Fititis · last updated 30 July 2026
Fititis is a personal training, food and habit app. This policy describes exactly what leaves your phone, why, and what does not. It is deliberately specific: every statement below describes something the app actually does.
Most of the app never touches a server. Your workouts, sets, weights, goals, gym equipment, meal history and body measurements are stored on your device and are not uploaded. Meal photographs stay on your device too, with one exception you have to switch on yourself — see Sharing photographs below.
When you photograph a meal, the image is sent to this app's server and forwarded to OpenAI to be read. It is not written to disk at either end — not by this server, not to any storage bucket — and nothing about the request is logged. What comes back is nutrition information, which is stored on your phone. The photograph itself remains on your phone. That is still true of every photograph you take: reading a meal never stores one anywhere.
Off unless you turn it on. Sharing your figures with friends has never meant sharing your photographs, and it still does not — this is a separate switch, it starts off for everybody including people who have been sharing figures for months, and turning it on asks you to confirm what it does.
When it is on, a small copy of each day's meal photographs — up to six a day, resized and compressed — is stored on this app's server so the people already in your circle can see them. Specifically:
This is the only thing in the app that stores a photograph on a server, and it is the only part of your data another person can see rather than only a machine.
Anyone in your circle can be blocked, from the screen showing their day. Blocking ends the friendship, deletes the photographs held for you, and — unlike simply removing a friend — it lasts: they cannot add you again with your code.
A photograph or a person can also be reported. A report records who reported whom, the reason, an optional note, and a copy of the photograph concerned, so it can still be looked at after the original has expired. Reports are reviewed and acted on, and reporting somebody does not tell them you did.
Sign in with Apple provides a stable identifier for your account. That identifier is what your daily usage allowance and, if you use Friends, your shared figures are associated with.
Four details are stored alongside it on this app's server:
None of these is ever shown to another user. A friend sees the display name you choose and the figures you share, and never your email address, your phone number or your birthday. No mail and no message is ever sent to either.
With your permission, the app reads from Apple Health: steps, active energy, workouts, resting heart rate, heart-rate variability, sleep, respiratory rate and VO₂ max. This is used to show your day and to advise whether today's session should be lighter.
Sharing is off until you turn it on. When it is on, the people you have added can see, for each day: calories eaten, protein, how many meals, goal progress, whether you trained, and — if you have granted Health access — your steps, active energy and the kinds of workout you did.
They cannot see your meal names, your weight, your gym or your logged sets. They can see your meal photographs only if you have turned that on separately — see above. Sharing is always mutual, either person can end it, and pausing hides your figures from everybody immediately. Shared daily figures and shared photographs are both kept for thirty days and then deleted automatically.
If you use the readiness feature, the app sends your heart-rate figures, sleep duration and recent training counts to its server, which asks a language model whether today's session should be eased. No name, no photograph, no meal and no body measurement is included in that request. The reply is a small set of numbers and one sentence.
If you allow notifications, the app registers a device token with Apple so the server can tell you when somebody accepts your invite. The token identifies a device to Apple and nothing else. It is deleted when you sign out.
If you connect Whoop, the app holds an access token so it can read your recovery score. You can disconnect at any time in Profile, which discards it.
In the app, open More › Profile › Account and data and tap Delete account. That deletes everything the server holds — your account, your shared figures, any shared photographs, your friendships, your invite code and any device token — and erases the training history, meals and goals on your phone at the same time. It happens immediately and cannot be undone.
Signing in with Apple again afterwards creates a new, empty account. Deleting the app without deleting your account removes what is on your phone but leaves the server rows, so use the button first if you want both gone. You can still email the address below if you would rather somebody did it for you.
Fititis is not directed at children under 13 and does not knowingly collect data from them.