
• workouts, exercises and sets, including changes you make to a plan
• your conversation with the AI trainer

You sign in with Apple. We store the identifier Apple creates for Fitgamma and the email address Apple shares with us when you sign in — your own address, or a relay address if you choose Hide My Email. We use it only to contact you about your account, subscription and support requests; we do not send newsletters. We do not store your name. Sessions use short-lived access tokens (15 minutes) and a refresh token (30 days) that our server keeps only in hashed form.

Our server is located in Kazakhstan. It receives and stores:

• For generating workouts: gender, age (calculated on your device — your date of birth is not sent), height, weight, training experience, recent training frequency, confidence, goal, workout split, the limitations and injuries you selected, sessions per week, session length, workout place and equipment. A snapshot of these settings is stored with every generated workout; the server also uses your completed workouts listed below.
• Completed workouts: title, start and finish time, duration, exercises, sets (reps, weight or time), changes you made to the plan and the app version.
• Subscription: the signed App Store transaction the app sends after a purchase. We keep the original transaction ID, the product and the expiry date, and receive subscription status notifications from Apple.
• Counters of AI requests, used to apply daily limits.

When you use the trainer — its review of your plan before a workout, the chat, and your answers to its questions during a workout — your recent messages (up to 50), your training profile (gender, goal, experience, limitations, schedule, equipment, and your weight when it changes) and your current and last 12 workouts are sent through our server to OpenRouter (USA), which passes them to a Google Gemini language model to generate the reply. When Google is unavailable, OpenRouter passes the same data to an OpenAI language model instead. Your name, email, age and height are not sent.

We do not store the text of your conversation on our server; it is kept on your device and in your iCloud. Please do not share anything in the chat that you do not want processed this way.

The first time you open the trainer, the app asks for your permission before anything is sent. Without it, nothing is sent to OpenRouter, Google or OpenAI. You can withdraw your permission at any time in the app: Profile → AI trainer.

We use Amplitude (USA) to understand how the app is used. Amplitude receives your account ID and:

• profile properties: goal and fitness level
• your answers in the onboarding questionnaire — goal, experience, workout places and schedule; the limitations and injuries you select are not sent
• events such as generating a workout (and why generation failed), starting, completing or discarding a workout, opening the trainer chat, sending it a message and a reply failing (the text of messages is not sent), showing and closing the subscription screen, purchases (product ID and price), restoring purchases, reaching the free limit, whether you allowed Apple Health access, and whether you allowed the AI trainer to receive your data
• technical data the Amplitude SDK collects by default: IP address, device model, iOS version, identifier for vendor (IDFV) and session information

Analytics data is not deleted when you sign out or delete your account in the app (see "Retention and deletion"). We do not use the advertising identifier (IDFA), do not track you across other companies' apps and do not show ads.

When the app hits an error, it may send a short diagnostic message (up to 2,000 characters, with access tokens and email addresses removed) together with your account ID and Support ID. Before you sign in, the message carries a random identifier that changes every time the app starts instead of an account ID, so it is not linked to you. Our server writes these messages to its operational log. Operational logs are kept in our log system for up to 7 days (container log files rotate by size), aggregated metrics for up to 90 days.

When the app crashes, freezes or uses too much processor time, memory or storage, iOS gives it a report through MetricKit, and the app sends us a summary through the same channel (before you sign in, with the same random launch identifier): the app and iOS versions, the device model, the type and reason of the failure and the memory addresses of the code that was running. The report does not contain your workouts or messages. It is kept for the same 7 days and used only to find and fix bugs.

With your permission, Fitgamma reads your sex, date of birth, height and weight to fill in your profile, and reads and writes workouts, heart rate and active energy; finished workouts can be saved to Apple Health.

Raw Health data is not sent to our server. Values derived from it — gender, age, height and weight — can be sent as part of your profile as described above; none of them go to analytics. Health data is never used for advertising. You can change Health permissions at any time in the Health app or in iOS Settings.

fitgamma.com uses no cookies, analytics or trackers and loads nothing from other services. Like any website, it receives your IP address and browser details with each request, but we don't keep a log of visits. Your theme and language choice are saved in your browser (localStorage). The language is also part of the page address, which our server receives when you open it.

