App Privacy Policy
Last updated: September 16, 2026
1. Introduction
Your health data is personal, and you should always know what happens to it. This policy explains what data the FitWoody app processes, why, where it is stored, who helps us process it and what rights you have. It applies to the FitWoody app on iPhone, iPad, Apple Watch and Mac, its widgets and complications. Our website has its own Privacy Policy.
The essentials:
FitWoody reads data from Apple Health only with your permission, and copies it to your FitWoody account so it is synced across your devices. That account is stored on our servers in the European Union.
We use your data to provide FitWoody’s features. We never sell it, never use it for advertising and never share it with data brokers.
Some summaries are written by artificial intelligence, on your device or in the cloud. When they are generated in the cloud, we send our AI provider only the relevant metrics, without your name, email or account ID.
You can delete your account and all its data at any time from Settings › User › Delete account.
2. Who is responsible for your data
The controller of your personal data is Chubby Studio S.L., Tax ID B44691418, with registered office at Calle Postas 32, 4º dcha., 01001 Vitoria-Gasteiz (Álava), Spain, and postal address Apartado de Correos 134, 01080 Vitoria-Gasteiz (Álava), Spain.
For any question about privacy or to exercise your rights, write to hello@fitwoody.camp.
3. What data we process
3.1. Apple Health data
With your permission, FitWoody uses Apple’s HealthKit to read data from the Health app. These are health data, a special category of personal data under article 9 of the GDPR. You choose which types FitWoody can access, and you can change it at any time.
FitWoody may read:
Activity: active energy, steps, walking, running, cycling and other distances, wheelchair pushes, flights climbed, exercise and stand time, and activity summaries.
Heart: heart rate, resting heart rate, heart rate variability (HRV) and heart rate recovery.
Fitness and workouts: workouts and their routes, VO₂ max, workout effort scores, cycling metrics (power, cadence and speed), running metrics and walking steadiness.
Vital signs: respiratory rate, blood oxygen saturation, blood pressure, blood glucose, body temperature and sleeping wrist temperature.
Sleep: sleep analysis, including sleep stages.
Body measurements: weight, height and body mass index.
Characteristics: date of birth, biological sex and wheelchair use.
FitWoody may write to Apple Health, only with your permission: workouts and their routes, workout effort scores, weight, height, body mass index, heart rate, VO₂ max, blood pressure, blood glucose, body temperature, blood oxygen saturation and respiratory rate.
How we use and store it. Health data is used to provide FitWoody’s features: activity, sleep and training analyses, metabolic ranges, scores, adaptive goals, widgets and summaries. It is processed on your device and copied to your FitWoody account, which is synced through our own servers at Hetzner in the European Union and stored in a Supabase database hosted in the European Union (Ireland). This is what lets you see the same data on all your devices and keep it when you change phone.
We follow Apple’s rules for HealthKit: Health data is never used for advertising, marketing or data mining, never sold, never shared with data brokers and never disclosed to third parties other than the service providers listed in section 3.5 that help us run FitWoody.
You can manage or revoke FitWoody’s access at any time in the Health app or in your iPhone’s Settings (Privacy & Security › Health › FitWoody). Revoking access stops FitWoody from reading new data; to delete the data already stored in your account, delete your account (section 8).
3.2. Workout routes (location)
FitWoody does not ask for access to your device’s location. However, if you allow it to read workout routes from Apple Health, it receives the GPS routes recorded during your outdoor workouts, for example by your Apple Watch.
Routes are stored in your FitWoody account so you can see the map of each workout on any of your devices. They are not used for any other purpose, nor to track you, and they are deleted with your account.
3.3. Account, profile and device data
Account: when you first open FitWoody we create an account identified only by a random identifier, without a name or email. If you choose Sign in with Apple, we also receive the email address you decide to share (which can be Apple’s private relay address) and, optionally, your name.
Profile: the information you add, such as first name, last name, gender, date of birth and profile photo, and your settings, such as heart-rate and power zones, goals and units.
Subscription: the plan you have, whether you are in a free trial, renewal and expiry dates, and your purchase history in FitWoody. Payments are processed by Apple; we never receive your card details.
