Last updated: 31 July 2026 · Version: 1.1
In short. We collect only what is needed to build and run your training plan. Your health answers are used to make your plan safer, never to advertise to you. We do not sell your data, we do not run analytics or advertising trackers, and you can export or permanently delete everything at any time from inside the app.
Who we are
FitTech-AI is a service operated by SAGUNI LTD, a company registered in England and Wales under company number 16511146, whose registered office is at Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
SAGUNI LTD ("we", "us") provides an AI-assisted fitness planning application at app.fittech-ai.com. For the purposes of the UK GDPR and EU GDPR, SAGUNI LTD is the data controller for the information described in this policy, which means we decide what data is collected and why. We are registered with the UK Information Commissioner's Office (ICO) under reference ZB939964.
The application is currently in a closed private beta, available only to a small number of invited testers.
What we collect
| Category | Examples |
|---|---|
| Account | Your Google account identifier, email address, and display name, received when you sign in with Google. |
| Health and fitness information | Age, sex, height, weight and body measurements, fitness level, injuries and pain, medical conditions, medication that affects training, and any doctor or physiotherapist clearance you tell us about. |
| Training preferences | Available days, equipment, locations, exercises you like or want to avoid, session length, cardio tolerance. |
| Activity and progress | Completed sessions, sets, weights, reps, times, distances, calories, daily step counts, check-in answers including pain, energy and sleep ratings, and free-text notes you write. |
| Food information | Meals you log, their calories and macronutrients, saved meals, and any notes you add. |
| Feedback and ratings | When you rate a plan or suggestion, we record the thumbs up or down, the reason you pick from the list, which feature it came from, and which AI model produced it. The plan or suggestion text itself is never recorded. Any note you type is kept only inside your own account, and only if you have turned on personalised improvement. |
| Technical | Your IP address and basic request information, used transiently for security and rate limiting. |
We do not collect payment information. Billing is not enabled during the beta.
Why we use it, and our legal basis
- To provide the service (build your plan, show your sessions, store your logs, sync across your devices). Legal basis: performance of a contract with you.
- To keep the service secure (authentication, abuse prevention, rate limiting). Legal basis: our legitimate interests in protecting the service and its users.
- To process your health information so that your plan accounts for injuries, pain, and medical conditions. Legal basis: your explicit consent, as described below.
- To improve the quality of what the AI produces, using the ratings you give. Legal basis: our legitimate interests in improving the service. You can turn this off at any time in Settings, and we have kept what is recorded to the minimum needed to be useful.
We do not use your data for advertising, profiling for marketing, or automated decisions that produce legal or similarly significant effects.
Health data and your explicit consent
Information about your injuries, pain, medical conditions, and medication is "special category" data under Article 9 of the GDPR. We ask for it because a plan that ignores an injury is not a safe plan.
Before you complete the onboarding interview, we ask you to give explicit consent to us processing this information for the sole purpose of generating and adjusting your training plan and coaching responses. You are asked to confirm this separately and deliberately; it is not bundled into general terms.
You can withdraw your consent at any time from the Account page in the app, or by deleting your data. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Because health information is fundamental to producing a safe plan, withdrawing consent means we can no longer generate or adjust plans for you, and the practical effect is that you should delete your account data.
How AI processing works
To generate plans, answer your coaching questions, and estimate nutrition, we send relevant parts of your information to OpenAI, which processes it on our behalf as a processor and returns a result. This can include your health answers, goals, equipment, and logged training or food data, depending on the feature you are using.
OpenAI does not use data submitted through its API to train its models. We do not send your name or email address as part of these requests.
AI output is a planning suggestion, not medical advice. Everything the AI produces is shown to you as a draft that you review before it is applied or saved.
Your ratings are stored by us and are not sent to OpenAI alongside the plan they refer to.
Feedback and ratings
You can give a plan or suggestion a thumbs up or down and pick a reason. This helps us see which kinds of suggestion are working and which are not. There are two separate settings, and they do different things.
Anonymous quality feedback is on by default. When you rate something we record the reason code, which feature it came from, which AI model produced it, and your user identifier. We do not record the plan or suggestion text, and the note you type is never included in this feedback. You can turn this off in Settings at any time.
