App Privacy Policy
Last updated: October 22, 2025
1. Introduction
Privacy is a fundamental human right. That’s why we designed FitWoody to respect your privacy, your intimacy, and your data. Your data is yours, and with FitWoody you stay in control at all times.
This document explains what information we collect, how we use it, how we comply with privacy regulations, and what rights you have regarding your personal data.
2. Who are we?
FitWoody is developed and operated by Chubby Studio S.L., Tax ID B44691418, located in Spain at C/ Apartado 134, 01080 Vitoria-Gasteiz (Álava).
For data-protection purposes, Chubby Studio S.L. is the Data Controller.
Contact: hello@fitwoody.camp
3. What data do we process about you?
3.1. Apple Health Data
FitWoody uses the APIs provided by Apple to read and/or write the data that is found in the Apple Health application (https://www.apple.com/lae/privacy/) on your device. Specifically, for proper functioning, FitWoody requires reading the following:
FitWoody may read:
Activity energy (burned calories)
Exercise minutes and stand minutes
Steps and floors climbed
Walking, running, cycling, wheelchair and snow sports distance
VO₂ max (aerobic capacity)
Heart rate, resting heart rate, and heart rate variability (HRV)
Respiratory rate, blood oxygen saturation (SpO₂)
Wrist temperature and body temperature
Sleep analysis (core, deep and REM stages)
Weight and height
Body-mass index (derived)
Date of birth, biological sex, and wheelchair status
Workouts and routes (including cycling power and speed)
FitWoody may write:
Workouts and workout routes
Weight and height
Processing and Storage
Health data are accessed locally on your device via HealthKit APIs.
They are used only to provide activity, sleep, and metabolic analyses, readiness scores, and related FitWoody features.
Data are not uploaded, shared, or sold to any advertising or third-party service.
When cloud processing is required, data are pseudonymized and aggregated before leaving the device. Identifiers such as name, email, or Apple Health IDs are removed.
Some features use on-device or private-cloud Foundation Models (LLMs) to generate plain-language summaries or motivational text. These models never receive raw Health data — only de-identified numeric summaries or contextual insights (for example: “user had a restful night” instead of precise metrics).
No Health data are used for profiling, marketing, or advertising.
You can manage or revoke every permission anytime in Settings → Health → Data Access & Devices → FitWoody.
FitWoody fully complies with Apple’s HealthKit Policy and App Store Review Guidelines 5.1.3, ensuring that your body data remain private, secure, and under your control.
Apple Health data will only be used to provide daily activity, sleep, or exercise services related to the App. In any case, they will not be used for marketing, advertising, or data mining based on usage, even by third parties.
FitWoody cannot read and/or write to Apple Health without your express consent. The application accesses your health data locally, and they are never stored permanently or temporarily in FitWoody. All data is processed locally on your device and is not sent to any own or third-party servers.
You can find more information about Apple Health at the following link: https://support.apple.com/es-es/guide/iphone/iphbb8259c61/16.0/ios/16.0
3.2. Location Data
If you view and/or log your outdoor workouts with FitWoody, we may use your location data to show you a map with the route of your training.
FitWoody cannot access your location data without your express consent. The application accesses your location data locally during the workout and then stores them in Apple Health. It can access them whenever the user gives permission, as described in point 3.2.
The processing of location data is done locally and is not transmitted to any proprietary or third-party servers. In any case, they will not be used for marketing, advertising, or data mining based on usage, even by third parties.
3.3. Account and Identification Data
FitWoody uses a minimal account system to personalize your experience and manage notifications.
Sign in with Apple: the only authentication method. FitWoody receives the email address and (optionally) the name you choose to share.
Stored information: name and email are securely stored on Supabase (EU region) to identify your account and link push/email preferences.
Notifications and marketing: you may opt-in to receive motivational push notifications or marketing emails. Consent is required and can be withdrawn anytime from Settings.
This information is used solely to operate your account and send chosen communications — never for sale or targeted advertising.
3.4 Technical and Usage Data
To improve stability and performance, FitWoody collects anonymous usage data through the following services:
All analytics are aggregated and non-identifiable.
