Privacy Policy | Fit & You

1. Who we are

Fit & You (“we”) operates this website and the Fit & You service. This policy explains how we collect, use and protect your personal data.

2. Data we collect

We collect and store: your email address and password (hashed); the profile data you enter (name, gender, date of birth, height, weight, goal weight, activity level); optional photos you upload for body fat estimation; and generated meal plans. We also store technical data such as IP address for security (e.g. rate limiting) and session information.

3. How we use your data

Your data is used to create and manage your account, to generate personalised meal plans, and to provide the body fat estimate when you upload a photo. Photos are processed via a third-party AI service (OpenAI) solely to produce the estimate. We do not sell your data. We may send you transactional emails (e.g. registration confirmation, password reset) via our email provider (Mailgun).

4. Data retention

We keep your account and profile data until you delete your account or ask us to delete it. Password reset and email verification tokens expire after a short period and are then removed.

5. Your rights

You can access, correct or delete your data from your dashboard. You may request a copy of your data or its deletion by contacting us. If you are in the EEA/UK you have additional rights under applicable data protection laws (e.g. right to object, to restrict processing, to data portability, to lodge a complaint with a supervisory authority).

6. Security

We use industry-standard measures (e.g. hashed passwords, secure sessions, HTTPS) to protect your data. No method of transmission or storage is 100% secure; we encourage you to use a strong password and keep it confidential.

7. Changes

We may update this policy from time to time. The “Last updated” date at the top will change. Continued use of the service after changes constitutes acceptance of the updated policy.

8. Contact

For privacy-related questions or requests, contact us at the address or email you use for this service.