Version 2026-10-12 · Last updated 9 November 2026
Samuel Zeidan, Gothenburg, Sweden. Contact: support@solutionsbyzeidan.se. The data controller is responsible for the processing of your personal data in Fitzli. The full postal address is available on request and is listed in the App Store under trader information.
| Category | Examples | Why |
|---|---|---|
| Account details | Email address. No password. You sign in with a one-time code sent to your inbox, or with Apple or Google. If you choose Apple or Google, we receive your email address (with Apple this can be a relay address Apple creates for you) and the ID Apple or Google gives your account with us. We never receive your name or password from them. | Create and protect your account |
| Profile | Sex, year of birth, height, weight, goals, activity level, and a profile picture if you add one | Calculate calorie and nutrition targets |
| Health data | Allergies, intolerances, diagnoses, weight history, sleep, hunger | Tailor your nutrition and training plan |
| Meal logs | Meal descriptions and nutritional values. If you photograph a meal the image is sent for analysis and then discarded, and we never store it | Track your intake against the plan |
| Apple Health | Steps, active energy, sleep, resting heart rate, heart rate variability (HRV), weight, blood pressure | Track movement and recovery, only if you connect Health |
| Workout logs | Exercises, weights, repetitions, session duration | Track your training and progress |
| Location during cardio sessions | Your position from the phone's GPS while a cardio session you started is running, and what is calculated from it: the route, distance, pace, splits and elevation gain. Location is not read at any other time | Measure distance and pace and show your route to you, only if you do a session outdoors |
| Subscription | Status, plan type (monthly/yearly), period end date, and a purchase id from Apple or Google depending on where you bought | Give you access to what you paid for |
| Technical data | Server logs with timestamp, path and user id | Operation, troubleshooting and security |
| Usage data | Which steps in the app you have passed, for example the onboarding steps, that the paywall was shown and that a purchase was started. With timestamp, platform, app version, a random installation id and your user id when you are signed in. Where you heard about Fitzli, if you choose to answer that question during onboarding (one choice from a fixed list). No other answers and no health data | See where the app needs to improve |
| Ad measurement (iPhone only) | If you downloaded the app after tapping a Fitzli ad in the App Store: which campaign, ad group and keyword the ad belonged to. Retrieved through Apple's AdServices when you sign in. No advertising identifier (IDFA) and no tracking across apps or websites. If you did not come from an ad, there is no such data | See which ads lead to the app being used and bought |
| Posts on Threads, YouTube and in Facebook groups that we reply to | Not data about Fitzli users. Our own tool reads recent public posts on Threads, public comments on YouTube videos, and recent posts in Facebook groups the Fitzli page is a member of, looking for a few words about food allergies, coeliac disease and IBS, so that we can answer from our accounts. We keep the post's id and link and a short note about what it asks, never the person's name or the full post, and delete them after 30 days. Nothing is linked to Fitzli accounts, and every reply is written or approved by a person | Legitimate interest: answer public questions about what Fitzli helps with |
The app uses AI to generate nutrition and training plans, interpret meal photos and provide insights. For this to work, certain data is sent to sub-processors:
| Recipient | What is sent | Purpose |
|---|---|---|
| Anthropic | Meal descriptions and photos, allergies, diagnoses, weight history, hunger, plan adherence, calorie targets. If you have connected Apple Health, also a summary of the past week (see section 5). | Generate plans, interpret meals, provide insights |
| Unsplash | Search text for recipe images | Fetch an image for a recipe |
| Resend | Email address | Send login codes and account email |
| Apple | In-app purchases. We get back that a subscription exists, its type and end date. If you sign in with Apple, Apple also confirms who you are: your email address and an ID for your account with us. When you delete your account, we ask Apple to remove the link. | Payment, invoicing and VAT for purchases in the iPhone app |
| In-app purchases. We get back that a subscription exists, its type and end date. If you sign in with Google, Google also confirms who you are: your email address and an ID for your account with us. | Payment, invoicing and VAT for purchases in the Android app | |
| RevenueCat | Your user id with us, plus the purchase events from Apple or Google. On iPhone also Apple's ad attribution (campaign and keyword), if you came from an App Store ad | Link a store purchase to the right account with us, and see which ads lead to purchases |
| Fly.io | All stored data (server operation) | Hosting |
| Cloudflare | Traffic to the web app | Hosting of the app |
Your name, your email address and your user id are not sent to Anthropic or Unsplash. The content is, however, linked to you in our database and therefore counts as personal data.
