Last updated: July 6, 2026

Privacy Policy

FitBite ("we", "us") helps you track nutrition, calories, macros, activity and health-related progress. This Privacy Policy explains what information FitBite collects, how it is used, who it is shared with, and the choices and rights available to you — including your rights under the EU/UK General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK).

Data controller: FitBite (Arda Can Güvendi) — contact: hello@fitbite.dev.

Information You Provide

FitBite collects information you choose to enter, including meals, calories, macros, notes, nutrition goals, body measurements (such as weight), progress entries, app preferences, support messages, and account information such as your email address or authentication identifier.

Health and Fitness Data

FitBite may process health-related information you enter manually or choose to connect through supported services such as Apple Health. This may include nutrition entries, activity-related values, weight, body measurements, goals, and progress data. FitBite only accesses health data categories you approve.

Apple Health (HealthKit)

If you choose to connect Apple Health, FitBite reads the following data with your explicit permission: step count, active energy burned, walking and running distance, exercise minutes, and heart rate (including resting heart rate). FitBite writes only one data type to Apple Health: the water you log in the app (so it appears in the Health app and syncs to your Apple Watch). Workouts recorded with the FitBite watch app are saved to Apple Health by the watch app with your permission.

This data is used solely to power in-app features: adjusting your daily calorie budget based on your activity, showing your daily health summary, weekly reports, and activity-aware coaching. Daily activity totals are stored with your account so these features work across your devices.

HealthKit data is never used for advertising, marketing or similar purposes, is never sold, and is never shared with third parties for their own use. You can disconnect Apple Health at any time from the Profile screen in the app, or revoke access in iOS Settings > Health > Data Access & Devices. Deleting your account permanently deletes the stored activity data.

Advertising (Google AdMob)

The free version of FitBite shows rewarded ads served by Google AdMob (Google Ireland Ltd. / Google LLC). To serve and measure ads, Google may process device information such as advertising identifiers (IDFA, where you allow tracking), IP address, coarse location derived from IP, device model and OS version, and ad interaction events. FitBite Pro subscribers do not see ads, and the ad SDK is not initialized for them.

Consent (EEA/UK): if you are in the European Economic Area, the UK or Switzerland, a consent form (Google User Messaging Platform, IAB TCF) is shown before any ads are loaded. You may decline — in that case ads are non-personalized or limited. You can change your choice at any time from the consent form when it reappears, or by contacting us.

App Tracking Transparency (iOS): on iOS we also ask for tracking permission via Apple's ATT prompt. If you decline, your device's advertising identifier is not used and ads are served in non-personalized mode.

Health data and ads are strictly separated: no health, nutrition or weight data is ever shared with advertising partners or used for ad targeting. For details on how Google uses data, see How Google uses information from sites or apps that use its services.

Accounts and Login

If you create an account or sign in, FitBite uses your account identifier, email address, display name and authentication provider (email/password or Sign in with Apple) to operate your account. Social login tokens are verified server-side; passwords are stored only as salted hashes.

Payments and Subscriptions

In-app purchases and subscriptions are processed by Apple through the App Store; FitBite never receives your full payment details. We use RevenueCat to manage subscription entitlements: RevenueCat processes a pseudonymous user identifier, purchase receipts and subscription status on our behalf.

How Information Is Used

We use your information to provide app features (calorie tracking, AI food analysis, coaching, reports, leagues), to maintain security and prevent abuse, to provide support, to send transactional email (such as password reset codes or the weekly recap you opt into), and — in the free version — to show ads as described above. AI food analysis sends the photo or text you submit to Google Cloud (Vertex AI) for processing; results are returned to you and the photo itself is not used to identify you.

Legal Bases (GDPR)

Where the GDPR applies, we rely on: contract (providing the app and your account), consent (Apple Health access, personalized advertising, optional emails), and legitimate interests (security, abuse prevention, non-personalized ads and basic service analytics). You may withdraw consent at any time without affecting the lawfulness of prior processing.

Storage, Processors and International Transfers

Your data is stored on our servers hosted by Render and in a Postgres database hosted by Neon. We use a small number of processors to run FitBite: Google Cloud (Vertex AI — AI food analysis), Google AdMob (ads in the free version), RevenueCat (subscriptions), Resend (transactional email) and Apple (sign-in, payments, HealthKit). Some processors are located in the United States; where data leaves the EEA/UK, transfers rely on the EU Standard Contractual Clauses or an adequacy decision.

Data Retention

Your data is kept while your account is active. If you delete your account in the app (Profile > Delete account), your profile and logs are permanently deleted. Waitlist emails are kept until launch communications are complete or you ask us to remove yours.

Your Rights (GDPR / KVKK)

You have the right to access, rectify, erase, and receive a copy of your data, to restrict or object to processing, and to withdraw consent. In the app you can: export all of your data as JSON (Profile > Export data), delete your account permanently, and disconnect Apple Health. For anything else, email hello@fitbite.dev — we respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority (in Turkey, the KVKK Board; in the EU, your national DPA).

Children's Privacy

FitBite is not directed at children under 13 (or the minimum age in your country) and we do not knowingly collect their data. Ad content is configured for a general audience.

Changes

We may update this policy as the app evolves; the "Last updated" date above always reflects the current version. Material changes will be announced in the app.

Contact

Questions or requests: hello@fitbite.dev