Privacy Policy
1. Who is responsible for your data
The controller of your personal data is Mairis Baumanis, Latvia (business name [to be added]).
Contact for anything about your data: [contact email — to be added].
2. What data Fitner uses
Data you choose to share from Apple Health
The Fitner app asks for your permission in Apple Health and reads only what you allow. You can change this at any time in the iPhone's Settings app → Health → Data Access & Devices → Fitner. What it can read:
- Workouts: type, start and end time, duration, distance, energy burned, average and maximum heart rate, heart rate during the workout, GPS route, elevation gain, cadence, running power and stride length, indoor/outdoor, and the weather recorded at the start (temperature and humidity).
- Heart: heart rate through the day, resting heart rate, heart rate variability (HRV), cardio recovery, VO₂ max.
- Sleep: sleep sessions and their stages, and wrist temperature during sleep.
- Body and activity: weight, height, steps and blood oxygen.
- Profile: date of birth and sex, used for heart-rate zones, age-based comparisons and strength standards.
The app also reads respiratory rate, time in daylight and active energy for use on your iPhone; these are not uploaded (a workout's own calories are part of the workout).
Heart rate, sleep and the other health measurements are health data, a special category of personal data under the EU General Data Protection Regulation (GDPR). They are only uploaded after you have given your explicit consent in the app.
Data you enter
- Strength sets you log in the app: exercise name, weight, repetitions, date, and body weight.
- Settings you choose on the dashboard, such as heart-rate zones and distance units.
Data created when you use Fitner
- A random device ID and device key, created on your iPhone. They identify your data on the server — there are no user names or passwords. The server stores only a scrambled (hashed) form of the key.
- Login sessions: when you connect a browser by scanning its QR code, the server records which device the browser belongs to, its name (for example "Chrome on Mac") and when it was last used. Browsers you have connected are remembered as trusted (by a hashed browser ID), so connecting them again doesn't ask; logging one out in the app's Settings removes that.
- Your agreement to syncing: when you agreed, to which version of this policy, and when you withdrew it (by deleting your data). This is kept to show that you agreed, as the law requires.
- Security records: the time, the type of event (for example a login, a logout, a refused request, a deletion), your IP address and a shortened ID. See Security.
Fitner does not collect your name, email address, contacts or advertising identifiers, and it uses no analytics or tracking tools.
3. Why, and on what legal basis
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Health and workout data, strength sets, profile | To store your data and show it to you on the dashboard: charts, maps, records, training load, recovery and readiness estimates. | Your explicit consent — Articles 6(1)(a) and 9(2)(a). You can withdraw it at any time by deleting your data; this doesn't affect what was done before. |
| Device ID and key, login sessions | To keep each person's data separate and let only your own devices see it. | Necessary to provide the service you asked for — Article 6(1)(b). |
| Security records (IP address, events) | To protect your data: detect and stop attacks, misuse and break-in attempts. | Legitimate interest in keeping the service and your data secure — Article 6(1)(f). |
Your data is used only for these purposes. It is never sold, never used for advertising, and never used to build a profile of you for anyone else. The operator does not look at your data, except where needed to keep the service working or when you ask for help.
4. Where your data is stored
Synced data is stored on a server operated by the controller in Latvia (EU). Its disk is fully encrypted, and the data is not copied to any cloud backup service.
Your original data stays in Apple Health on your iPhone; Fitner only reads a copy. Your browser keeps a cached copy of your dashboard data so it opens quickly (see Cookies and browser storage).
5. Who else receives data
Fitner shares data only with these services, only for the stated purpose:
| Service | What it receives | When |
|---|---|---|
| Cloudflare, Inc. (USA) — secure connection to fitner.io | All traffic between your devices and fitner.io passes through Cloudflare's network, which provides the encrypted (HTTPS) connection. Cloudflare acts as a processor under its data processing agreement; transfers outside the EU rely on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. Privacy policy | Every time you use Fitner |
| MapTiler AG (Zug, Switzerland) — maps | Your IP address and the map area being shown, which can reveal roughly where a workout took place. Switzerland is recognised by the EU as giving adequate protection. Privacy policy | When you open a workout map |
| Esri, Inc. (USA) — satellite imagery | Your IP address and the map area being shown. Esri is certified under the EU–US Data Privacy Framework. Privacy statement | When you open the satellite map in Race prep |
| BRouter (brouter.de) — route planning, an open-source service whose servers are funded by FOSSGIS e.V. (Germany) | Your IP address and the coordinates of the route being planned, which may be near your home. Its own policy says these logs are kept for about two weeks, plus up to 10 days in backups. Privacy policy | Only when you plan a route |
Apple provides Apple Health and the App Store. Fitner does not send your data to Apple; Apple's own privacy policy covers what Apple does.
Data may also be disclosed if the law requires it, for example to comply with a court order.