The support form on this website sends what you enter — your email address, your message, your Support ID and the files you attach, and, if you open the form from the app, the app version, iOS version and iPhone model — to our server, which forwards it as an email to our mailbox and does not keep it.

If you write to us through the form or to , your message, your email address and anything you include — such as your Support ID — are stored in our mailbox, hosted by our email service provider. We use them only to answer you and to keep a history of your requests; we keep the correspondence while it is needed for that and delete it at your request.

We do not sell your personal data. It is processed by:

• Apple — Sign in with Apple, iCloud (CloudKit), App Store purchases and Apple Health; when you request a refund, we also tell Apple that the subscription was delivered, that free workouts were available before you subscribed, and that we ask it to decline the refund — nothing about your workouts or profile
• OpenRouter, Google and OpenAI (USA) — generating AI trainer replies; OpenAI only when Google is unavailable
• Amplitude (USA) — product analytics
• our hosting provider in Kazakhstan — the server that stores the data listed above

We may disclose data where the law requires it. We do not send marketing emails or push notifications.

Our service providers may process data outside your country of residence. Our server is in Kazakhstan, and the AI and analytics providers are in the United States. Support correspondence is processed by our email service provider. Data protection laws in the countries where processing takes place may differ from those where you live.

Data on our server is kept while your account exists.

• Deleting your account in the app (Profile tab → Delete Account) erases your data on the device and in your iCloud. On our server it erases your account together with everything linked to it — training profile snapshots, workout history, generated workouts, subscription records, AI request counters and the email address we stored — revokes Fitgamma's Sign in with Apple link and ends all sessions.
• One record stays after deletion so that free workouts cannot be claimed again by deleting and re-creating an account: a one-way code derived from your Apple sign-in and the number of free workouts it has used. It holds no email, profile or workout data.
• Notices Apple sends us about subscription status (their type, date and Apple's transaction identifier) are kept for accounting; after deletion they are not linked to you.
• Analytics records at Amplitude are linked only to an internal account identifier, which nothing on our side connects to you after deletion. To have them deleted, email with your Support ID (Profile tab → Support) before you delete the account.
• Workouts saved to Apple Health stay there until you delete them in the Health app.
• Backups of the server database are kept for up to 3 months and are used only to restore the service after a failure; a deleted account disappears from them as old backups are removed.

Signing out keeps your data on the device; you can sign back in with the same Apple ID.

Where the GDPR or similar laws apply, we rely on: the performance of our contract with you (account, workout generation, sync and subscription); our legitimate interests (security, diagnostics, understanding how the app is used and answering your emails); and your consent where iOS asks for it (Apple Health) and where the app asks for it before sending your data to the AI trainer. You can withdraw consent at any time: Apple Health in Settings, the AI trainer in the app's profile. By subscribing, you also consent to us sharing purchase information with Apple when you request a refund; you can withdraw this consent by writing to .

Data travels over encrypted connections (HTTPS). Session tokens are stored in the iOS Keychain, and the server keeps refresh tokens only as hashes. No system is perfectly secure, so we limit what we collect.

Depending on where you live and the data protection laws that apply to you, you may have the right to:

• access the personal data we hold about you
• correct inaccurate data
• have your data erased
• receive your data in a portable format
• object to or restrict processing
• withdraw your consent
• lodge a complaint with a data protection authority

To exercise these rights, email with your Support ID. We reply within 30 days.

We do not sell your personal data and do not share it for cross-context behavioral advertising: there are no advertising SDKs in the app and no trackers on this website. Because the website sets no cookies and does not track visitors, it does not respond to browser "Do Not Track" signals — there is nothing to switch off.

Fitgamma processes data about your body and training, which some states treat as consumer health data. How we handle it, and how to withdraw consent or delete it, is described in our Consumer Health Data Privacy Policy.

To exercise any privacy right, email with your Support ID; we do not treat you differently for doing so.

Consumer Health Data Privacy Policy

Fitgamma is for people aged 16 and over, or older if the minimum age for digital consent in your country is higher. The app asks your date of birth, and workouts are not generated for anyone younger. If you believe a younger person has given us personal data, contact us and we will delete it.

When the app starts handling data differently, we update this policy and the date at the top of the page.

Questions about this policy or your data: