FitJournal Logo

Privacy Policy

Last updated: September 1, 2026

1. Introduction

Welcome to FitJournal ("we," "us," or "our"). This Privacy Policy describes how we collect, use, disclose, and retain your personal information when you use the FitJournal mobile application (the "App"). FitJournal is a private fitness progress journal — your photos are stored so you can revisit your own journey. They are not shared, sold, or used for advertising. By using the App you agree to the practices described in this policy. If you do not agree, please do not use the App.

2. Information We Collect

We collect the following categories of information:

  • Photos, which may include face data — progress photos you submit during check-ins. These photos often show your face; see Section 3 for our full face data collection, use, sharing, retention, and deletion practices.
  • Goal preferences — optional body composition and focus selections used to personalize AI commentary.
  • Anonymous device identifier — a randomly generated identifier used to associate your journal with your device without collecting your name or email.
  • Usage data — app interactions and session information collected through Firebase Analytics to help us improve the App.

3. Photos, Bodily Imagery, and Face Data

The App's core function requires you to submit progress photos. These photos may contain your face, body, and other personally identifiable imagery.

  • What we collect: Photos you voluntarily submit in-app during check-ins. We do not access your camera roll.
  • How we collect it: You voluntarily capture photos using your device camera within the App. We request your explicit consent before any photo is submitted for processing.
  • How it's used: Your photos are used solely to (a) populate your private journal so you can review your own progress, and (b) generate personalized AI commentary comparing your photos over time. They are not used for facial recognition, identity verification, advertising, or any purpose unrelated to your in-app journey.
  • Who receives your photos: exactly two service providers, each acting on our instructions. Amazon Web Services, Inc. stores them in a private, access-controlled Amazon S3 bucket in the US East region; AWS provides storage only and does not analyze them. OpenAI, L.L.C. receives them through the OpenAI API to generate the commentary. Under OpenAI's API data usage policy, data submitted through the API is not used to train OpenAI's models, and is retained for up to 30 days for abuse monitoring before being deleted. We disclose your photos to no one else — our analytics provider never receives them, and we do not share them with advertisers, data brokers, employers, or insurers.
  • Retention: Your photos remain on our secure servers so you can revisit your full journey indefinitely. You may request full deletion at any time by contacting us at contact@fitjournal.ᔐ.com. We will delete your data within 30 days of a verified request.
  • Third-party protection commitment: any third party with whom we share photos or face data is contractually required to provide the same or equal protection for it as is stated in this Privacy Policy: to use it only to perform the service we have engaged them to perform, to protect it with at least equivalent security measures, and not to retain, disclose, sell, or use it for any other purpose. OpenAI's API data usage policy is available at openai.com/policies/api-data-usage-policies.
  • What we do not do: we do not create, derive, or store a faceprint, face template, face mesh, face geometry, or any other biometric identifier from your face. We do not use Apple's ARKit face tracking or TrueDepth face-mapping APIs, and we run no facial-recognition software. The App cannot recognize, match, or identify a person from a photograph. We never use your photos for advertising, marketing, or profiling, and we never use them to train or fine-tune any artificial-intelligence model, whether ours or anyone else's.
  • Deleting your photos, and withdrawing consent: deleting a check-in in the App, or deleting the App, erases the copies held on your device. To erase the copies on our servers, email contact@fitjournal.ᔐ.com with the subject “Delete my data”; we will erase every photo, AI-generated image, and derived commentary associated with you within 30 days and confirm by email, at no charge and without asking for a reason. You may withdraw your consent to our collection and use of these photos at any time by turning off the App's camera permission in iOS Settings, by not submitting further check-ins, or by deleting the App; withdrawing consent stops all further collection immediately, but does not by itself erase what we already hold — send the deletion request above for that.

4. How We Use Your Information

  • To analyze your submitted photos and generate AI commentary on your progress over time.
  • To store your check-in history so you can revisit your journey within the App.
  • To compute weekly check-in streaks and schedule local notifications on your device.
  • To improve the App through aggregated, anonymized usage analytics.
  • To respond to your support requests.

We do not sell your personal data. We do not use your photos or commentary for advertising. We do not share your photos with other users.

5. Local Notifications

FitJournal sends local notifications scheduled on your device to help you maintain your check-in streak (e.g. mid-week reminders, day-before-streak-ends warnings). These notifications are scheduled and delivered entirely on your device — we do not send push notifications from our servers, and no notification data leaves your device.

6. Third-Party Services

The App shares data with the following third-party services:

  • OpenAI, L.L.C. — receives your photos and goal preferences for AI commentary generation. OpenAI's privacy policy: openai.com/privacy.
  • Amazon Web Services (AWS) — provides cloud storage (S3) and identity services (Cognito) for securely transferring your photos to our backend.
  • Google Firebase Analytics — collects anonymized App usage data. Firebase's privacy policy: firebase.google.com/support/privacy.

Each of these providers is contractually obligated to protect your data and use it only for the purposes for which it was shared.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted data transmission (HTTPS/TLS) and access controls on our cloud infrastructure. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Your Rights and Choices

  • Consent: You must explicitly consent to data sharing before submitting any photos. You may withdraw consent at any time by stopping use of the App.
  • Access and deletion: You may request access to or deletion of your personal data by contacting us at contact@fitjournal.ᔐ.com.
  • Camera access: You may revoke camera access at any time through your device Settings.
  • Notifications: You may revoke notification permissions at any time through your device Settings. Streak tracking continues to work in-app regardless of notification permission.
  • Health and Fitness: You may revoke health and fitness access permissions at any time through your device Settings.

9. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or data requests regarding this Privacy Policy, please contact us at contact@fitjournal.ᔐ.com.