Privacy Policy

Last updated: July 22, 2026

1. Data Controller

The data controller responsible for your personal data is:

Sylwester Kamys
Operating as: FitnessSwipe
Email: support.fitnessswipe@gmail.com
Website: fitnessswipe.app

2. What Data We Collect

We collect the following categories of personal data:

• Account data: email address, password (encrypted)
• Profile data: name, age, gender, country, city, bio, profile photos
• Fitness data: training goals, fitness level, experience, preferred exercises, training schedule
• Workout history: workout dates, types, duration, ratings, notes, and training partners
• Health data (optional): daily step count from Health Connect (Android) or Apple Health (iOS) — only if you grant permission (see section 9)
• Location data: approximate GPS coordinates (used to find nearby partners)
• Usage data: swipes, matches, messages, profile views, app activity
• Verification data: verification photo (stored securely, not public)
• Device data: push notification token, device type

3. How We Use Your Data

We use your personal data for the following purposes:

• To create and manage your account (legal basis: contract performance)
• To show you relevant training partner suggestions nearby (legal basis: contract performance)
• To enable messaging between matched users (legal basis: contract performance)
• To verify your identity and ensure platform safety (legal basis: legitimate interest)
• To send push notifications about matches and messages (legal basis: consent)
• To improve the app and fix technical issues (legal basis: legitimate interest)
• To comply with legal obligations (legal basis: legal obligation)

4. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase (supabase.com) — our database provider, servers in EU (Frankfurt). Data Processing Agreement in place.
• OpenAI (openai.com) — for AI bio generation and profile verification. Only the data you explicitly submit for these features is shared.
• Expo (expo.dev) — for push notifications delivery.
• Apple / Google — for app distribution via App Store and Google Play.

All third-party processors are bound by data processing agreements and comply with GDPR.

5. Data Storage and Security

Your data is stored on Supabase servers located in Frankfurt, Germany (EU). We implement appropriate technical and organizational measures to protect your data, including:

• Encrypted passwords (never stored in plain text)
• Encrypted data transmission (HTTPS/TLS)
• Row-level security in our database
• Regular security reviews

6. Data Retention

We retain your personal data for as long as your account is active. When you delete your account:

• Your profile, photos, and messages are permanently deleted within 30 days
• Your location data is deleted immediately
• Anonymized usage statistics may be retained for analytics

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure — delete your account and all associated data
• Right to restriction — limit how we process your data
• Right to data portability — export your data in a structured format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent for push notifications at any time

To exercise any of these rights, contact us at support.fitnessswipe@gmail.com. We will respond within 30 days.

8. Location Data

We request access to your device location to show you training partners nearby. Location is:

• Only collected when you grant permission
• Stored as approximate coordinates (not exact address)
• Updated when you open the app
• Never shared with other users in precise form (only approximate distance is shown)
• Deleted when you delete your account

9. Health & Fitness Data (Health Connect / Apple Health)

FitnessSwipe can optionally connect to Health Connect (Android) or Apple Health (iOS) to read your daily step count. This is entirely optional — the app is fully functional without it.

• What we access: step count only. We do not read any other health data types.
• Why: solely to track your progress in step-based challenges and 1-on-1 duels that you voluntarily join.
• What is stored: aggregated step totals for the duration of a challenge or duel (not raw sensor data, not continuous history).
• Who can see it: your step totals are visible only as scores within challenges and duels you participate in (e.g. your duel opponent sees your score). They are never shown on your public profile.
• Limited use: health data is never used for advertising, marketing, or profiling, is never sold, and is never shared with third parties. Our use complies with Google Play's Health Connect permissions policy and Limited Use requirements.
• Your control: you can revoke access at any time in the Health Connect app (Android) or Health app (iOS) settings, or disconnect in FitnessSwipe. Stored step totals are deleted when you delete your account.

10. Photos and Verification

Profile photos are stored securely and displayed to other users as part of your profile. Verification photos are stored separately and are never visible to other users — they are used only for identity verification purposes.

AI-powered verification is processed by OpenAI. The verification photo is sent to OpenAI's API solely for verification and is not used for training AI models (we use the API with data opt-out enabled).

11. Children's Privacy

FitnessSwipe is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us immediately at support.fitnessswipe@gmail.com.

12. Cookies

The FitnessSwipe mobile app does not use cookies. Our website (fitnessswipe.app) may use essential cookies for functionality only.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of the app after changes constitutes acceptance of the updated policy.

14. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with your national data protection authority. In the Netherlands: Autoriteit Persoonsgegevens. In Poland: UODO.

15. Originality Statement

FitnessSwipe was developed independently and does not copy or reproduce any other application or platform. Any similarity to other services is purely coincidental. The personal data collected by FitnessSwipe is processed solely for the purposes described in this Privacy Policy and is not shared with or derived from any other application.

16. Contact

For any privacy-related questions or to exercise your rights:
Email: support.fitnessswipe@gmail.com
We aim to respond within 5 business days.