Personalised improvement is off unless you turn it on. With it on, your last ten ratings are stored in your own account, including any note you typed with them, and read when your plan is next rebuilt so the plan can respond to what you have told it. Only the ten most recent are kept, and turning the setting off deletes that stored list. Your ratings are never allowed to override a safety limit.
Ratings are included in your data export and are deleted when you delete your account.
Photos
You can photograph a machine console or a meal so the app can read the numbers. These images are sent for processing, read once, and discarded immediately. They are never written to our database, never included in exports, and never used for any other purpose. Only the text or numbers you accept into your log are kept.
Who we share data with
We do not sell your data and we do not share it with advertisers. We use a small number of service providers who process data on our instructions:
| Provider | Purpose |
|---|---|
| Sign-in and identity verification only. We do not access your Gmail, Drive, Contacts, or Calendar. | |
| Vercel | Application hosting and delivery. |
| Upstash | Database hosting for your stored account data. |
| OpenAI | AI plan generation, coaching replies, and nutrition or calorie estimates. |
| Cloudflare | Domain name resolution. |
| Zite / Fillout | Hosting our support and feedback form. Only what you choose to type into that form, and any file you attach to it, is processed there. Attachments are deleted once your report is closed. |
We may also disclose information where we are legally required to do so.
International transfers
Some of these providers process data outside the UK and the European Economic Area, including in the United States. Where that happens, transfers are covered by the safeguards those providers offer, such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.
How long we keep it
- Your account data is kept for as long as your account exists.
- If you delete your data in the app, it is removed from our live database immediately. Backups held by our infrastructure providers may persist for a short period before being overwritten.
- Photographs are never stored at all.
- Security and rate-limiting records tied to IP addresses expire automatically within hours.
How we protect it
- Access requires signing in with Google, restricted to an invited allowlist during the beta.
- All traffic is served over HTTPS with strict transport security.
- Session cookies are signed, HttpOnly, Secure, and same-site restricted; no access tokens are stored in your browser's local storage.
- Every request is scoped to your own account identifier on the server, so one user cannot read or write another user's data.
- Data is stored with our database provider and is encrypted at rest by that provider.
- A strict Content Security Policy is enforced, and we load no third-party scripts.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your rights, we will notify you and the relevant supervisory authority as required by law.
Your rights
You have the right to access, correct, delete, restrict, or object to our processing of your data, to receive a portable copy, and to withdraw consent at any time. Two of these are built directly into the app:
- Export. More → Export produces a complete copy of your data in CSV and JSON.
- Delete. More → Export → Delete permanently removes your data from our database.
For anything else, contact us using the details below. You also have the right to complain to a data protection supervisory authority, such as the UK Information Commissioner's Office (ico.org.uk).
Cookies
We use only essential cookies, and no analytics, advertising, or tracking cookies of any kind:
- A beta access cookie that records that you entered the site password.
- A session cookie that keeps you signed in.
- A short-lived cookie used during Google sign-in to prevent cross-site request forgery.
Because these are strictly necessary to deliver a service you have asked for, they do not require consent under the ePrivacy rules.
Age limit
FitTech-AI is intended for adults aged 18 and over. It is not designed for children, and we do not knowingly collect data from anyone under 18. If you believe a minor has provided us with data, contact us and we will delete it.
Changes to this policy
If we make a material change, particularly to how health data or AI processing works, we will update the version number above and ask you to review and re-confirm your consent inside the app.
Contact
For any privacy question, or to exercise a right that is not available in the app, contact us at privacy@fittech-ai.com, or write to us at:
SAGUNI LTD
Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom
FitTech-AI is a planning tool, not a medical service. It does not provide medical advice, diagnosis, or treatment. Always seek advice from a qualified professional about pain, injury, or a medical condition, and stop exercising and seek help if you experience sharp pain, pain radiating down a limb, numbness, or tingling.
SAGUNI LTD, registered in England and Wales, company number 16511146. Registered office: Shelton Street, Covent Garden, London, WC2H 9JQ. ICO registration ZB939964.
© 2026 FitTech-AI. This policy applies to app.fittech-ai.com and www.fittech-ai.com.