FitTrac is a solo-built, currently-in-beta workout, food, fasting, and step tracker. This page explains, plainly, what data the app collects, why, who it's shared with, and how to get it changed or deleted. If you want to skip straight to a deletion or access request, go to Data & Account Deletion.
FitTrac is developed and operated by Reece Smith, an individual developer, not a company — this app is currently a solo project in open beta. For the purposes of data protection law, Reece Smith is the "data controller" responsible for the data described on this page. You can reach us at admin@fittrac.co.uk.
Everything below is data you actively put into the app by using it. There's no background tracking beyond what's listed here.
| Category | What it includes |
|---|---|
| Account | Email address, display name, and sign-in method (email/password or Google Sign-In). Passwords are handled entirely by Firebase Authentication — we never see or store them ourselves. |
| Profile | Profile photo, any bio or stats you add, and your public/private visibility setting. |
| Workouts | Exercises, sets, reps, weight, to-failure/drop-set tags, rest times, supersets, and any photo or video you attach to a finished session. |
| Food log | Barcodes you scan, the food items and portions you log, and quantities and timestamps. |
| Fasting | Start and end times of fasting windows you track. |
| Steps | Your daily step count — see §03, this one works differently from everything else on this list. |
| Social & community | Posts, comments, likes, follows, and group memberships. |
What we don't collect: FitTrac has no advertising or analytics SDKs of any kind — no ad network, no analytics tracker, no crash-reporting telemetry sent to a third party. We're not able to build an advertising profile of you because we never set out to collect the data that would take.
The home screen's step count is read live from Android's Health Connect each time you open the app, using a read-only permission. That step data is never uploaded to or stored on our servers — it's requested from Health Connect, shown on your screen, and discarded. If you revoke the Health Connect permission, FitTrac simply stops being able to show a step count.
Your workout, food, and fasting logs are different: since they're something you type or tap into the app rather than data read from a health platform, they're stored in our database as described in §05 so they sync across your sessions and devices.
We do not use your data for advertising, and we do not build behavioural profiles.
FitTrac relies on a small number of external services to function. Here's the complete list — there are no others.
| Service | What it gets |
|---|---|
| Firebase (Google) | Authentication, database (Firestore), and file storage for everything in the table in §02 except live step data. FitTrac's Firebase project stores data in Google Cloud's europe-west2 (London) region. Access is restricted by Firestore and Storage security rules scoped to your own account. |
| Open Food Facts | When you scan a barcode, that barcode number is sent to Open Food Facts' public, open database to look up the product. No account information or personal data is included in that request. |
| wger | When you search the exercise library, your search query is sent to wger's public exercise database to fetch exercise names and instructions. No account information or personal data is included in that request. |
| Android Health Connect | Read-only step count queries, handled entirely on your device — see §03. |
We do not sell your data, and we do not share it with data brokers or advertisers.
If your profile is set to public, other FitTrac users can see your username, profile photo, and anything you post to the community feed — including any photo or video attached to a shared workout, plus likes and comments you make. If your profile is set to private, that content is visible only to your followers. You control this from the privacy toggle in your profile settings at any time.
We keep your data for as long as your account exists, so it's there the next time you open the app. If you ask us to delete your account (see Data & Account Deletion), we delete your profile, logs, posts, and uploaded media. We may keep a minimal record that a deletion request was made and fulfilled — for example, to be able to prove we honoured it — for a short period, and then delete that too.
Under UK/EU GDPR and similar laws elsewhere, you have the right to:
To exercise any of these, use the Data & Account Deletion page — it covers access, correction, export, and deletion requests. We aim to respond within 30 days, as required under GDPR Article 12. If you're not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).
Authentication runs through Firebase Authentication. Your data in Firestore and Firebase Storage is protected by security rules that scope access to your own account — another user's app instance cannot read or write your private data directly. No system is perfectly secure, but there's no third-party SDK in FitTrac collecting or transmitting your data outside of the services listed in §05.
FitTrac is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, contact us at admin@fittrac.co.uk and we'll remove it.
FitTrac is in active beta, and this policy will change as the app does. We'll update the "last updated" date at the top whenever we do, and for anything material we'll flag it in the app itself.
Questions about this policy, or anything data-related that isn't covered by the Data & Account Deletion page: admin@fittrac.co.uk.