Privacy Policy

Last updated: 25 September 2026

The Fitsession app for iPhone and Apple Watch (the "app") and the fitsession.app website are made by Fitsession Ltd ("Fitsession", "we"). We are the "data controller" under UK and EU data protection law, and you can reach us about anything in this policy at legal@fitsession.app.

We build Fitsession with care for your privacy, so that your data stays yours: your workouts live on your device, not on our servers. This policy explains the little that does reach us, why, and the rights you have over it.

The short version

• Your workouts, exercises, body measurements, progress photos and notes are stored on your device — we can't see any of it
• If "Store in iCloud" is on, backup copies and your progress photos also go to your own iCloud, which we can't see either
• There are no accounts, no ads, no tracking across apps, and we never sell data
• We receive usage statistics and crash reports to improve the app. They carry technical identifiers, not your name or email, and you can switch both off in the app's settings
• If you write to us, we receive your email address and use it only to help you
• You have full rights over your data under UK and EU law — email us any time to exercise them

Your fitness data stays with you

Everything you create in Fitsession — workouts, exercises, sets, body measurements, progress photos, notes — is stored locally on your iPhone and Apple Watch. It is never sent to us, and we have no way to access it.

If iCloud backups are on (they are by default; you can turn them off in Settings → Data → Backup with the "Store in iCloud" switch), the app saves your backups and progress photos to your own iCloud Drive, under your Apple Account. They are handled by Apple on your behalf, under Apple's privacy policy; we cannot read them. The same goes for files you export yourself — they're yours, on your device or wherever you choose to put them.

Apple Health

With your permission, Fitsession reads workouts, walking, running and cycling distance, active and resting energy, heart rate, body weight, body fat percentage and waist circumference from Apple Health, and writes workouts, walking, running and cycling distance, active energy, body weight, body fat percentage and waist circumference to it. You choose each type separately, and you can change your mind at any time in the Health app.

Values the app reads from Health become part of your workout and measurement records and travel with them: into your backups and exports, never to us. We never receive Health data, never use or share it for advertising or marketing, and never share it with anyone. That is both our promise and a rule Apple enforces.

What we do collect

Usage statistics

We collect statistics about which features are used — events like "workout completed" or "backup created", with your device model, OS version, app version, language, region and time zone. They never include what you type: no workout or exercise names, notes, weights, measurements or photos. Each event carries a random technical identifier for your installation, not your name, email or Apple Account, and we build no profiles from it.

We use PostHog as our provider for this: it stores the events for us in Frankfurt, Germany, keeps them for one year, and acts only on our instructions. We use the statistics only in aggregate, to understand how the app is used.

You can switch usage statistics off at any time in Settings → Terms and Privacy. Our legal basis is our legitimate interest in understanding how the app is used, with the switch as your way of saying no.

Crash reports

When the app crashes, we receive a report with your device model, OS version, what the app was doing, and its recent technical log lines. Each report carries a random technical identifier for your installation; if you include the app's technical details in a support email, that identifier lets us find your crash reports, and we use that only to help you.

We use Google's Firebase Crashlytics as our provider for this: it keeps the reports for us for 90 days and acts only on our instructions. We use them only to fix what breaks.

You can switch crash reports off at any time in Settings → Terms and Privacy. Our legal basis is our legitimate interest in keeping the app working, with the switch as your way of saying no.

Purchases

Subscriptions are bought through Apple, so your payment details go to Apple, never to us. To know whether your device has an active Fitsession PRO subscription, we keep a record of your purchases for the app under a random technical identifier for your installation, not your name or Apple Account.

We use RevenueCat as our provider for this: it keeps the purchase records for us for as long as they're needed to provide your subscription, and for a limited period afterwards for accounting, and acts only on our instructions.

Our legal basis is that this is necessary to provide the subscription you bought.

Email support

If you email us (the app opens a message to help@fitsession.app), we receive your email address and whatever you write. "Report a problem" prefills technical details — app version, device model, OS version, language, region and the technical identifiers mentioned above; "Send feedback" includes nothing but what you type. If we ask, you can also export the app's logs from Settings and send them to us. We use all of this only to help you, and keep the conversation for as long as the app is supported, so we can pick up where we left off if you write again and learn from what people ask for; if you'd like yours deleted, just email us.

We use Google Workspace as our email provider: Google processes these messages for us and acts only on our instructions.

Our legal basis is our legitimate interest in supporting the people who use the app, and taking steps you've asked us to take.

Links you add to exercises

You can add a link to an exercise, such as a YouTube video or a reference page, and open it inside the app. When you do, YouTube or that website receives your IP address and may use cookies under its own privacy policy, like any website you visit — none of your data is sent.

Our website

When you visit fitsession.app, we count page views and clicks to see how people find the app. Nothing is stored on your device, and one day's visits aren't linked to the next: to tell visitors apart within a day, a temporary identifier is derived from your IP address and browser details, and the address itself isn't kept. If your browser sends a Do Not Track signal, your visit isn't recorded.

We use PostHog for this as well, in a separate project with the same storage in Frankfurt and the same one-year retention. Our legal basis is our legitimate interest in understanding how people find the app.

Who we share data with

Beyond the providers named above, we share personal data only if the law requires it. We never sell it, and we never share it for advertising.

PostHog, Google and RevenueCat are US companies. PostHog keeps the usage statistics in the EU (Frankfurt, Germany); the rest goes to the United States, protected by the UK–US Data Bridge and EU–US Data Privacy Framework where the provider is certified, and by the standard contractual clauses with the UK Addendum otherwise. Email us for a copy of the safeguards that apply.

Your rights

Under UK and EU data protection law you have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to our processing of it, and to withdraw consent where processing is based on consent. You can switch off usage statistics and crash reports in the app's settings at any time; for anything else, email legal@fitsession.app.

If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or, outside the UK, to your local data protection authority. We'd appreciate the chance to sort it out first.

Children

We don't knowingly collect personal data from children. If you believe a child has sent us personal data, email us and we'll delete it.

Changes to this policy

If we change this policy, we'll update it here with a new date, and we'll point out significant changes in the app before they take effect.

Contact

Fitsession Ltd, company number 14440295
167-169 Great Portland Street, Fifth Floor, London W1W 5PF, United Kingdom
Privacy: legal@fitsession.app · Support: help@fitsession.app