Device and app: device model, operating system and app version, language, country or region, a device identifier assigned to FitWoody, the last time you used the app, and crash and performance reports.
Communications: your email preferences (FitWoody news and beta program) and, if you receive our emails, whether they are opened and which links are clicked.
Support: the messages you send us and, if you choose to send a bug report from the app, the diagnostic report attached to it, which includes your account identifier, subscription status and app logs. Logs can contain summaries of your metrics.
App Store campaigns: if you installed FitWoody after tapping an Apple Search Ads ad, Apple provides us with attribution information about that campaign. We use it only to measure our campaigns.
A few app settings and technical flags, such as your heart-rate zone configuration, are also saved in your private iCloud key-value storage so they follow you across your devices. This storage belongs to your Apple account and is managed by Apple.
3.4. AI-generated summaries
FitWoody Plus includes texts written with artificial intelligence: the daily status on the home screen and summaries of your sleep, your workouts and your heart analysis. They are identified in the app as AI-generated, can contain errors and are not medical advice.
On your device. When your device supports Apple Intelligence, sleep and workout summaries are generated on the device itself and no data is sent anywhere to create them.
In the cloud. The daily status is generated in the cloud whenever you are online, so it is consistent across your devices. Sleep and workout summaries are also generated in the cloud when your device cannot generate them itself, for example on older iPhones or on Apple Watch. In these cases our servers send OpenAI, as our data processor, fixed instructions and a short context with the metrics relevant to that summary: for example sleep duration compared with your goal, sleep efficiency, percentage of deep and REM sleep, recent sleep balance, workout type, time in each heart-rate zone, perceived effort, training load impact and heart rate recovery.
We never include your name, email, account identifier, date of birth or location. Even so, these metrics are health data, so this processing is covered by the same explicit consent described in section 4. OpenAI does not use data received through its API to train its models and may keep it for up to 30 days to detect abuse, after which it is deleted.
Generated summaries are saved in your account so they appear on all your devices. Daily statuses are deleted after one hour and sleep summaries after 48 hours; workout summaries are kept with the workout until you delete it or your account.
3.5. Service providers
These companies process data on our behalf as data processors, under a data processing agreement (article 28 GDPR), and may only use it to provide their service to us:
Apple is not our processor: it acts as an independent controller, under its own privacy policy, when it provides Sign in with Apple, App Store payments, iCloud, Apple Health and Apple Intelligence on your device.
Supabase
Database, sign-in and file storage (hosted in the EU, Ireland)
Account, profile, Health data, routes and AI summaries
Hetzner (PowerSync)
Our own synchronization servers (EU)
Data synced between your devices and your account
OpenAI
Cloud AI summaries (United States)
Health metrics for a summary, without name, email or account ID
RevenueCat
Subscriptions, trials and App Store campaign attribution (United States)
Account ID, name and email if shared, country, language, purchases
TelemetryDeck
Usage statistics and crash reports (Germany)
Pseudonymized account or device ID, screens used, device, language, country. No Health data
Loops
Service emails and, if you opt in, news and beta emails (United States)
Email, name, account ID, language, email preferences, app version, subscription status
4. Why we process your data and on what legal basis
To provide FitWoody (sync your data, calculate analyses, scores, ranges and goals, show widgets and generate summaries): performance of the contract you accept when using FitWoody (article 6.1.b GDPR). For health data and workout routes, your explicit consent (article 9.2.a GDPR), which you give when you allow FitWoody to access Apple Health and which you can withdraw at any time.
To manage your subscription (unlock Plus, manage trials and renewals, restore purchases and send you service emails about your trial or subscription): performance of the contract (article 6.1.b GDPR) and compliance with legal obligations, such as tax and consumer law (article 6.1.c GDPR).
To send you FitWoody news, tips and beta invitations by email: your consent (article 6.1.a GDPR and article 21 LSSI), which you can withdraw at any time.
To keep FitWoody reliable and improve it (pseudonymized usage statistics, crash and performance reports) and to measure our App Store campaigns: our legitimate interest in offering an app that works well and in knowing which campaigns are effective (article 6.1.f GDPR). These data do not include health data, and you can object at any time.