The AI-generated suggestions are not medical advice. See the terms of service.
If you report AI content. In the app you can report a suggestion you find offensive, unsafe or wrong. We then store which surface it concerned, the reason you chose, any comment you wrote and a reference to the content you pointed at. For coaching text, which is not stored anywhere else, the text itself is stored. Your meal photo never accompanies a report. Reports are used to assess and adjust what the model is allowed to produce, and are kept for as long as that requires.
If you choose to connect Apple Health, Fitzli reads the following categories from Health on your iPhone: steps, active energy, sleep, resting heart rate, heart rate variability (HRV), weight and blood pressure. We only read. Fitzli never writes anything to Health.
The connection is optional and the app works without it. You decide in iOS which categories to share, and can remove access at any time under Settings → Privacy & Security → Health → Fitzli. No new data is read after that.
The values are stored on our server in Stockholm and linked to your account. When your insights and plans are generated, a summary of the past seven days is sent to Anthropic: latest weight, averages for resting heart rate, HRV, steps, active energy and sleep, plus the latest blood pressure reading. Individual measurements, your name and your email address are not sent there.
Data from Health is never used for marketing, advertising or other use-based data mining. It is not sold on and not shared with data brokers, employers or insurers. It is used solely to give you nutrition and training advice in the app.
If you delete your account, the health data is removed along with the rest of your data. What sits in Health on your iPhone we do not touch. That belongs to you and to Apple.
This section applies to iPhone only. The Android app reads no health data from the phone at all, not from Health Connect and not from any other source. The only thing we know about your health there is what you enter in the app yourself.
If you start an outdoor cardio session, Fitzli reads the phone's position while the session is running, to measure distance and pace and draw your route on a map. Location is read from when you tap Start until you finish or discard the session, including while the screen is locked. On iPhone this shows as a blue indicator in the status bar, and on Android as a notification for as long as the session runs. Location is not read at any other time, and not at all for indoor sessions.
Fitzli only asks for While Using the App permission and never for Always. You can withdraw it in the phone's settings, and you can still do cardio sessions indoors, without GPS.
When you save the session, the route, distance, time, pace, splits and elevation gain are stored on our server in Stockholm, linked to your account. Only you can see the route. It is not sent to Anthropic or any other AI, never used for marketing and not shared with anyone. If you share an image of the session, the image is made on your phone and sent wherever you choose. It has no map under the line, and the start and end of the route are hidden unless you choose otherwise, so that it does not show where you live.
You can delete a single session and its route under Workout history, and everything is deleted when you delete your account.
Payment takes different routes depending on where you buy, and that determines who handles your data.
Purchases in the iPhone app go through Apple's In-App Purchase. Apple is the seller and an independent data controller for the payment, and processes it under its own privacy policy. We never learn who you are at Apple, only that a purchase was made for a given account with us.
Purchases in the Android app go through Google Play Billing. Google is the seller and an independent data controller for the payment, and processes it under its own privacy policy. As with Apple, we never learn who you are at Google, only that a purchase was made for a given account with us.
We never see your card details. Card number, expiry date and CVC are handled solely by Apple or Google and their payment providers, and are never stored by us. What we receive is that a subscription exists, which type it is and when the period ends.
RevenueCat sits between the store and us for in-app purchases. They receive your user id with us and the purchase events from Apple or Google, and tell our server that the subscription changed. RevenueCat is our data processor, that is, they process the data on our behalf.
Some of our sub-processors are established outside the EU/EEA. This means that data may be processed in countries that lack an adequacy decision from the European Commission.
| Recipient | Country | Safeguard |
|---|---|---|
| Anthropic | USA | Standard Contractual Clauses (SCC) |
| Unsplash | USA/Canada | Standard Contractual Clauses (SCC) |
| Cloudflare | USA | Standard Contractual Clauses (SCC) |
| RevenueCat | United States | Standard Contractual Clauses (SCC) |
| United States | Standard Contractual Clauses (SCC) | |
| Resend | USA | Standard Contractual Clauses (SCC) |
Server operation is within the EU: the database and the API run in Stockholm.
Contact support@solutionsbyzeidan.se to exercise your rights. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
The app has no passwords. You sign in with a one-time code sent to your inbox, and the code is stored hashed, never in plain text. All traffic uses HTTPS. Access to the API requires authentication, and attempts are rate limited to counter guessing.
For material changes, the version number at the top is updated and you are informed in the app. We record which version you accepted.
Fitzli