Service | Purpose | Data Handled | Privacy Policy |
|---|---|---|---|
TelemetryDeck | Anonymous analytics (screen views, feature use) | Randomized IDs only, no personal or Health data | |
RevenueCat | Subscription and trial management | Purchase identifiers from Apple only | |
Customer.io | Transactional & marketing emails (if opt-in) | Name and email only | |
Supabase | Database & authentication backend | Account data (name, email) encrypted in EU |
4. Principles Related to Processing According to the General Data Protection Regulation (GDPR)
At Chubby Studio S.L., we are clear that the most important thing is the privacy of FitWoody users. Therefore, from the beginning, we have conceived and developed it taking into account compliance with the principles required by the General Data Protection Regulation. But how do we comply with these principles? We explain it below:
Principle of lawfulness, loyalty, and transparency: through this privacy policy, we offer detailed and transparent information about the processing we do of the personal data of FitWoody users, always based on the existence of a legal basis that legitimizes the processing of personal data.
Principle of purpose limitation: as we have previously pointed out, we do not collect personal data from FitWoody users as these are stored only on their own devices. We only use anonymous data from users for analytical and statistical purposes, in order to detect areas for improvement in the application, but since they are anonymous, we cannot identify any user, which means that we do not actually process personal data from users.
Principle of data minimization: as we have said in the previous paragraph, we respect this principle of data minimization to the extent that, unlike other applications, we do not process any personal data of FitWoody users. The only assumption of processing is regarding anonymous usage data of the application.
Principle of accuracy: we do not consider this principle applicable to us since, by not processing personal data from users, obviously, we cannot keep accurate and up-to-date data that is not processed.
Principle of limitation of the retention period: this principle, which requires that personal data not be kept in a way that allows the identification of the interested parties for no longer than necessary for the purposes of processing personal data, may be kept for longer periods as long as they are processed exclusively for purposes of public interest archiving, scientific or historical research purposes or statistical purposes. We do not process personal data from FitWoody users; we only have anonymized data for analytical purposes to detect areas of improvement, keeping them only during the period necessary to analyze them and, if applicable, implement them, subsequently proceeding to their deletion.
Principle of integrity and confidentiality: at Chubby Studio S.L., we apply appropriate technical and organizational measures to ensure adequate security of personal data, including protection against unauthorized or unlawful processing and against loss, destruction, or accidental damage. To determine the security measures we apply, we conduct risk assessments, which we review periodically. Likewise, we guarantee the confidentiality of our information to which all people and third parties who, in one way or another, provide us services, signing the corresponding confidentiality contract.
Principle of proactive responsibility: in addition to applying technical and organizational security measures, we document and review them to be able to guarantee and accredit that the processing we do complies with the requirements of the General Data Protection Regulation.
5. Data Retention
Account data (name and email) are retained only while your FitWoody account is active.
You can delete your account and all related data at any time via the app or by emailing hello@fitwoody.camp.
Aggregated anonymous analytics may be kept longer for statistical purposes.
6. Security
We protect your data with encryption (TLS 1.3 in transit, AES-256 at rest) and strict access controls.
All team members with access operate under signed confidentiality agreements.
FitWoody complies with Apple Developer security requirements and undergoes regular internal audits.
Your Rights
You may at any time:
Request access, correction, or deletion of your data.
Withdraw consent for push or email marketing.
Request data portability.
File a complaint with the Spanish Data Protection Agency (AEPD).
To exercise these rights, contact us at hello@fitwoody.camp or by post to Chubby Studio S.L., C/ Apartado 134, 01080 Vitoria-Gasteiz (Álava).
8. Information on the Processing of Personal Data
In accordance with the provisions of the General Data Protection Regulation and Organic Law 3/2018, of December 5, on Personal Data Protection and the Guarantee of Digital Rights, we inform you of the following issues regarding the treatment (or lack thereof) we apply to the personal data of FitWoody users:
Data Controller: Chubby Studio S.L., with tax identification number B44691418, and address at C/ Apartado 134, 01080 Vitoria-Gasteiz (Álava).
Personal Data Collected: as previously indicated, Chubby Studio S.L. does not collect personal data from FitWoody users; we only process anonymous and random ID data, not linked to the user, but rather related to the device ID and usage data, interaction with FitWoody, all for analytical purposes aimed at detecting and implementing improvements.
Purpose of Processing: as we just mentioned, the only data we process from FitWoody users are not related to them but are completely anonymous and used solely for the purpose of analyzing the use of the application to detect and implement improvements in it.
Legitimization of Processing: the legal basis that legitimizes the processing of the previously indicated anonymous data is that it is necessary to satisfy our legitimate interests in improving the functionality, features, and performance of FitWoody.
