Privacy policy

The data controller is AC0 AI, S.L.U., NIF B26808741, Avda. del Pintor Joaquín Sorolla 77, 29016 Málaga, Spain. Contact hi@ac0.ai about privacy or your rights. See our legal notice.

We process your email address, display name, account identifier, language, time zone, reminder preference, group memberships, challenges, check-ins, notes, encouragement, block preferences and photos you upload. Shared step totals are optional. We also process support and abuse reports and basic request information, such as IP address and device/browser details, for operation and security.

We use account and group data to provide the service you request, authenticate you, show progress and deliver sign-in emails (performance of our agreement). We use optional fitness data and optional reminders with your consent. You can turn reminders off in Help.

Security, abuse prevention, support and limited website audience measurement serve our legitimate interests in protecting and improving the service. We process data where necessary to meet legal obligations. We do not sell personal data, run third-party advertising, use cross-app tracking or make automated decisions with legal or similarly significant effects.

An email address and display name are needed for an account and group participation. Photos, notes, phone-step permissions and step sharing are optional. You can use regular challenges without fitness permissions. Do not include sensitive information about yourself or others in free-text fields or photos unless you intend to share it with the group.

If you enable the step counter, FitForGod requests read-only access to today's aggregated step count: Health Connect on Android and Motion & Fitness on iPhone. The counter displays data locally. We do not collect raw Health Connect records, minute-by-minute activity or other health measurements, and we do not write to or modify Health Connect data.

In a step challenge, you may explicitly share today's phone count or enter a daily total yourself. Only when you choose to share is that number sent to FitForGod, stored with your account and challenge, and shown to authenticated members of your group. The app explains this before sharing. There is no automatic upload of step data. Your explicit choice provides consent to this processing and sharing, including explicit consent where fitness data is treated as sensitive health data. Step data is never sold or used for advertising or tracking.

Device access and sharing are separate choices. Revoke access in Health Connect or your phone settings to stop local reading. This does not delete totals you previously shared. Undo today's check-in, delete your account or contact us to remove older totals and withdraw consent to their further processing. Withdrawal does not affect processing already lawfully performed. Manual entry works without device access.

Your group sees your display name, participation and content you choose to share. Group leaders manage membership and challenges. Invitations should be shared only with intended members. Blocking prevents posts and encouragement between the accounts; membership and shared group progress remain visible. Other members may retain content they have already seen or copied.

Our service providers are Vercel (hosting and website analytics), Turso (database), Cloudflare R2 (uploaded photos) and Brevo (sign-in, reminder and support/report email). They process data to deliver these services under their service and data-processing terms. We may also disclose information when required by law or necessary to protect people and the service.

Providers may process information outside the European Economic Area. Where such transfers occur, the applicable safeguards include an adequacy decision or contractual safeguards such as the European Commission's standard contractual clauses. Contact us for information about the safeguards applicable to your data.

Necessary cookies support sign-in and your chosen language. We use Vercel Web Analytics for aggregate statistics on public information pages, with query strings and fragments removed from page-view URLs. Authentication, invitations, app-opening and account-deletion pages are excluded. No app check-ins or step counts are sent to website analytics.

Vercel's measurement uses a temporary request-derived visitor hash rather than an analytics cookie or cross-site identifier; the visitor session is discarded after 24 hours. Statistics can include page, referring site, time, browser, operating system, device type and approximate country. See Cookies and analytics choices to opt out on this browser. We also honor the browser's Do Not Track signal for analytics.

Connections are encrypted in transit. The mobile app stores session credentials in operating-system secure storage. Group content uses authenticated access controls. No security system is perfect; contact us promptly about suspected unauthorized access.

We retain account and challenge data while your account remains active so you can view current and past progress. Optional content remains until removed, the relevant group is deleted or the account is deleted. Sign-in links are short-lived; sessions expire or end on sign-out. Support, security and abuse records are kept only for as long as needed to resolve the issue, protect the service or meet applicable legal obligations. Relevant records may be retained for a legal claim for its applicable limitation period. Deleted information may temporarily remain in restricted backups until they are replaced; it is not used for active service features.

Account deletion removes the account, memberships, check-ins, notes, encouragement, block preferences, shared step totals and uploaded photos. A group leader with other members must first transfer leadership or delete the group. A sole-member group is deleted with the account.

You may request access, correction, erasure, restriction, a portable copy of data where applicable, or object to processing based on legitimate interests. You may withdraw consent at any time. Email hi@ac0.ai from your account address; we may need proportionate identity verification. We normally respond within one month and will explain any lawful extension.

You can complain to the Spanish Data Protection Agency (AEPD) or your local supervisory authority. FitForGod is intended for adults aged 18 or over. Contact us if you believe a child has provided data so we can investigate and remove it where appropriate.

We publish policy changes here with an updated date and communicate material changes through the service or account email where required.