1. Information We Collect
When you use Fitte, we collect:
- Account information: Name, email address, and password when you sign up
- Profile information: Fitness goals, body measurements, equipment, diet preferences, schedule, and health concerns that you provide in your instructions
- Chat messages: Conversations with the AI coach via Telegram or web
- Progress data: Workout completion status, weekly check-in data (weight, exercise reps, energy, mood, sleep, water intake)
- API keys: If you provide your own AI provider API key, it is encrypted using AES-256-GCM and stored securely. We never access or use your key for anything other than generating your personalized plans.
- Telegram chat ID: Used solely to deliver your daily plans and enable chat
2. How We Use Your Information
- Generate personalized workout plans and nutrition guidance
- Deliver daily plans to your Telegram
- Provide AI coaching responses to your questions
- Track your fitness progress and analytics
- Send account-related emails (confirmation, password reset)
- Improve the service based on usage patterns
3. AI Processing
Your instructions, chat messages, and workout history are sent to third-party AI providers (OpenAI, Google Gemini, or Fireworks AI) to generate personalized responses. If you use your own API key, requests are made using your key directly. For premium users, requests are made using our system key. We do not control how AI providers process data — please review their respective privacy policies.
4. Data Storage and Security
- Data is stored in Supabase (PostgreSQL) with row-level security
- API keys are encrypted using AES-256-GCM before storage
- All connections use HTTPS/TLS encryption
- We use service-role keys server-side only — the public API key cannot access user data
- Telegram webhook is secured with a secret token
5. Data Sharing
We do not sell, rent, or share your personal information with third parties, except:
- AI providers (OpenAI, Google, Fireworks) to generate responses — only the data needed for your request is sent
- Telegram — to deliver messages to your account
- If required by law or to protect our rights
6. Data Retention
We retain your data as long as your account is active. You can request deletion of your account and all associated data by contacting support@fitte.fit. Upon deletion, all your profile data, chat history, workout plans, and progress logs are permanently removed.
7. Cookies and Analytics
We use Google Analytics to understand how users interact with our website. This collects anonymized usage data such as page views and session duration. We use essential cookies for authentication (Supabase session cookies). We do not use advertising or tracking cookies.
8. Your Rights
- Access your personal data from the dashboard and settings page
- Edit or update your information at any time
- Delete your account and all data by contacting support
- Disconnect Telegram at any time from settings
- Export your data by contacting support
9. Children
Fitte is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us to have it removed.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify users of significant changes via email or a notice on the website. Continued use of Fitte after changes constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions or requests, contact us at support@fitte.fit