Privacy Policy

Key points

FitAlaCarte is a fitness and nutrition app that generates routines, records workouts, shows progress, supports friend workouts, syncs with compatible watches and provides AI-assisted features.

Controller and privacy contact

The data controller is FitAlaCarte, based in Merida, Yucatan, Mexico. For any privacy matter, the contact channel is the email below.

Data we may collect

Account and sign-in

• Name, email address, avatar or profile photo.
• Authentication provider, such as email, Google Sign-In or Apple Sign In.
• Protected credentials and session tokens. We do not store passwords in plain text.

Fitness profile and preferences

• Age, weight, height, sex or gender, country, language and time zone.
• Goal, level, available days, session duration, equipment, home/gym preference, injuries and preferences.
• Target weight, quiet hours and notification preferences.

Workouts and progress

• Programs, routines, exercises, sets, reps, weights, rest periods, RPE, special techniques and workout completions.
• Volume, personal records, statistics, estimated calories, streaks and progression data.
• Data needed to sync an active workout with a compatible watch.

Health data

• If you authorize Health Connect or Apple Health, we may read steps, heart rate, weight, height, workouts, active calories and total calories.
• If you authorize write access, we may write workouts and active calories to the relevant health platform.

Camera, photos, voice and AI

• The camera may be used for profile photos, body analysis, progress photos and QR codes.
• The photo library may be used to select photos.
• The microphone and speech recognition may be used to send messages to Fitto.
• AI messages, food photos, menu photos or body images may be processed to provide replies or analysis.

Nutrition and friend workouts

• Nutrition preferences, calories, macros, meal plans, meals, swaps and custom macros.
• Session codes, QR codes, turn state, shared exercises and friend-workout results.

Technical data

• Notification tokens, app version, operating system, language, time zone, diagnostics, errors and basic connection data.

How we use your data

• Create and manage your account.
• Generate routines, phased plans, progressions and recommendations.
• Record workouts, remember used weights and adapt future loads.
• Show progress metrics, measurements, estimates and comparisons.
• Generate meal plans and adjustments based on your profile and activity when you accept that feature.
• Enable friend workouts, watch sync, notifications and support.
• Protect security, diagnose errors, prevent abuse and comply with legal obligations.

Non-discrimination

We never use your data to discriminate against you based on gender, gender identity, sexual orientation, race, ethnicity, religion, age, disability, health condition, or any other personal or social characteristic. Profile-based adjustments (for example, age or sex in estimation formulas) serve strictly functional purposes, and artificial intelligence features are monitored to avoid discriminatory bias.

When we share data

We share data only when necessary to operate the app, process features you request, comply with legal obligations or protect the service.

• Cloud infrastructure, database, storage, email, notification and monitoring providers.
• Google or Apple when you choose to sign in with those providers.
• Health Connect or Apple Health according to the permissions you grant.
• Apple HealthKit and Health Connect data: used exclusively for the health and fitness features you request. It is never used for advertising or marketing, and never sold or shared with advertisers or data brokers.
• International transfers: some providers (for example, AI providers) process data in the United States or other countries. We apply contractual safeguards and data minimization: only what is necessary for the requested feature is sent.
• OpenAI, Groq, Hugging Face and Anthropic models hosted on Amazon Bedrock for chat, nutrition, visual analysis or content generation, only when you enable the relevant feature.
• Google Play, Apple App Store and RevenueCat for purchases, subscriptions and access entitlements.

Health, AI and limitation of liability

Body fat, calories, macros, loads, routines and AI responses are estimates and may be inaccurate. Consult a professional before starting or changing a program, especially if you have injuries, medical conditions or pain.

To the extent permitted by applicable law, the FitAlaCarte operator will not be liable for decisions made solely based on the app, incorrect exercise execution, lack of professional supervision or use outside instructions.

How we protect information

• We use encrypted connections and reasonable access controls.
• We protect tokens and credentials with operating-system mechanisms when available.
• We do not store passwords in plain text.
• Current-version progress photos are primarily kept in private device storage, except for temporary analysis processing and derived metrics.

Retention and deletion

We keep data while your account is active or while needed to operate the app, maintain history, comply with legal obligations, resolve disputes or protect the service.

Request deletion

You may delete your account and data from Profile > Delete account, use the public deletion page, or email admin@fitalacarte.com from your account address.

• We will delete or anonymize associated data when technically possible and legally appropriate.
• Some minimal records may be retained for security, audit, fraud prevention, legal compliance or disputes.
• Backups and technical logs may take longer to purge.

Your choices

• You can edit profile data inside the app.
• You can revoke camera, photos, microphone, notification and health permissions from system settings.
• You can request access, correction, export or deletion by writing to admin@fitalacarte.com.
• Your privacy rights: you may exercise access, rectification, erasure, objection and consent-withdrawal rights (ARCO rights under Mexican LFPDPPP, or the equivalent under your local law, e.g. GDPR in the EU) by writing to admin@fitalacarte.com.
• You can delete your account and all your data from the app (Profile) or on the account-deletion page, with a 14-day grace period.

Children

FitAlaCarte is only for people aged 18 or older. We do not intentionally collect minors' data. If we identify a minor's account, we will block it and delete its data as required by law.

Privacy questions

For privacy, personal-data, account-deletion or data-deletion requests: