Privacy Policy

Personal Data We Collect

• Account and identity data: user ID, email address, optional phone number, username, display name, avatar, bio, date of birth, gender, authentication provider, account dates and sign-in metadata. If you use Apple, Google or Facebook sign-in, we receive the information that provider makes available according to your settings, such as name, email and profile image.
• Profile and community data: friends, requests, blocks, league membership and roles, leaderboard position, verification status, streaks, FitScore and step totals that are made visible under your profile settings.
• Health, fitness and activity data: depending on the platform and permissions you grant, steps, workouts and exercise sessions, workout type, start time, duration, calories, distance, whether an entry was manual, source app/package, active energy, heart rate, resting heart rate, heart-rate variability (HRV), sleep (including sleep stages such as REM, deep and core where your device records them), respiratory rate, sleeping wrist or skin temperature, blood oxygen (SpO₂), VO2 max, stand or move minutes and exercise minutes. From these inputs we also create daily summaries and derived wellness scores such as FitScore, SleepScore, Recovery, Energy, Immune Resilience, Load Forecast, Fitness Age, Heart Health estimates, bedtime suggestions, Fitcoin earnings, streaks and challenge evidence. All scores and insights are wellness estimates only, not medical advice, diagnosis or treatment.
• Manual wellness inputs: optional daily muscle soreness check-ins (Low/Medium/High), which are stored on your device; the current level may be included in AI coaching requests described below. Optional daily mood check-ins (Great/Good/Okay/Low/Rough) are stored securely with your Fitcoin account and shown on Plan so you can review patterns; we never share or sell this mood data with any third parties. Mood is not read from or written to Apple Health or Health Connect and is not used for advertising. If you use cycle tracking, the period start and end dates you log are stored with your account and used only to estimate your cycle day and next period from your own history. Cycle logs are not read from or written to Apple Health or Health Connect, are not sold and are not used for advertising.
• Run and location data: when you actively track a run, precise GPS route coordinates, timestamps, altitude, speed, distance, pace and associated workout information may be stored with your account. If you use nearby rewards, we may process your current location, distance from a partner and the location used to validate an in-store redemption. A league location you choose to publish may be visible to league members or other users.
• Content and communications: Stories, photos, videos, run photos, league images and posts, comments, replies, reactions, direct messages, story replies, feedback, support messages, website contact submissions, newsletter details and messages you submit to the in-app AI coach chat (processed as described in the AI coaching section; the transcript itself stays on your device). We store related timestamps, audience, view markers and interaction counts.
• Rewards and transaction data: Fitcoin balance and ledger entries, referral codes and status, challenge and raffle participation, league prizes, offer views, redemptions, allocated promo codes, partner/offer identifiers, amounts spent at a partner store or on a partner campaign, subscription status and purchase confirmations. Apple and Google process payment-card details; we do not receive your full card number.
• Safety and moderation data: user reports and automated Story moderation outcomes (allow / review / block), reasons and notes, involved account/content identifiers, blocks, moderation actions, anti-fraud signals and records needed to investigate misuse or disputes. Hard blocks may create a moderation record even when the image was never uploaded.
• Device and technical data: device and app identifiers, advertising identifiers where available, push token, IP address, device model, operating system, app version, language, time zone, network and diagnostic information, crash reports, security attestation and rate-limit signals.
• Usage and marketing data: screens and features used, events such as registration or redemption, ad impressions and interactions, attribution information, website visits, cookie choices, analytics metrics and, after website consent, heatmaps or session-replay data on eligible public pages.
• Partner and business data: if you apply for or manage a Fitcoin partner account, business and contact names, work contact details, role, business address and location, branding, offers, redemption and campaign information.

Where Data Comes From

We receive data directly from you; from your device and the app; from Apple HealthKit or Google Health Connect when authorised; from Google Health / Fit APIs on devices that cannot run Health Connect when you choose that fallback; from WHOOP or Oura if you choose to connect those accounts to Fitcoin; from GPS and device sensors when you start location features; from Apple, Google, Facebook and Firebase authentication; from app stores and reward partners; from other users who interact with or report your account; and from analytics, advertising, security and support providers.

Account identifiers and basic profile information are required to create and operate an account. Health, location, camera, photo-library, notification, advertising and optional profile permissions are not statutory requirements. If you do not provide optional data, the relevant feature may not work, but you can still use parts of Fitcoin that do not require it.

Why We Use Data and Our Lawful Bases

• Contract (UK GDPR Article 6(1)(b)): to create and secure your account; calculate and display FitScore and Fitcoin; sync activity; provide run tracking, challenges, leagues, messaging, social features, rewards, redemptions and subscriptions; and respond to service requests.
• Consent (Article 6(1)(a)): for optional health access, certain location uses, push notifications, optional marketing, advertising identifiers, and non-essential website cookies or similar technologies where consent is required. You may withdraw consent at any time, although prior lawful processing remains valid.
• Explicit consent for health data (Article 9(2)(a)): health data may be special-category data. Where it is, we process it for the specific fitness scoring, activity, insight, AI coaching and reward purposes explained when access is requested. You can withdraw access in Apple Health, Health Connect or device settings and ask us to erase server-held health data.
• Legitimate interests (Article 6(1)(f)): to secure and improve Fitcoin, diagnose faults, maintain service integrity, prevent fraud and reward abuse, moderate content, protect users, understand aggregate feature performance, operate partner campaigns, account to partnership contractors, and establish or defend legal claims. Our interests are operating a safe, reliable and sustainable service. We balance these interests against your rights and apply access controls, minimisation and opt-outs where appropriate.
• Legal obligation (Article 6(1)(c)): to keep records, respond to lawful requests, comply with tax, accounting, consumer, data-protection and safety obligations, and report matters where the law requires it.
• Legal claims and substantial public-interest conditions: where moderation or safety records include special-category information that you or another person supplies, we process only where an applicable Article 9 condition and any Data Protection Act 2018 safeguard permits it, such as explicit consent, manifestly public information or establishing, exercising or defending legal claims.

Sleep by Fitcoin and Pedometer by Fitcoin

Sleep by Fitcoin and Pedometer are companion iPhone apps from FITCOIN LTD. They use the same authentication, friends graph and Fitcoin wallet as the main Fitcoin app when you sign in with the same method. They do not include AI coaching, Stories, leagues, challenges or the full Fitcoin health suite.

• Sleep by Fitcoin reads sleep analysis from Apple Health when you allow it, including stages such as REM, deep, core and awake where your device records them. It does not write to Apple Health and does not use location. If you track a night on the phone without a wearable, Sleep by Fitcoin uses motion and the microphone to estimate restlessness and stages; audio is measured on this device and is not saved. SleepScore and related night summaries are wellness estimates calculated from that sleep data. Sleep by Fitcoin can show last night’s SleepScore to your Fitcoin friends and let you send a reaction. Sleep by Fitcoin can display your Fitcoin balance; it does not mint Fitcoin from sleep.
• Pedometer by Fitcoin reads step count, active energy and heart rate from Apple Health when you allow it. If you start a live walk or run, it may use GPS and motion to record the route, distance, pace and related stats. Daily step totals do not require GPS. Pedometer can show today’s steps and streaks to Fitcoin friends and uses the same Fitcoin wallet as the main app.
• Manage each app’s Health access separately in Apple Settings → Apps → Health → Data Access & Devices, then Fitcoin, Sleep by Fitcoin or Pedometer.

Health and Fitness Data

• We request only the HealthKit or Health Connect categories shown in the permission flow for that app. For the main Fitcoin app, current categories can include steps, workouts, active energy, heart rate, resting heart rate, heart-rate variability, sleep (including stages), respiratory rate, sleeping wrist or skin temperature, blood oxygen (SpO₂), VO2 max, stand or move minutes and exercise minutes. Sleep by Fitcoin requests sleep analysis from HealthKit. Phone tracking (no wearable) also uses motion and the microphone on the device. Pedometer by Fitcoin requests step count, active energy and heart rate. You decide which categories to allow and can change them later in Apple Settings → Apps → Health → Data Access & Devices for the relevant app, or in Health Connect / Google Health settings on Android.
• Health data is used to provide fitness scoring, activity history, challenge verification, streaks, wellness insights, AI coaching and rewards. It is not sold, used for targeted advertising, shared with data brokers, used for credit or insurance decisions, or disclosed to reward partners.
• Most wellness scores, including SleepScore, Recovery, Energy, Immune Resilience, Load Forecast and Fitness Age, are calculated on your device from your health data and your own personal baselines. If you use AI coaching or insight features, selected metrics are sent to our servers as described in the AI coaching section below.
• If you connect a WHOOP or Oura account, we receive relevant metrics (such as sleep, HRV, resting heart rate, respiratory rate and temperature readings) from that provider through a connection you authorise, and use them to fill gaps in the same features. You can disconnect at any time in the app or with the provider.
• We do not copy your entire Apple Health or Health Connect database. We do store selected records and summaries needed for Fitcoin features. These can include daily steps and workout minutes, workout type/time/duration/calories/distance/source, challenge evidence, derived scores and, on iOS where available, daily resting heart rate and HRV summaries. Where the permission and platform allow it, initial sync may include relevant historical activity from before you created your Fitcoin account.
• All scores, insights, forecasts and coaching produced by Fitcoin are wellness estimates for general fitness purposes only. They are not medical advice, diagnosis or treatment and should not be relied on for health decisions. Speak to a qualified professional about any medical concern.
• Revoking device permission stops future collection from that source but does not automatically erase data already stored by Fitcoin. You can request erasure using the rights section below.

Location and Run Tracking

Precise location is processed only when you enable a location feature. During an actively tracked run in Fitcoin, or a live walk or run in Pedometer, location may continue in the background so the route remains accurate while the screen is locked or another app is open. Route coordinates and associated stats are stored so you can view history and receive activity credit. Depending on the current sharing controls, a session and its route may also be available to confirmed friends. Nearby rewards in the main Fitcoin app use location to show relevant partners and may store the redemption location and distance for validation, billing and fraud prevention. Sleep by Fitcoin does not use location. You can stop collection by ending the session, disabling the feature or changing system permissions.

Social Features, Content and Visibility

• Your username, avatar and bio may be visible to other Fitcoin members. Depending on your settings and which app they use, members may also see FitScore, steps, streak, last-night SleepScore, league position and activity.
• The Private profile setting hides selected statistics from non-friends but does not hide your username, avatar, bio or content posted to a shared league. It cannot undo information another person has already seen or saved.
• Stories are intended for friends and expire after about 24 hours. Story owners may see view information. League posts and comments are visible to the audience shown in the app and may be removed by authors, league owners or moderators where controls are available.
• Direct messages are visible to the participants, subject to restricted access by authorised personnel or systems for safety, support, legal compliance and abuse prevention. Messages are not end-to-end encrypted.
• Shared links contain identifiers needed to open the relevant league or post. Anyone who receives a valid link may be able to reach its destination, subject to account and membership controls.

Automated Calculations and Decisions

Fitcoin automatically converts activity inputs into FitScore, Fitcoin, streaks, challenge progress, league rankings, league prizes and reward eligibility using rules in the service. It also calculates wellness scores such as SleepScore, Recovery, Energy, Immune Resilience, Load Forecast and Fitness Age from your health inputs and personal baselines. Inputs can include steps, workout type and duration, sleep, heart metrics, activity dates, challenge conditions and anti-fraud checks. These outputs affect in-app status and rewards but are not intended to produce legal or similarly significant effects such as decisions about employment, insurance or credit, and the wellness scores are estimates rather than medical assessments. If you believe an automated result is wrong, contact us so we can review it.

AI Coaching, Insights and Coach Chat

Fitcoin includes AI features: daily coaching, a coach chat, advanced insight text for sleep, energy, recovery, activity, calories and immune resilience, and automated safety checks on Story images before they are posted. When you use coaching or insight features, the app sends relevant health-derived metrics from your device to Fitcoin's servers (www.fitcoin.co), which pass them to OpenAI to generate the response. Depending on the feature, these metrics can include your daily scores (FitScore, SleepScore, Energy, Recovery, Immune Resilience), steps, sleep hours, HRV and resting heart rate compared with your personal baselines, training-load ratios, workout summaries, your soreness check-in level and suggested bedtime or wake times. When you post an image Story, a compressed preview of that image is sent through Fitcoin's servers to OpenAI for a short safety classification before the Story is stored. The check looks for clear violations such as pornography, full nudity, graphic violence, hate or scam content; ordinary fitness and physique photos (for example shirtless gym photos or bikini / sportswear progress pics) are intended to be allowed. The model returns an allow, review or block decision. A block stops the upload; a review may store the Story hidden pending human moderation. Fitcoin does not use Story images to train models. For video Stories, Fitcoin samples a small number of frames (typically start, middle and end) and sends those stills for the same safety classification — not the full video file. This means health-derived data leaves your device when you use AI coaching features, and Story image or video-frame previews leave your device when you post a Story.

• In coach chat, the text you type is also sent through Fitcoin's server to OpenAI. Do not submit information you would not want processed by an AI provider, especially medical records, passwords, payment details or another person's confidential information.
• OpenAI acts as a processor for these requests. Under its API terms, OpenAI does not use API inputs or outputs to train its models, but may retain them for a limited period for abuse monitoring and service security.
• Coach chat messages are stored only on your device and are cleared daily; we do not save your chat transcript to your cloud account. Generated insight and coaching text is cached on your device so it does not need to be re-requested; you can clear these caches in Settings.
• To prevent abuse, we keep a per-account daily usage counter for AI requests (a count per day, not the content of your requests) on our servers. Some AI features require a Fitcoin Premium subscription.
• AI coaching and insights are informational wellness guidance only. They can be inaccurate and are not medical advice, diagnosis or treatment.

Advertising, Analytics, Cookies and Affiliate Links

• The apps may use Google AdMob to serve and measure ads. Depending on your platform, region and choices, Google may process an Android Advertising ID, IDFA, IP address, device/app data, approximate location inferred from IP, ad interactions and anti-fraud signals. Health data is not supplied for advertising.
• Firebase Analytics and Crashlytics help us understand app use, registrations, performance and crashes. Meta App Events may support login and campaign measurement where configured and permitted.
• On fitcoin.co, Google Analytics operates under the consent state communicated by our banner. Microsoft Clarity, Impact.com and other affiliate or advertising tags are treated as non-essential and should load only after acceptance. Clarity may provide heatmaps, behavioural metrics and session replay on eligible public pages; sensitive account, authentication, dashboard, admin and feedback areas are excluded from replay.
• Affiliate links may contain identifiers showing that a visit or purchase came from Fitcoin. Providers such as Impact.com or Awin may set or read cookies and receive device, click, referral and transaction-attribution data under their own notices. Partner offer cards in the app (for example, fitness tracker partners such as Ultrahuman) open the partner's website in your browser; the link includes campaign parameters showing the visit came from Fitcoin but no personal or health data.
• You can accept or reject non-essential website technologies through the banner. The choice is stored in local storage. You can clear site data in your browser to reset it. Device ad controls and, on iOS, App Tracking Transparency settings can be changed in system settings.

Who Receives Data

We do not sell personal data. We disclose only what is reasonably necessary to:

• Cloud and app providers: Google Firebase for authentication, databases, storage, cloud functions, messaging, analytics, crash reporting and App Check; Apple for HealthKit, Sign in with Apple, APNs and App Store services; Google for Health Connect, sign-in, Maps, Play Billing and AdMob; and Meta for Facebook Login and app-event services.
• Communications and AI providers: OpenAI for AI coaching, insight and coach chat responses, including the health-derived metrics described in the AI coaching section, and for automated Story image safety classification before posting; Resend and authentication providers for service emails or magic links; Formspree for website contact submissions; MailerLite for newsletters where used; and Discord for restricted operational notifications about new registrations and moderation events (user reports and automated Story review/block flags — for example usernames, account identifiers, report type/reason, decision, optional notes and content identifiers where available). These notifications are used for support, fraud monitoring and safety review only.
• Connected wearable providers: if you link a WHOOP or Oura account, those providers send us the metrics you authorise and act as separate controllers of the data they hold under their own privacy notices.
• Analytics, advertising and affiliate providers: Google, Microsoft Clarity, Meta, Impact.com, Awin and participating advertising networks, according to applicable consent and device settings.
• Reward partners: limited redemption, offer, location-validation or attribution information where needed to issue or verify a benefit, account for a campaign or prevent fraud. We do not give partners HealthKit or Health Connect data.
• Partnership contractors: we engage contractors to introduce and manage reward partners. They may be paid a share of partner-related revenue. For that we may share how much was spent at a partner store or on a partner campaign (for example a store or period total). We do not share your name, email, username, account ID, health data, location, or any other information that identifies you.
• Other users and the public: profile fields, rankings, social content and interactions according to the feature, membership and privacy settings described above.
• Professional advisers, authorities and transaction parties: lawyers, accountants, insurers, regulators, courts, law enforcement and prospective buyers or investors where necessary and lawful.

Some named organisations act as our processors and some act as separate controllers under their own privacy notices.

International Transfers

FITCOIN LTD is based in the United Kingdom, but providers may process data in the United States and other countries. Where personal data is transferred outside the UK, we rely on an applicable UK adequacy regulation or use appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, and supplementary security measures where required. Some providers may also participate in recognised transfer frameworks. Contact us if you would like more information about safeguards relevant to your data.

How Long We Keep Data

• Account, fitness, run, rewards and social records: generally while your account is active and then through the 30-day account-deletion grace period. Data is then deleted or anonymised unless a longer period is needed for law, security, fraud prevention, disputes or outstanding transactions.
• AI coaching and coach chat: Fitcoin processes prompts and health-metric payloads transiently to return a response and does not intentionally save them to your cloud account. Coach chat messages are stored only on your device and cleared daily; cached insight text stays on your device until refreshed or cleared in Settings. Daily AI usage counters are kept per account to enforce quotas. OpenAI may retain API input and output for its limited abuse-monitoring and security period under its applicable service terms.
• Stories: designed to expire after about 24 hours and may be deleted sooner. Automated cleanup and backups can cause a short additional delay.
• Direct messages: removed from the live conversation after about 24 hours. A restricted server archive is retained for up to 30 days for moderation, security, fraud prevention and legal compliance, unless required for an active investigation or legal claim.
• League and other user content: until you or an authorised moderator deletes it, the league is removed, or the account-deletion process completes. Safety records relating to removed content may be retained longer where proportionate.
• Purchase, redemption and ledger records: for as long as necessary to administer balances and redemptions and meet accounting, tax, fraud and legal obligations.
• Safety and moderation records (including reports, reasons, notes and related account/content identifiers): retained while needed to investigate and protect users, and generally for up to 12 months after a report is resolved or closed, unless a longer period is required for an active investigation, repeated abuse patterns, legal claims or a lawful request.
• Diagnostics, analytics and security records: according to configured provider retention periods and for as long as needed to investigate reliability, security or abuse.
• Backups: deleted data may remain in protected backups for a limited period until overwritten and is not restored to normal use.

We determine periods by considering the service purpose, sensitivity, user expectations, limitation periods, fraud and safety risk, and legal requirements.

Security

We use HTTPS encryption in transit, platform security controls, access restrictions, Firebase security rules, device attestation through Apple App Attest or Google Play Integrity where enabled, rate limits and monitoring. Rewards screens may use platform screenshot restrictions, but this cannot prevent every form of capture. No service is completely secure, so protect your sign-in methods and contact us if you suspect misuse.

Your Choices and Data-Protection Rights

Depending on the circumstances, UK data-protection law gives you the right to:

• request access to and a copy of your personal data;
• correct inaccurate or incomplete data;
• request deletion of data;
• restrict processing;
• receive data you provided in a portable format where the portability right applies;
• withdraw consent at any time;
• object to direct marketing; and
• ask for human review where a decision is based solely on qualifying automated processing.

Your right to object: where we rely on legitimate interests, you may object to that processing. We will stop unless we demonstrate compelling legitimate grounds or need the data for legal claims. You always have an absolute right to object to direct marketing.

Use in-app settings to manage profile visibility, sign-in methods and account deletion. Health, location, camera, photo, notification and tracking permissions can be managed in device settings. You can schedule account deletion in the app; it has a 30-day grace period during which signing back in cancels deletion. You may request immediate deletion or exercise any right by emailing hello@fitcoin.co. We may need to verify your identity. Rights are not absolute, and we will explain any lawful limitation.

You may complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern first, but you do not have to contact us before the ICO.

Children

Fitcoin is not intended for children under 13, or a higher minimum age where local law requires it. We ask for date of birth during account setup and block under-13 accounts. We do not knowingly collect personal data from children below the applicable age. If you believe a child has created an account contrary to this rule, contact us so we can investigate and delete the data.

Changes to This Policy

We may update this policy when our services, providers or legal obligations change. We will post the revised date here and provide an in-app or other prominent notice where a change is material. If we need consent for a new use, we will request it before that use begins.

Contact Us

FITCOIN LTD, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

Privacy questions and rights requests: hello@fitcoin.co.