1. TL;DR
- We collect the minimum needed to sign you in, run the app, and operate coaching programs.
- We do not sell your data and we do not run advertising or third-party ad SDKs.
- Coaching subscriptions are processed by Stripe. App subscriptions are processed by Apple. We never see or store your card details.
- You can delete your account and all associated data from inside the app at any time.
- Questions? Email support@fitfo.app.
2. Who we are
“Fitfo,” “we,” “us,” and “our” refer to Vaayu Athletics Inc, a US-based company that operates the Fitfo mobile app, the website at fitfo.app, and the Fitfo coaching platform at fitfo.app/coaching. You can reach us at support@fitfo.app.
3. What we collect
Fitfo collects only the information needed to authenticate you, operate the app, and facilitate coaching services.
3.1 App users
- Account and contact info: your phone number (SMS sign-in) or name and email (Sign in with Apple). If Apple relays a private email, that private relay is what we store.
- Profile and onboarding: goals, training split, days per week, weight, height, experience level, and age you enter during onboarding.
- Workout content: workouts you save, schedule, or create; sessions you log (sets, reps, weights, durations, notes, completion timestamps); body-weight entries.
- Source URLs: TikTok and Instagram Reel URLs you share into the app, plus the extracted metadata and transcript we generate from them.
- App subscription status: whether you have an active subscription or trial, which plan (monthly or annual), the start and renewal dates, and an anonymous identifier from Apple and RevenueCat to verify your subscription. We do NOT receive, see, or store your credit card number, billing address, or any payment method details. All payment data is handled exclusively by Apple.
- Device identifiers:a user ID we assign to your account, plus an anonymous identifier from RevenueCat used solely to track subscription entitlements. We do not use Apple's advertising identifier (IDFA) and do not integrate any advertising SDKs.
- Apple Sign-In refresh token: stored solely so we can revoke the token with Apple when you delete your account, as required by App Store Guideline 5.1.1(v).
3.2 Coaching platform users and creators
- Name and email address provided when you join or claim a coaching profile.
- Payment information:coaching subscriptions and program purchases are processed by Stripe. We receive confirmation of payment status and a transaction ID. We do not see or store your full card number, CVV, expiration date, or billing address. Those are handled exclusively by Stripe's PCI-DSS-compliant infrastructure.
- Coaching subscription details: which program you are enrolled in, the creator whose program you follow, billing period, renewal dates, and subscription status.
- Creator profile details: for creators who claim a coaching profile, we collect your username, bio, linked social handles, and any program content (workouts, schedules, descriptions) you publish on the platform.
- Coaching hold authorization: when you start a coaching program, we initiate a temporary card hold (up to $100) through Stripe to verify a valid payment method before your first billing date. This hold is released and not captured unless you convert to a paid subscription. See Section 7 for details.
- Training and progress data:sessions logged within a creator's coaching program, including sets, reps, weights, durations, and notes.
3.3 What we do not collect
- Precise or coarse location, contacts, photos, videos (beyond URLs you share), microphone audio, or HealthKit data.
- Payment card numbers, CVV codes, expiration dates, or billing addresses for either app or coaching subscriptions.
- Third-party advertising or tracking SDK data.
4. How we use your information
- Authenticate you via SMS one-time codes or Sign in with Apple.
- Store and display the workouts, sessions, and notes you create.
- Process TikTok and Instagram URLs you submit by fetching public metadata, transcribing audio, and running OCR on frames to extract exercise data.
- Validate and manage your app subscription status so we can grant or restrict access to paid features.
- Process and manage coaching program enrollments, including initiating and releasing card holds, billing, and access control.
- Allow creators to publish coaching programs, track enrollment, and view aggregated (not individual) progress summaries.
- Respond to support requests.
- Protect against abuse and comply with legal obligations.
We never use your data for advertising, profiling for third-party advertisers, or sale to data brokers.
5. Third-party services (sub-processors)
- Supabase: database and file storage for profiles, workouts, and session logs (hosted on AWS in the United States).
- Twilio Verify: sending SMS one-time verification codes to your phone number.
- Apple: Sign in with Apple authentication and In-App Purchase processing for app subscriptions.
- RevenueCat: validates your Apple app subscription status. Receives an anonymous user identifier and transaction details. Does not receive your name, email, phone, or card information.
