About this policy
This policy explains how FitWithFriends handles information when you use the iPhone app. Account authentication, profiles, friend requests, friendships, online leagues, league scores, chat, reactions, content reports and account-level blocks use our production service. Legacy on-device leagues and personal preferences can also be stored locally. The app does not create sample opponents or public profile directories.
Apple Health activity
With your permission, FitWithFriends reads your step count, walking and running distance, and active calories from Apple Health. We use these automatic totals to show daily progress, calculate fitness-league points, and display your lifetime steps, walking/running distance and active calories on your Profile. Lifetime totals are re-read locally from Health, including today; they are not newly uploaded or shared. We save only an account-scoped tracking start date on your iPhone. For existing accounts from older versions that did not record download dates, we use the account joining day and clearly disclose it.
FitWithFriends does not add, change, or delete information in Apple Health. Raw Health records remain on your iPhone. You can change Health access at any time in the Health app or iPhone Settings. Calculated daily points, score dates and the updates generated from them are sent to leagues you join and shown to their members. In the daily-steps update, step sharing is off by default. If you choose “Share my steps”, we also store your latest automatic daily step total, its local day and time zone, and sync time for each league you join. Current league members can see this total unless either account has blocked the other. We keep only the latest shared day, not a step-history feed. Turning sharing off in Settings removes those shared step totals without changing your league points. Leaving a league, being removed, or deleting your account removes the associated shared step totals. Raw Health samples are not uploaded.
Head-to-head challenges
Sending or accepting a 1V1 challenge explicitly agrees to share the battle’s automatic Health-derived step, distance, calorie or FWF-point totals with that opponent. We store participant IDs, invitations, the agreed time zone and windows, per-round aggregate totals, sync times and results in our protected service. Only the participants can read a battle; both-way blocks hide it and cancel open battles. Missing Health data is not treated as zero or a defeat. Cancel a battle to stop new progress sharing. Results support your visible 1V1 Win statistic. Account deletion removes your associated challenges and aggregates. Raw Health records and manually entered activity are never uploaded for these challenges.
Information stored on your device
The app may locally store your display name, username, profile photo, personal goal, visual theme, leagues, messages, challenges, achievements and setup status. Local information may be removed when you delete the app, depending on your device and backup settings.
Photos
Selected photos are downsampled using Apple’s system photo picker; we do not require broad access to your photo library. In the profile-sharing update, your profile photo and selected colour or theme are synchronized with your account. Profile photos are held in private Supabase Storage, not at public image links. Your friends, people with a pending friend request, and current members of a league you share can view your photo and theme unless either account has blocked the other. Username search alone does not grant access to photos. Removing your photo stops it being shared; account deletion removes your uploaded profile photos. Hosts can now upload or change online league pictures in private Storage, visible only to current members. Retained on-device league pictures remain local.
Purchases
Optional Pro subscriptions are processed by Apple. RevenueCat helps the app determine whether Pro access is active. Apple and RevenueCat may process purchase identifiers and subscription status under their own privacy policies. FitWithFriends does not receive your full payment-card details. The app links purchases to a private, random account identifier so eligible purchases can be associated with your account. Our secure backend verifies active Pro status with RevenueCat and keeps a short-lived status cache. A gold Pro member label is visible to unblocked league co-members and related friends; your purchase identifier, receipts and billing information are never included in that label.
Accounts and community safety
The updated app requires an account. New accounts use Sign in with Apple. We process the authentication identifier, email address and name supplied by Apple (which may supply a private relay address), plus your display name and unique username. Existing email accounts can still sign in; passwords are handled by our authentication provider and are not readable by FitWithFriends. When you report a message, we retain the report, a limited content excerpt, relevant identifiers, and review status so the moderation team can investigate. Account-level blocks are also stored so your safety choice can persist. Online leagues store their name, host, invite code, membership, season and goals. League members can see standings, shared chat and emoji reactions. Hosts can moderate posts and remove members; leaving or removal revokes access to that league.
Optional iPhone alerts
If you enable alerts, we store your Apple push device token, account association, notification preference, and delivery environment. Real friend requests, accepted requests, league nudges, and overtakes can create alert records. Apple receives the notification payload for delivery; it can include a display name, league name, and event identifiers, but not raw Health data. Alert queue records are removed after seven days. You can turn alerts off in the app and in iPhone Settings. Delivery requires the server push connection to be configured and is not guaranteed.
Service providers and retention
Supabase provides authentication, database, private photo storage and secure server functions. RevenueCat provides subscription entitlement management, and Apple processes purchases and Health permissions. We retain account and safety records while your account is active or as reasonably needed for security, legal obligations, and dispute handling.
Tracking and advertising
FitWithFriends does not display third-party advertising, does not sell personal information, and does not ask for permission to track you across other companies’ apps or websites.
Retention, children and security
Locally stored information remains until you remove it through the app or delete the app. Production account and safety records remain until account deletion or until no longer reasonably needed for safety or legal obligations. We use platform security features and minimise the information required. FitWithFriends is not directed to children under 13.
Your choices
You can decline Health access and photo selection, revoke Health permissions, restore eligible purchases, remove or block friends, and report objectionable content. Profile → Settings → Delete Account & Data permanently deletes your production account and associated records, then clears locally stored app data.
Contact
For privacy questions, deletion assistance, or a moderation appeal, visit our support page.