FitQuest Privacy Policy

Effective date: July 20, 2026

Summary

FitQuest is an offline-first fitness and nutrition app. Your data lives on your device. We do not require an account, we do not run analytics or ads, and we do not sell or share your data with anyone.

Data stored on your device

FitQuest stores the following data locally on your device only, in the app's private database:

• Workout plans, workout history, and personal records
• Nutrition logs (foods, calories, macros) and meal plans
• Body weight entries
• Your profile (name, goals, biometrics like height/weight/age, dietary preferences, equipment)
• Gamification progress (streaks, XP, badges)
• Daily check-ins, including soreness and your optional 1-5 answers for sleep, energy, stress and mood

This data never leaves your device except in the cases described below (AI features, Crews, subscriptions, and your own exports). Deleting the app deletes all of it.

Mood check-ins never leave your device at all. The optional mood answer on the Daily Check-in is stored locally alongside the rest of your check-in, and the two-week trend shown on the Recovery screen is calculated on your device from those same rows — nothing about it is uploaded, sent to any AI feature, or shared with anyone. It is a wellness input, not a clinical screening tool, and FitQuest does not diagnose, treat, or assess any condition.

AI features

Some optional features use AI to generate content (workout plan generation, exercise substitutions, macro estimation from a meal description or photo, body-fat estimation from photos, meal plan generation, weekly check-ins, and the AI coach chat). When you use one of these features:

• The relevant content (for example, your goals and equipment for plan generation, the meal description you typed, or a meal photo you chose to analyze) is sent over an encrypted HTTPS connection to our server-side proxy (hosted on Cloudflare) and forwarded to Anthropic, our AI provider, to generate the response.
• When you use the body-fat estimate, the photo(s) you select are sent the same way for analysis, along with basic biometrics from your profile (sex, age, height, weight) to improve the estimate. These photos are used only to generate the estimate — they are not saved to our servers, and photos in your progress-photo library otherwise never leave your device.
• When you message the AI coach, your message, recent messages in that conversation, and a summary of your training and nutrition data (recent workout totals, recovery estimates, weekly volume, nutrition averages, weight trend, and goals — computed on your device) are sent the same way so the coach can give informed answers. Your full chat history is stored only on your device.
• Requests carry an anonymous, randomly generated account token used only for fair per-account rate limiting — no name, email, contact information, or advertising identifier.
• We do not store the content of these requests on our servers.
• Anthropic processes the request to generate the response, subject to Anthropic's own privacy practices.

The AI coach provides general fitness and nutrition information, not medical advice. The body-fat estimate is a rough visual approximation, not a medical measurement or diagnosis. Consult a qualified professional for medical concerns, pain, or injuries.

If you never tap an AI feature, no data leaves your device at all.

Crews (optional social feature)

Crews are small, invite-code-only groups you can create or join to share workouts with friends. This is the one feature where data is stored on our server (Cloudflare, not just relayed):

• Your anonymous account is assigned the same account token used for AI rate limiting. If you set a display name, handle, or bio, that's stored on our server and shown to your crew members — it is not private.
• When you tap "Post to Crew," the workout/PR summary you chose to share (and, on milestone days, a streak/level-up/rank-up note) is stored on our server and visible to your crew members. Reactions and comments you post are stored the same way, attributed to your name/handle.
• None of this is shared outside your crew, sold, or used for advertising. It's visible only to people who join your crew's invite code.
• Leaving a crew or deleting the app does not automatically delete what you've already posted to that crew's feed; email us (below) to request removal.

If you never create or join a Crew, none of this applies to you.

Subscriptions (FitQuest Pro)

FitQuest offers an optional paid subscription ("FitQuest Pro") for the AI features described above. The AI features require FitQuest Pro; free accounts receive one complimentary AI workout plan when they set up the app, and can use everything else in FitQuest — workout and nutrition tracking, the offline food database, recovery protocols and progress history — without a subscription.

• Purchases are handled entirely by Apple through the App Store — we never see or store your payment details.
• We use RevenueCat, a subscription-management vendor, to keep track of which accounts are subscribed. RevenueCat receives your anonymous account token and purchase/subscription status (e.g., which product you bought and when it renews or expires) from Apple to keep your Pro access in sync — no name, email, or payment information is involved.
• You can manage or cancel your subscription anytime in your device's App Store account settings.

Crash reporting

To fix problems, FitQuest uses Sentry to collect crash and error reports. When the app crashes or hits an unexpected error, a diagnostic report — the error and its stack trace, plus device model and OS version — is sent to Sentry. These reports do not include your workout, nutrition, or profile data, and are not linked to your identity (no account, no advertising identifier). See Sentry's own privacy practices for how they handle diagnostic data.

What we do NOT do

• No email/password sign-in — accounts are anonymous device tokens (an optional display name/handle is only stored if you join a Crew, see above)
• No usage analytics, behavioral tracking, or advertising SDKs (crash/error diagnostics via Sentry are the only data that leaves the device automatically — see above)
• No advertising or ad SDKs
• No selling, renting, or sharing of personal data
• No third-party tracking of any kind
• No marketing email because you used the app. The only list we keep is the beta waiting list above, which you join deliberately on our website and can leave in one click.

Notifications

Workout and nutrition reminders are local notifications, scheduled and delivered entirely on your device. Nothing is sent to a server.

Sharing

If you use the share feature (for example, sharing a workout summary card), the image is generated on your device and handed to the iOS share sheet. What happens next (posting, messaging, saving) is controlled by you and the app you share to.

Data export and deletion

• Export: you can export all of your data as a JSON file from the Profile screen at any time.
• Deletion: deleting the app removes all locally stored data. There is no server-side copy to delete (except Crew content — see above).

Children

FitQuest is not directed at children under 13 and does not knowingly collect data from them.

Changes to this policy

If we change this policy, we will update the effective date at the top and, for material changes, note it in the app's release notes.

Contact

Questions about this policy: trainfitquest@gmail.com