To answer your requests and support messages: performance of the contract or, if you are not a user, our legitimate interest in answering you (articles 6.1.b and 6.1.f GDPR).
To protect FitWoody, prevent fraud and defend legal claims: our legitimate interest and, where applicable, legal obligations (articles 6.1.f and 6.1.c GDPR).
You are not obliged to give us your data, but without access to Apple Health most of FitWoody’s features cannot work. If you withdraw your consent, the processing carried out before remains lawful.
5. Where your data is stored and international transfers
Your FitWoody account, including your health data and routes, is stored in the European Union: in our Supabase database (Amazon Web Services, Ireland region) and on our own synchronization servers at Hetzner (European Union).
Some providers are based in, or may access data from, the United States: OpenAI (AI summaries), RevenueCat (subscriptions), Loops (emails) and Supabase Inc. (support and maintenance of the database service). We only allow these transfers with the safeguards required by the GDPR: the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework when the provider is certified, or the Standard Contractual Clauses approved by the European Commission (article 46.2.c GDPR). You can ask us for a copy at hello@fitwoody.camp.
6. How long we keep your data
Account, profile, health data, routes and summaries: for as long as your account exists. When you delete your account, we permanently delete it and its data from our database and file storage, and ask our email provider to delete your contact. Copies in our database provider’s backups are overwritten automatically within its backup retention period.
Accounts not linked to Sign in with Apple: if you delete the app without deleting your account first, the account stays on our servers but can no longer be accessed from any device. To avoid this, delete your account from the app before uninstalling it, or write to us and we will help you locate and delete it.
AI summaries: daily statuses, one hour; sleep summaries, 48 hours; workout summaries, until you delete the workout or your account.
Email records: records of emails sent are kept for 30 days, and failed deliveries for 90 days. If you unsubscribe, we keep a record of it so we do not email you again.
Usage statistics and crash reports: for as long as they are useful to improve FitWoody; aggregated statistics that do not identify anyone may be kept longer.
Support messages: for as long as needed to resolve your request and any follow-up.
Data required by law (for example, records related to purchases): for the periods set by law, blocked and only available to the authorities or to defend claims.
7. Security
We apply technical and organizational measures appropriate to the sensitivity of health data (article 32 GDPR), including:
encrypted connections (TLS) between the app, our servers and our providers;
encryption at rest of the database in which your account is stored;
access controls at database level, so each account can only access its own data;
access to production systems restricted to the FitWoody team members who need it, all bound by a duty of confidentiality that continues after their relationship with us ends.
If a personal data breach occurs that poses a risk to you, we will notify the Spanish Data Protection Agency within 72 hours and, when the risk is high, we will also inform you.
8. Your rights
You have the right to:
Access your data and obtain a copy.
Rectify inaccurate data. You can edit your profile directly in Settings › User.
Erase your data. You can delete your account and all its data in Settings › User › Delete account.
Restrict processing in certain cases, for example while you contest the accuracy of your data.
Object to processing based on our legitimate interest, such as usage statistics or campaign measurement.
Data portability: receive the data you have given us in a structured, commonly used, machine-readable format, or ask us to send it to another controller.
Withdraw your consent at any time, as explained in section 9.
Not to be subject to decisions based solely on automated processing that produce legal effects on you or similarly significantly affect you (see section 11).
To exercise any right that you cannot exercise directly in the app, write to hello@fitwoody.camp or to our postal address. It is free. We will reply within one month, which can be extended by two more months for complex requests. If your account is not linked to Sign in with Apple, we may ask you for information from the app to confirm that the account is yours; we will only ask for identity documents if there are reasonable doubts.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es) or with the supervisory authority of the EU country where you live. If we refuse a request, in whole or in part, we will tell you why and remind you of this right.
If you live outside the European Union, you have the rights granted by the data protection law of your country, which you can exercise in the same way. For example: in the United Kingdom, the UK GDPR, with the right to complain to the Information Commissioner’s Office (ico.org.uk); in Switzerland, the Federal Act on Data Protection, before the FDPIC (edoeb.admin.ch); and in Brazil, the LGPD, before the ANPD (gov.br/anpd). For the purposes of the LGPD, our data protection contact (encarregado) can be reached at hello@fitwoody.camp. Transfers of data from these countries are protected with the mechanisms their laws recognise, such as the UK International Data Transfer Addendum to the Standard Contractual Clauses.
