Privacy Policy
This Privacy Policy explains what information the Candy Fitt app ("Candy Fitt", "we", "us") collects, how we use it, and the choices you have. By using the app you agree to this policy.
1. Information you give us
- Account data: email address, name, and password (stored in hashed form by our authentication provider).
- Profile and goals: answers to the onboarding quiz such as date of birth, height, weight, goal weight, activity level, and fitness goals. We use them to build your personal workout and meal plan and to calculate your calorie target.
- Progress data: weight entries, body measurements, progress photos, journal entries, habit and water tracking, completed workouts, and meals you log.
- Coach messages: if you subscribe to a plan with coach support, the text and attachments you send in the in‑app chat.
- Photos: a profile photo or progress photos, only when you choose to upload them from your camera or gallery.
2. Health and fitness data
With your explicit permission, Candy Fitt can read activity data from Apple Health (iOS) or Health Connect (Android): steps, distance, active calories, floors climbed, heart rate, resting heart rate, exercise sessions, and sleep. On iOS, workouts you complete in the app can also be written to Apple Health.
This data is used only to show your daily activity and progress inside the app and to track your goals. We never use health data for advertising, never sell it, and never share it with third parties for their own purposes. You can revoke access at any time in the Health app (iOS) or Health Connect settings (Android); the app keeps working without it.
Our use of information received from Health Connect complies with the Health Connect Permissions Policy, including the Limited Use requirements.
3. Information collected automatically
- Device and diagnostics: device model, OS version, app version, and crash reports. We use Sentry to detect and fix crashes.
- Push notification token: if you allow notifications, a token that lets us send you reminders and coach replies.
- Purchase status: whether you have an active subscription, received from the App Store or Google Play. We do not see your card details.
We do not use advertising SDKs and do not track you across other apps or websites.
4. How we use information
- To create and personalise your workout programs, meal plans, and recipes.
- To track your progress, achievements, and habits.
- To provide coach support if included in your plan.
- To send reminders and notifications you have enabled.
- To manage your subscription and provide customer support.
- To keep the app secure, fix bugs, and improve features.
5. Who we share data with
We share data only with service providers that help us run the app, and only as needed:
- Supabase – authentication and database hosting.
- Railway – hosting of our backend services.
- Sentry – crash and error reporting.
- Apple / Google – push notifications and in‑app subscriptions.
- Your coach – if you use a coaching plan, your coach can see your profile, progress, and chat messages in order to support you.
We may also disclose information if required by law. We do not sell personal data.
6. Data stored on your device
Some data stays only on your device and is not sent to our servers: your water intake log, saved (favourite) recipes, grocery list, and app preferences. Deleting the app removes this data.
7. Retention and deletion
We keep your data while your account is active. You can delete your account and all associated data from the app (Profile → Settings → Delete account) or by emailing us. Deletion is completed within 30 days. Crash logs are kept for up to 90 days.
8. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update most data directly in the app. For anything else, contact us at the address below.
9. Children
Candy Fitt is not intended for children under 16, and we do not knowingly collect data from them.
10. Security
Data is transmitted over encrypted connections (HTTPS) and stored with access controls. No method of storage is completely secure, but we work to protect your information.
11. Changes
We may update this policy from time to time. We will post the new version here and update the date above. Significant changes will be announced in the app.
12. Contact
Questions or requests about your data: support@candyfitt.com