The short version
- Your data lives on your device. If you sign in with Google, an end-to-end encrypted copy is backed up to your own private Google Drive folder — we never receive or store it.
- Health & fitness data is read only to show you your own stats. It is never sold, never shared, and never sent to us.
- No advertising. No third-party analytics or tracking.
FitForge (“the app”, “we”, “us”) is a personal fitness, nutrition and wellness planner. This policy explains what the app accesses, where it is kept, and the choices you have.
01 Who we are
FitForge is published by an independent developer. For any privacy question or request, contact dr.souptik.onco@gmail.com. We are the data controller for the limited processing described below.
02 Where your data is stored
FitForge is local-first. Everything you enter — profile, food logs, workouts, hydration, sleep, grocery and grooming lists — is stored on your device.
If you sign in with Google, the app makes an encrypted backup so you can restore it on another device. That backup is:
- Encrypted on your device with AES-256-GCM before it leaves the phone;
- Written only to the app-private folder of your own Google Drive, invisible to other apps and to us;
- Never routed through, copied to, or readable by any server we operate. We hold no database of user data.
03 Health & fitness data
With your explicit permission, FitForge reads activity and wellness data from your platform health hub — Health Connect on Android or Apple Health on iOS — to display your daily stats. Access is read-only.
| Data we read | Why |
|---|---|
| Steps, distance, active calories | Show daily activity and calories burnt |
| Heart rate, resting heart rate | Display heart-rate stats |
| Sleep sessions | Fill in your sleep length & quality tracker |
| Blood oxygen (SpO₂) | Show your latest reading |
| Workouts / exercise sessions | Reflect completed activity |
Never shared Health data read through Health Connect or Apple Health is used only on your device to show it back to you. It is not transmitted to us, not sold, not shared with third parties, and not used for advertising. It is included in your encrypted Drive backup only if you enable Google sign-in. Revoke access anytime in Health Connect (Android) or Settings → Health (iOS).
04 Your Google account
Signing in with Google is optional and used only to identify your backup as yours and to write the encrypted backup to your Drive. The app requests the narrow Drive app-data scope (drive.appdata) — access only to FitForge’s own hidden folder, not your documents, photos or other files. We receive your email address to label the backup; we do not receive your password or Drive contents.
05 Information sent to third-party services
- Food search — the search term or barcode is sent to Open Food Facts and to a lookup service we operate for the FatSecret database. Only the query is sent; no account or personal data.
- Exercise library — a public exercise dataset is downloaded from a content-delivery network to keep the move library current. No personal data is sent.
- Exercise demos — tapping “Watch demo” streams a video from YouTube; YouTube’s own terms and privacy policy then apply.
06 Notifications & alarms
Reminders, the bedtime nudge and the wake-up alarm are scheduled and shown entirely on your device. They are not server push and involve no transmission of your data.
07 What we do not do
- No advertising, and no sale or “sharing” of personal information for advertising.
- No third-party analytics, tracking SDKs, or advertising identifiers.
- No server-side profile of you — we operate no user database.
08 Keeping and deleting your data
- In the app — “Reset all data” under the Me tab clears everything on the device. Disconnecting Google clears the device copy and its encryption key.
- Your Drive backup — delete FitForge’s app-data folder from your Google account’s data controls to permanently remove the encrypted backup.
- Uninstalling the app removes all local data.
We retain nothing on your behalf, so there is no server-side copy for us to delete. Questions: email the address above.
09 Children
FitForge is intended for general adult use and is not directed to children under 13. We do not knowingly collect data from children. A date of birth you enter is stored only on your device to calculate your age for fitness targets.
10 A note on health information
FitForge provides general fitness and wellness guidance and is not a medical device and not a substitute for professional medical advice. Always consult a qualified professional for medical decisions.
11 Changes to this policy
If we change how the app handles data, we will update this page and its effective date. Material changes will be reflected in the app or its store listing.