Privacy policy

The short version

FitPath stores the entries you make in a private account that only you can access. We don't sell your data, we don't share your health entries with advertisers, and the app contains no third-party advertising or tracking SDKs. You can permanently delete your account and everything in it, in the app, at any time.

What FitPath stores

Your account: email address and password (handled by our authentication provider), or your Apple ID identity if you use Sign in with Apple, plus the display name you choose.

Your entries: peptides, dose schedules, dose history, inventory, injection-site logs, goals, favorites, and private notes. These exist because you typed them — nothing is imported from anywhere else.

First-party product analytics: sign-in and app-open events, and when banners or resources are shown or tapped. These carry your account id, stay on our own infrastructure, and are used only to understand which content is useful.

Startup diagnostics: if the app fails to start properly, it records a technical trail of the startup steps (timings and error fingerprints — never your entries) so we can find and fix the problem.

What FitPath does NOT collect

No location. No contacts. No photos. No microphone or camera access. No browsing history. No advertising identifiers (we never show the App Tracking Transparency prompt because we do no tracking).

No third-party analytics, advertising, or crash-reporting SDKs are embedded in the app — the only services your data touches are the ones that run FitPath itself.

Where your data lives, and how it's protected

Your data is stored with Supabase, our database and authentication provider, in a database protected by row-level security: every entry is readable by your account and by no other user. Data is encrypted in transit (TLS) and at rest.

Your session token is kept on your device. Dose reminders are local notifications scheduled on the device itself — reminder contents are not sent to a server.

Administrative access to the database is limited to operating the service (for example, investigating a problem you report) and is never used to browse entries.

Sign in with Apple

If you use Sign in with Apple, we receive the identity Apple provides — which may be a private relay email address if you choose to hide yours. We treat it exactly like any other account email.

Permissions

The only permission FitPath asks for is notifications, so dose reminders can appear. It's optional — declining it disables reminders and nothing else.

Referrals and partners

If you sign up with a referral or invite code, we record which partner or friend referred you so we can credit them. Partners see aggregate counts and masked identifiers (like a•••x@example.com) — never your health entries. Friend invites work the same way in reverse: your code shows the people who joined with it, masked.

The myfitpath.app website

The website sets a small number of first-party cookies: a one-year attribution cookie when you arrive through a partner link (so their promotions follow your visit), and preference cookies that remember things like dismissed cards. There are no third-party ad networks or cross-site trackers.

Promotional graphics on the site are our own or our partners', served from our own infrastructure. We count how often they are shown and clicked; those counts are not tied to your browsing identity.

Data retention and deletion

Your data is retained for as long as your account exists. Settings → Danger zone → Delete account permanently removes your account and every entry attached to it — immediately, and it cannot be undone.

You can also email us to request deletion or a copy of your data, and we'll handle it for you.

Children

FitPath is rated 12+ on the App Store and is not directed at children under 13. We do not knowingly collect personal information from children; if you believe a child has created an account, contact us and we will delete it.

What FitPath is not

FitPath is a tracking and education tool. It does not provide medical advice, and your entries are never reviewed by a person except as required to operate the service or by law. Always consult a qualified healthcare professional about your health decisions.

Changes to this policy

If our practices change, we'll update this page and the date below before the change takes effect. Meaningful changes will also be noted in the app's release notes.

Contact

Questions about this policy, or any privacy request: support@myfitpath.app.