9. Your choices
Apple Health: change or revoke FitWoody’s access in the Health app or in Settings › Privacy & Security › Health › FitWoody.
Emails: turn “FitWoody news” and “Beta program” on or off in the app’s notification settings, or use the unsubscribe link in any email. Emails about your trial or subscription are part of the service and are sent while it is active.
Notifications: FitWoody’s notifications are generated on your device. You can turn them off in the app or in your iPhone’s Settings.
Usage statistics and campaign measurement: write to hello@fitwoody.camp to object and we will stop using your data for these purposes. You can also limit personalised ads from Apple in Settings › Privacy & Security › Apple Advertising.
Your account: delete it at any time in Settings › User › Delete account. Remember that deleting your account does not cancel an App Store subscription.
10. Children
FitWoody is not directed at children. You must be at least 14 years old to use it, or older if your country requires a higher age to consent to the processing of personal data. If you are a parent or guardian and believe that a child has used FitWoody without authorization, write to hello@fitwoody.camp and we will delete the account and its data.
11. Automated analyses and medical disclaimer
To personalize FitWoody, your data is analysed automatically to calculate scores, metabolic ranges, training load, heart-rate zones and adaptive goals. This is profiling in the sense of the GDPR, but it does not produce legal effects on you or similarly significantly affect you: it only adjusts the information and suggestions the app shows you. You can ask us for an explanation of how it works.
FitWoody is not a medical device and does not diagnose or treat any disease. See section 8 of our Terms & Conditions.
12. Cookies, tracking and similar technologies
The FitWoody app does not use cookies, does not use your device’s advertising identifier and does not track you across apps or websites of other companies, so it does not show you Apple’s App Tracking Transparency prompt.
To work, the app stores data on your device (its local database, which widgets and complications also read) and in your iCloud key-value storage (section 3.3). The RevenueCat and TelemetryDeck components included in the app use identifiers linked to your FitWoody account to manage your subscription and to produce pseudonymized usage statistics and crash reports, as explained in section 3.5.
13. Additional information for users in the United States
This section is our consumer health data privacy policy under the Washington My Health My Data Act, Nevada Senate Bill 370 and similar state laws, and it also summarises your rights under other US state privacy laws, such as those of California, where they apply to us.
Consumer health data we collect: the Apple Health data, workout routes, profile data and derived analyses described in section 3, collected from you, from Apple Health and from your devices.
Why we collect and use it: only to provide the features you request and the other purposes in section 4. We collect and use it with your consent, which you give when you allow access to Apple Health.
Who we share it with: only the service providers in section 3.5, which process it on our behalf, and authorities when the law requires it. We do not sell consumer health data or personal information, and we do not share it for targeted or cross-context behavioural advertising.
Sensitive information: we only use your health data and other sensitive personal information to provide FitWoody and for the other purposes allowed by law. We do not use it to infer characteristics about you for other purposes.
Your rights: confirm whether we collect your consumer health data, access it, correct it, obtain the list of third parties and affiliates it is shared with, withdraw your consent and have it deleted. You can exercise them in the app or at hello@fitwoody.camp. We confirm receipt within 10 business days and respond within 45 days, which we may extend once by another 45 days if we tell you why. We will never charge you more or offer you a worse service for exercising your rights.
Appeals: if we deny your request, you can appeal by replying to our answer with the word “Appeal”. We will respond to your appeal within 45 days. If you disagree with the result, you can contact your state Attorney General.
14. Changes to this policy
We will update this policy when FitWoody, our providers or the law change. If the changes are significant, for example a new purpose for your health data or a new provider that receives it, we will inform you in the app or by email before they apply and, when the law requires it, we will ask for your consent again. The date at the top shows the current version.
15. Contact
Chubby Studio S.L.
Apartado de Correos 134, 01080 Vitoria-Gasteiz (Álava), Spain
Email: hello@fitwoody.camp
Website: fitwoody.camp