6. How long data is kept
| Data | Kept until |
|---|---|
| Synced health and workout data, strength sets, settings | You delete it, or 30 days after your iPhone last synced, whichever comes first. If your iPhone syncs again later, it uploads your data again. |
| After you delete your data: the note that syncing is off, the record of your agreement, browser logins | 30 days, unless you turn syncing back on. |
| Your device's random ID and hashed key (no health data) | As long as Fitner runs, so no one else can take over your device's ID. |
| Browser login | 30 days after it was last used, or until you choose Disconnect. |
| QR codes for connecting a browser | Unused codes stop working after 5 minutes and are removed within a day. |
| Security records | The oldest records are deleted automatically once the log reaches its size limit (about 100 MB). |
| Data in your browser | Until you choose Clear data on the dashboard or clear this site's data in your browser. |
7. Cookies and browser storage
The fitner.io dashboard uses only what it needs to work and keep your account secure. There are no advertising, analytics or tracking cookies, and no cookies from other companies, so there is no cookie banner. It uses two cookies:
wd_sessionkeeps you logged in. It lasts 30 days from your last visit, can't be read by scripts, and is sent only over HTTPS.wd_browseris a random ID for this browser, so the app can recognise a browser you've already connected and doesn't ask again each time. It stays when you choose Disconnect, can't be read by scripts, and lasts 400 days. It contains nothing about you; fitner.io stores only a scrambled (hashed) form of it.- Local storage in your browser keeps your settings (units, theme, heart-rate zones, date range), a note that you're logged in (not the login itself), and a cached copy of your dashboard data so it loads quickly.
On a shared computer: Disconnect logs the browser out but keeps the cached data, so reconnecting is fast. To remove it as well, choose Clear data first, or clear this site's data in your browser.
8. Your rights
Under the GDPR you can:
- Get a copy of your data — use Download my data in the app's Settings or in the dashboard's menu. You get one ZIP file with everything stored on fitner.io, in JSON (a standard, machine-readable format). You can also ask by email.
- Correct it — strength sets: edit them in the app and the change syncs. Health data: the server keeps what was synced, so a value you later correct or delete in Apple Health isn't changed there automatically. Delete your data and let the app sync again (it uploads the corrected data), or ask by email.
- Delete it — use Delete my data in the app's Settings, Clear data on the dashboard, or ask by email. See What deleting removes.
- Withdraw your consent — use Delete my data: it deletes your data and turns syncing off. In Apple Health you can also turn off Fitner's access.
- Restrict or object to how your data is used, by email.
- Complain to a data protection authority. In Latvia this is the Data State Inspectorate (Datu valsts inspekcija), www.dvi.gov.lv. You can also contact the authority in your own EU country.
What deleting removes
- Deleted from fitner.io straight away: your workouts and routes, heart rate, sleep and other health data, strength sets and dashboard settings.
- Syncing turns off, so nothing is uploaded again. It restarts only when you tap Sync again in the app's Settings and agree to syncing again.
- Not touched: your data in Apple Health and the strength log in the app stay on your iPhone. Deleting the app removes the strength log.
- Browsers: a connected browser deletes its cached copy the next time it opens the dashboard.
- Kept for up to 30 days: the note that syncing is off, the record of your agreement and when you withdrew it, and browser logins — so syncing can be restarted safely. They are deleted after 30 days unless you turn syncing back on.
- Kept after that: your device's random ID and a scrambled (hashed) form of its key, so that no one else can ever take over your device's ID. They contain no health data.
Requests are answered within one month. You won't be asked to prove your identity with more information than Fitner already has; a request may be confirmed through the app or a connected browser.
9. Security
- All connections use HTTPS encryption.
- A browser can only see data after you scan its QR code with your own iPhone and confirm, and only your device's data. The app's Settings lists every connected browser, and you can log any of them out there.
- Your iPhone proves its identity with a secret key that never leaves it; the server stores only a hashed form.
- The server's disk is fully encrypted, and its files are readable only by the operator's account.
- Login attempts, new devices and uploads are limited, requests from other websites are refused, and security events are logged.
If a security breach puts your data at risk, the Data State Inspectorate will be notified within 72 hours, and you will be told without undue delay if the breach is likely to put your rights at high risk.
10. Age limit
Fitner is for people aged 16 and over. If you learn that someone younger has used Fitner, please get in touch and their data will be deleted.
11. Calculations and estimates
Fitner calculates things like heart-rate zones, training load, recovery, readiness, biological age and race predictions from your data. These are automated estimates for your own information only. They are not medical advice, and no decision with legal or similarly significant effects is made about you.
12. Changes to this policy
If this policy changes in a way that matters, you'll be told in the app or on the dashboard before the change takes effect. The effective date at the top always shows the current version.
13. Contact
Mairis Baumanis, Latvia — [contact email — to be added]