Data Recipients: personal data from FitWoody users are not communicated to any third party, as we do not have access to them.
In any case, for some matters, we use third-party services that act as data processors, with whom we have signed the corresponding data processing contract in accordance with the provisions of Article 28.3 of the GDPR.
International Data Transfers: we inform you that we do not make international transfers of personal data.
Data Retention Period: we only retain anonymous user data for the period necessary to analyze and, if applicable, implement issues and functionalities that can improve FitWoody, after which they will be deleted.
Rights of the Interested Party Regarding the Processing of Their Data: you have all the information about this in the section «What rights do you have regarding the processing of your personal data?»
Complaint to the Control Authority: you have all the information about this in the section «What rights do you have regarding the processing of your personal data?»
9. What rights do you have regarding the processing of your personal data?
Right of access: In order to know and verify the legality of the processing, you can request confirmation at any time as to whether Chubby Studio S.L. is processing your personal data, and if so, we will inform you, among other things, about the data we are processing, its purpose, origin, expected retention period, and, if applicable, recipients or categories of recipients.
Right to rectification: This right acknowledges the possibility to request the rectification of personal data that is inaccurate or completion of those that are incomplete, including through an additional statement. In such a case, you must indicate in your request which data you refer to and the correction to be made, if necessary, providing supporting documentation for the inaccuracy or incomplete nature of the data being processed. However, since we do not have or process your personal data, this is a right that we cannot address. You can rectify or modify your personal data in FitWoody yourself.
Right to erasure (“right to be forgotten”): You can request that your personal data be erased and cease to be processed if they are no longer necessary for the purposes for which they were collected or otherwise processed, you withdraw your consent, they have been processed unlawfully, or they must be erased to comply with a legal obligation.
In this case, the same applies as we do not have access to your personal data and cannot delete them, but you can do so in FitWoody and even delete the application from your device.
Right to restriction of processing: In this case, Chubby Studio S.L. will only retain your personal data for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of significant public interest. Here too, as we do not have your personal data, we cannot comply with this right, since the data are on your device; we have no ability to limit their processing.
Right to data portability: This right allows you to request that we provide you or another controller you indicate with your personal data in a structured, commonly used, and machine-readable format. Again, we cannot provide any data because we do not have access to them, but you can download or export them to other services yourself.
Right to object: In this case, you have the right to have us cease processing your personal data as you indicate unless we have to continue processing them for compelling legitimate reasons or for the establishment, exercise, or defense of potential claims. However, we also cannot comply with a request of this type because we do not have your data. That said, if you no longer wish to use the application, you can delete your data and even remove it from your device.
How to exercise your data protection rights? To exercise your rights, you must send us a written request, indicating the right you wish to exercise, to Chubby Studio S.L., at C/ Apartado 134, 01080 Vitoria-Gasteiz (Álava) or by sending an email to hello@fitwoody.camp, always including a photocopy of your ID.
Chubby Studio S.L. will respond to all requests within the deadlines and conditions required by current regulations on personal data protection.
In any case, if you believe that we have not adequately processed your personal data or have not properly addressed the exercise of your data protection rights, you can file a complaint with the Spanish Data Protection Agency, either through its electronic headquarters or at its address, Jorge Juan Street, No. 6, Zip Code 28001, Madrid.
You can find more information about data protection rights and complaints to this Control Authority at www.aepd.es.
10. Cookies and other similar technologies
As the privacy of FitWoody users is very important to us, we do not use cookies or any other user activity tracking technology that collects personal data about the user in the application.
However, as we pointed out in the third clause, we use the services of TelemetryDeck and RevenueCat to analyze, anonymously, the use of the application to identify and implement improvements in FitWoody.
11. Changes to the Privacy Policy
We continually strive to improve FitWoody to provide you with the best user experience. Therefore, if these changes affect your privacy, we will have to modify this Privacy Policy. The same applies if legislative changes occur.
Therefore, if we change this Privacy Policy, we will notify you through our website and in the application itself. In any case, at the beginning of these terms, we indicate the date of the last version that is in effect and the date of its publication.
12. Applicable Regulations
The terms of this Privacy Policy are governed by the European data protection regulations that apply to us, specifically, Regulation (EU) 2016/679 of the European Parliament and of the Council, dated April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
13. We Resolve Your Doubts
Chubby Studio S.L.
C/ Apartado 134, 01080 Vitoria-Gasteiz (Álava)
Email: hello@fitwoody.camp
Website: https://fitwoody.camp
