FITZYE

1. Data we process

• Account — first name, last name, email address, display language.
• Coaching profile — date of birth, height, starting weight, activity level, goal, allergies and excluded foods, plus the calorie and macronutrient targets set by your coach.
• Weight tracking — the weigh-ins you enter, with their date.
• Progress photos — the photos you choose to add, with their date. They are never published and never leave your own space.
• Food diary — logged meals (name, calories, protein, carbs, fat) and, if you add one, the meal photo.
• Workouts — the sessions you mark as completed.

The app does not access your location, your contacts, your microphone, or Apple Health data. Camera and photo library access is requested only when you add a photo yourself, and can be declined without preventing the rest of the app from working.

2. Why

This data is used solely to deliver the coaching service: showing your program and meal plan, computing your targets, tracking your progress, and letting your coach adjust your plan. The legal basis is the performance of the coaching contract between you and your coach. No data is sold, rented or used for advertising.

3. Who can see it

• You, from the app.
• Your coach, from her private back-office — that is the point of 1:1 coaching.
• The technical providers listed in section 4, strictly as needed.

Your coach's other clients have no access to any of your data.

4. Hosting and providers

• Supabase — database, authentication and photo storage. Your data is hosted in the European Union (AWS, Paris region eu-west-3).
• OpenRouter — if, and only if, you use automatic calorie estimation from a meal photo, that photo is sent to an artificial-intelligence model which returns an estimate. You always review the result before it is saved. This feature is optional: meals can be entered manually.
• Apple — app distribution and, if you enable them, notifications.

5. How long

Your data is kept for as long as your coaching is active. When it ends, or upon your request, your account and all attached data — weigh-ins, photos, diary — are permanently deleted within 30 days.

6. Security

Traffic is encrypted in transit (HTTPS). Access is partitioned at the database level by security rules that let each account read and write only its own rows. Photos are stored in a private bucket and are only reachable through time-limited signed links.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, object to and port your data. To exercise it — including to request deletion of your account — write to leanaamhache@gmail.com. We answer within 30 days. You may also lodge a complaint with your national data protection authority.

8. Minors

The app is intended for adults. No account is created for a minor without the written consent of their legal guardian.

9. Changes

Any change to this policy will be published on this page with a new update date.