Privacy Policy

Last updated: 29 September 2026 · Version: 1.5

Who we are

FitTech-AI is a service operated by SAGUNI LTD, a company registered in England and Wales under company number 16511146, whose registered office is at Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

SAGUNI LTD ("we", "us") provides an AI-assisted fitness planning application at app.fittech-ai.com. For the purposes of the UK GDPR and EU GDPR, SAGUNI LTD is the data controller for the information described in this policy, which means we decide what data is collected and why. We are registered with the UK Information Commissioner's Office (ICO) under reference ZB939964.

The service is in early access. FitTech-AI is also available as apps for iPhone and Android; Apple and Google run their app stores and TestFlight under their own privacy policies.

What we collect

We do not store card details. Lite and Plus are paid for through Stripe, which processes your card; we keep only the Stripe customer and subscription references, your plan, its status and renewal date, and your billing country.

Why we use it, and our legal basis

• To provide the service (build your plan, show your sessions, store your logs, sync across your devices). Legal basis: performance of a contract with you.
• To keep the service secure (authentication, abuse prevention, rate limiting). Legal basis: our legitimate interests in protecting the service and its users.
• To process your health information so that your plan accounts for injuries, pain, and medical conditions. Legal basis: your explicit consent, as described below.
• To read and use health data from your phone, as described below. Legal basis: your explicit consent (Article 9(2)(a) UK GDPR), given in the app before anything is read.
• To improve the quality of what the AI produces, using the ratings you give. Legal basis: our legitimate interests in improving the service. You can turn this off at any time in Settings, and we have kept what is recorded to the minimum needed to be useful.

We do not use your data for advertising, profiling for marketing, or automated decisions that produce legal or similarly significant effects.

Health data and your explicit consent

Information about your injuries, pain, medical conditions, and medication is "special category" data under Article 9 of the GDPR. We ask for it because a plan that ignores an injury is not a safe plan.

Before you complete the onboarding interview, we ask you to give explicit consent to us processing this information for the sole purpose of generating and adjusting your training plan and coaching responses. You are asked to confirm this separately and deliberately; it is not bundled into general terms.

You can withdraw your consent at any time from the Account page in the app, or by deleting your data. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Because health information is fundamental to producing a safe plan, withdrawing consent means we can no longer generate or adjust plans for you, and the practical effect is that you should delete your account data.

Health data from your phone

The FitTech-AI apps for iPhone and Android can read activity and health data from Apple Health (iPhone) or Health Connect (Android). They do so only after you have agreed on our own screen, which explains what is read and why, and then allowed it in your phone's permission screen, where you can choose each type. The website never reads this data.

We read the types listed under "What we collect" and nothing else. We only read; we never write to Apple Health or Health Connect. Reading happens when you open the app and, where your phone allows it, in the background up to once an hour.

We store each reading with its time, its type and the phone it came from. So that your totals are right when you use more than one phone, we also keep a name for each phone you connect (for example "iPhone") and when it last sent data. You can stop any phone reading in Settings.

We use this data to show your activity in the app (for example your steps, your energy balance and your workouts), to work out your daily totals, and to make your plan and coaching fit what you actually do.

We never use it for advertising or marketing, never sell it, and never share it with anyone for those purposes. We do not use it to make decisions about you such as eligibility for insurance, credit or employment. Apple and Google are where the data comes from on your phone; we send them nothing back.

How AI processing works

To generate plans, answer your coaching questions, and estimate nutrition, we send relevant parts of your information to OpenAI, which processes it on our behalf as a processor and returns a result. This can include your health answers, goals, equipment, and logged training or food data, depending on the feature you are using.

OpenAI does not use data submitted through its API to train its models. We do not send your name or email address as part of these requests.

Health data from your phone is sent to our AI provider only if your plan includes the enhanced coach and you have turned on "Use my data" in Settings. Otherwise it is never sent. You choose in Settings what is sent: your daily totals only (the starting setting), or your individual readings as well. You can change this at any time. Whatever is sent is used only to answer that request, in the same way as your other training data.

AI output is a planning suggestion, not medical advice. Everything the AI produces is shown to you as a draft that you review before it is applied or saved.

Your ratings are stored by us and are not sent to OpenAI alongside the plan they refer to.

Feedback and ratings

You can give a plan or suggestion a thumbs up or down and pick a reason. This helps us see which kinds of suggestion are working and which are not. There are two separate settings, and they do different things.

Anonymous quality feedback is on by default. When you rate something we record the reason code, which feature it came from, which AI model produced it, and your user identifier. We do not record the plan or suggestion text, and the note you type is never included in this feedback. You can turn this off in Settings at any time.

