Privacy policy

The short version

SmartFit is a training log. It stores what you type into it and nothing else. There are no advertising trackers, no analytics SDKs, no third-party profiling, and your training data is never sold. Support conversations and coaching information you explicitly share have the access rules described below.

Two modes, two answers

On-device mode. If the deployment you are using has no cloud backend configured, everything — your profile, sessions, schedule, goals and measurements — lives in your browser's localStorage under a single key. It never leaves your device, and clearing your browser data deletes it permanently.

Account mode. If you sign in, your data is stored in Google Cloud Firestore. Your personal fitness records and training preferences are readable only by your own signed-in account. Support and gym coaching records are stored separately and served through authorized server routes. A cached copy is also kept on your device so the app works offline; signing out removes that copy.

What we store

• Profile: your display name, units, rest days, week start and chosen plan.
• Training: logged sessions, your recurring schedule, goals and activity types.
• Body: any measurements you choose to record.
• Account mode only: the email address (or Google account) you signed in with, handled by Firebase Authentication.

GPS routes are recorded only when you use the run tracker and grant location access. We do not import contacts or health-platform data.

Support, coaching and training preferences

Training preferences include your chosen days, equipment, experience, exclusions and whether automatic suggestions should pause for professional advice. They remain part of your private profile. Support agents and platform administrators can read support conversations, not your private fitness records. Do not put passwords, payment credentials or medical records in tickets.

Coaching requires an active gym membership and your acceptance of an assigned trainer. The assigned trainer, gym owner and staff can read the assignment, prescribed routine and its conversation. Your personal workout history and body measurements are not disclosed by accepting coaching. Declining pauses further coaching; removing an assignment deletes its routine and conversation. Reassignment starts fresh consent without sharing the old conversation.

On-device previews of these workspaces use sessionStorage and are labelled demo-only. They do not create support tickets or change cloud account roles.

Crash reports (optional)

A deployment's operator may enable a self-hosted, cookie-free error collector. When — and only when — one is configured, the app may send technical crash reports and page-performance measurements (an error message, the page path, timing figures) as plain JSON to that collector. No cookies, no advertising SDKs, no user identity and no training content are included, and a default deployment sends nothing at all.

AI coach answers

The coach always answers from your own data, and everything it needs is computed on your device. When a deployment's operator has configured an AI provider for it, the provider composes the wording of the answer: your question plus a compact summary of your training (weekly totals, streak, goal progress, the last few session titles and your latest weight — never your full export, email or credentials) is sent to that provider. Any AI failure falls back to the on-device coach, and AI-written answers are labelled as such.

Prefer that nothing leaves the device? Use the mobile app, self-host the web app with no AI provider configured, or ask the operator of this deployment which provider it uses — the coach names it above the chat.

Maps (optional, network)

The live run view draws a labelled basemap from OpenFreeMap's free vector tiles (OpenStreetMap data, no API key, no cookies) — or, on devices where that engine cannot run, from CARTO's raster tiles of the same OpenStreetMap data — and the Volt/Ink share cards draw CARTO raster tiles likewise. All are credited on the map and on the card. A tile request carries only the coordinates of the area being displayed, never your route as a whole, your account or your identity, and it is made by your browser, not by us. The transparent share style and the route sticker fetch no tiles at all, and everything still works offline: without tiles the route is drawn on its own.

Processors

In account mode, Google (Firebase Authentication and Cloud Firestore) processes your data as our infrastructure provider. In on-device mode there is no processor at all, because there is no transmission.

Your controls

• Export. Profile → Data → Export JSON includes your complete personal training records and, in account mode, your support tickets and coaching assignments. Operational audit records, gym billing records and editorial revisions are not part of this fitness backup. Importing it restores fitness data, not conversations or account roles.
• Erase. Profile → Erase everything deletes all your training data immediately, on the device and in the cloud.
• Delete account. Profile → Delete account removes your private fitness data, your support tickets, coaching assignments in which you are a member or trainer, and your sign-in credentials permanently. This cannot be undone.

Retention

Personal fitness records and support conversations are kept until account deletion. Coaching assignments can also be removed individually. Deletion removes these live records and is retried if a service fails. Security audit logs, published editorial revisions and gym financial or membership records are separate operational records and are not erased by this account deletion flow. Support replies authored by an operator in another requester's ticket remain part of that ticket. Contact the deployment operator about retention of those records and infrastructure backups.

Not a medical device

SmartFit estimates calories from duration, intensity and body mass. These are approximations for tracking trends, not clinical measurements. Train within your limits and seek professional advice for medical questions.

Contact

Questions about this policy, or a private data request? Use Support. For non-private project feedback, use the project repository.