- Stripe:processes all coaching platform payments and card holds. Stripe is PCI-DSS Level 1 certified. Stripe's privacy policy is at stripe.com/privacy.
- Apify: fetches public metadata from TikTok and Instagram URLs you submit.
- OpenAI: runs transcription, OCR, and language-model processing on video/audio content you submit.
- DigitalOcean: hosts our API servers.
These providers are contractually required to handle data only on our behalf and in line with their own privacy terms. We do not sell data to any of them.
6. SMS and text messaging
If you provide a mobile phone number, Fitfo may send you SMS messages for account verification, coaching program updates, and related service notifications. If you opt in to marketing messages, we may also send launch announcements and promotional updates about coaching programs.
Mobile number non-sharing. We do not sell, rent, loan, or share your mobile phone number with third parties for their own marketing or promotional purposes. Your number is used only to deliver Fitfo messages as described in this policy and is shared with our SMS delivery providers (such as Twilio and Sendblue) solely to transmit messages on our behalf.
Message frequency. Message frequency varies. You may receive one-time verification codes when signing in, occasional transactional messages related to your account or coaching enrollment, and—if you opt in—recurring promotional messages during launch or enrollment periods. During active launch windows you may receive several messages in a short period.
Message and data rates. Message and data rates may apply. Check with your mobile carrier for details about your plan.
7. Card holds for coaching programs
When you enroll in a coaching program, Fitfo (via Stripe) initiates a temporary authorization hold of up to $100 on your payment method to verify that it is valid before your first charge. This is a hold, not a charge. The hold will be:
- Released automatically if you cancel before the trial period ends.
- Applied as a credit toward your first billing period if you convert to a paid subscription.
Holds typically appear in your bank statement within 1 to 3 business days and are released within 5 to 7 business days if not converted to a charge, depending on your financial institution.
8. How long we keep data
We keep your data for as long as your account is active. When you delete your account we immediately and permanently remove your profile, workouts, sessions, and body-weight entries from Supabase. Some server logs or backups may persist for up to 30 days before being fully expunged.
Coaching subscription and payment records held by Stripe and RevenueCat may be retained for up to 7 years for tax, accounting, and legal compliance. These records contain transaction IDs but not full card details.
9. Your rights
- Access or export your data: email us and we will send you a copy within 30 days.
- Correct inaccurate data: most fields are editable directly inside the app.
- Delete your account and all associated data: use Profile → Delete Account inside the app, or email us.
- Manage your app subscription: through your Apple ID settings (Settings → [Your Name] → Subscriptions). Deleting the Fitfo app does not cancel your subscription.
- Manage your coaching subscription: through the Fitfo coaching dashboard at fitfo.app/coaching/dashboard or by emailing support@fitfo.app.
Residents of California (CCPA/CPRA), the EEA/UK (GDPR), and other jurisdictions with equivalent laws are entitled to the same rights above without charge. We do not sell or share personal information for cross-context behavioral advertising.
10. Children
Fitfo is not directed to children under 13 and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us data, email us and we will delete it.
11. International transfers
Our servers and sub-processors are primarily located in the United States. If you access Fitfo from outside the US, you consent to your data being transferred to and processed in the US under the safeguards described in this policy.
12. Security
All traffic between your device and our servers uses HTTPS/TLS. Stored data is encrypted at rest by our infrastructure providers. Access to production data is limited to a small number of engineers using least-privilege credentials. Payment data is never transmitted to or stored on our servers; it is handled exclusively by Apple (app subscriptions) and Stripe (coaching subscriptions).
13. Third-party content (TikTok / Instagram videos)
Fitfo does not host or redistribute third-party video content. When you share a TikTok or Instagram video into Fitfo, we fetch public metadata, transcribe audio, and run OCR on frames to extract factual exercise information. We always link back to the original post inside the app. Creators who want their content excluded from the service can email support@fitfo.app with the URL and we will remove it.
14. Apple App Tracking Transparency (ATT) and advertising
Fitfo does not run third-party advertising SDKs or sell your personal information for cross-context behavioral advertising. We do not use the Identifier for Advertisers (IDFA). If we introduce optional analytics that could trigger an Apple privacy prompt in the future, we will describe it here and in the app before enabling it.
15. Changes to this policy
We will update this page if our practices change. Material changes will be communicated via the app or email before they take effect.
16. Contact
Questions, requests, or concerns? Email support@fitfo.app. We respond within one business day.