Personalised improvement is off unless you turn it on. With it on, your last ten ratings are stored in your own account, including any note you typed with them, and read when your plan is next rebuilt so the plan can respond to what you have told it. Only the ten most recent are kept, and turning the setting off deletes that stored list. Your ratings are never allowed to override a safety limit.

Ratings are included in your data export and are deleted when you delete your account.

Photos

You can photograph a machine console or a meal so the app can read the numbers. These images are sent for processing, read once, and discarded immediately. They are never written to our database, never included in exports, and never used for any other purpose. Only the text or numbers you accept into your log are kept.

Your plan, allowances and counting

We record which plan your account is on, and, if you start the free trial, that it started, when it ends, and what started it (a completed session or a meal logged with AI). We count how many times you use each AI feature in the current period, so that we can show you what is left and keep the cost of running the service under control. These are numbers held against your account, not copies of what you asked or what the AI replied.

We also keep daily totals for the service as a whole: the feature used, the model, the plan type, and how many requests and tokens there were. Those totals carry no account identifier and cannot be traced back to you. Your own counts are deleted when you delete your account; the anonymous totals remain.

Who we share data with

We do not sell your data and we do not share it with advertisers. We use a small number of service providers who process data on our instructions:

We may also disclose information where we are legally required to do so.

International transfers

Some of these providers process data outside the UK and the European Economic Area, including in the United States. Where that happens, transfers are covered by the safeguards those providers offer, such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.

How long we keep it

• Your account data is kept for as long as your account exists.
• If you delete your data in the app, it is removed from our live database immediately. Backups held by our infrastructure providers may persist for a short period before being overwritten.
• Health data from your phone: each individual reading is kept for 5 years and then deleted; the daily totals worked out from them are kept for as long as your account exists. Everything is deleted when you delete your account.
• Photographs are never stored at all.
• Security and rate-limiting records tied to IP addresses expire automatically within hours.

How we protect it

• Access requires signing in with Google, Apple or a one-time code sent to your email. New accounts may be reviewed before they can use the app.
• All traffic is served over HTTPS with strict transport security.
• Session cookies are signed, HttpOnly, Secure, and same-site restricted; no access tokens are stored in your browser's local storage.
• Every request is scoped to your own account identifier on the server, so one user cannot read or write another user's data.
• Data is stored with our database provider and is encrypted at rest by that provider.
• A strict Content Security Policy is enforced, and we load no third-party scripts.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your rights, we will notify you and the relevant supervisory authority as required by law.

Your rights

You have the right to access, correct, delete, restrict, or object to our processing of your data, to receive a portable copy, and to withdraw consent at any time. Two of these are built directly into the app:

• Export. More → Export produces a complete copy of your data in CSV and JSON.
• Delete. More → Export → Delete permanently removes your data from our database.

You can stop FitTech-AI reading your phone's health data at any time in the app (Settings, Health data), and delete what was already read there. You can also withdraw access in your phone: on iPhone, Settings, Health, Data Access and Devices, FitTech-AI; on Android, the Health Connect app, App permissions, FitTech-AI. Your export includes this data.

For anything else, contact us using the details below. You also have the right to complain to a data protection supervisory authority, such as the UK Information Commissioner's Office (ico.org.uk).

Cookies

We use only essential cookies, and no analytics, advertising, or tracking cookies of any kind:

• A beta access cookie that records that you entered the site password.
• A session cookie that keeps you signed in.
• A short-lived cookie used during Google or Apple sign-in to prevent cross-site request forgery. In the phone apps, a sign-in is handed to the app through a single-use code that we hold for 3 minutes.

Because these are strictly necessary to deliver a service you have asked for, they do not require consent under the ePrivacy rules.

Age limit

FitTech-AI is intended for adults aged 18 and over. It is not designed for children, and we do not knowingly collect data from anyone under 18. If you believe a minor has provided us with data, contact us and we will delete it.

Changes to this policy

If we make a material change, particularly to how health data or AI processing works, we will update the version number above and ask you to review and re-confirm your consent inside the app.

Health data from your phone is read only after you agree to it in the app. Nothing is read from anyone who has not.

Contact

For any privacy question, or to exercise a right that is not available in the app, contact us at privacy@fittech-ai.com, or write to us at:

SAGUNI LTD
Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom

SAGUNI LTD, registered in England and Wales, company number 16511146. Registered office: Shelton Street, Covent Garden, London, WC2H 9JQ. ICO registration ZB939964.
© 2026 FitTech-AI. This policy applies to app.fittech-ai.com and www.fittech-ai.com.