Privacy Policy
This policy explains what data the FitTide app and this website handle, why, and what control you have over it. FitTide is built and operated by Grizzly Paw Software Ltda (CNPJ 56.161.958/0001-19), Brazil, the controller of your personal data under Brazil's General Data Protection Law (LGPD, Law 13.709/2018).
The short version
- We collect what you log in the app so it can store, sync and show it back to you.
- We do not sell your data, show ads, or use third-party advertising or analytics trackers.
- Health data is read from or written to Health Connect or Apple Health only when you turn that on.
- You can delete your account and its data from inside the app at any time.
Data we collect
- Account: your email address and login credentials, or your Google account identity if you sign in with Google.
- Profile: details you enter such as name, date of birth, sex, height, goals, unit and language preferences.
- Training: routines, workout sessions, sets, notes and ratings.
- Body data: weight, body fat, circumferences and other measurements, and progress photos you choose to take.
- Nutrition: meals, foods, water and supplements you log, and photos of meals or nutrition labels you choose to scan.
- Connected services: if you connect Health Connect, Apple Health or Strava, the activities and measurements you allow us to import or export.
- Technical data: crash and error reports (device model, OS and app version, the error itself) and a push-notification token.
- Support: anything you send us by email or through in-app feedback.
How we use it
- To provide the app: store your data on your device, back it up to your account and keep your devices in sync.
- To run the features you request, such as generating a routine or estimating the nutrition in a meal photo.
- To fix bugs and keep the service secure.
- To send reminders you set up and occasional product announcements, which you can turn off.
- To answer you when you contact us.
Legal bases (LGPD art. 7 and 11): performance of our contract with you, your consent (for health data, health-store connections, camera, microphone and notifications), our legitimate interest in keeping the service working and secure, and compliance with legal obligations.
Where your data goes
Your data lives first on your device. When you have an account, it is also stored with the service providers below, only for the purposes described here:
- Supabase — account login, database and file storage for sync and backup.
- Google (Gemini API) and OpenAI — process meal photos, nutrition labels and routine requests when you use those AI features. We send only what the feature needs, through their paid API services.
- Sentry — crash and error reports.
- Google Firebase Cloud Messaging — delivery of push announcements.
- Google Sign-In — if you choose to sign in with Google.
- Strava, Health Connect and Apple Health — only when you connect them.
- Your device's speech recognition (Google or Apple) — when you dictate with the microphone.
Some of these providers process data outside Brazil, including in the United States and the European Union. We rely on contractual safeguards as permitted by LGPD art. 33. We may also disclose data when required by law.
Health data
Data read from Health Connect or Apple Health is used only to show and track your training and body data inside FitTide. It is never used for advertising, never sold, and never shared with data brokers. You can revoke access at any time in your phone's settings or in the app.
How long we keep it
We keep your data while your account exists. When you delete your account, we delete your account data from our servers, including uploaded photos and connected-service tokens, within 30 days, except where the law requires us to keep something longer. Data stored only on your device is removed when you clear it or uninstall the app.
Your rights
Under LGPD you may ask us to confirm whether we process your data, access it, correct it, anonymise or delete it, port it, learn who we share it with, and withdraw consent. Delete your account in the app under Profile → Delete account, or email [email protected] for any other request. You may also complain to Brazil's data protection authority (ANPD).
Security
Data is encrypted in transit, your login session is kept in your device's secure storage, and access to our servers is restricted. No system is perfectly secure, and we will notify you and the ANPD of any incident that may cause you relevant harm, as the law requires.
Children
FitTide is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
This website
fittide.app sets no cookies and runs no analytics. Our hosting provider, Cloudflare, processes standard request data such as IP addresses to deliver and protect the site.
Changes
We will update this page when our practices change and tell you in the app about material changes.
Contact
Grizzly Paw Software Ltda · CNPJ 56.161.958/0001-19 · Brazil
[email protected]