Privacy policy

The data controller is AC0 AI, S.L.U., NIF B26808741, Avda. del Pintor Joaquín Sorolla 77, 29016 Málaga, Spain. Contact hi@ac0.ai about privacy or your rights. See our legal notice.

We process your email address, display name, account identifier, language, time zone, reminder and notification preferences, a push token for each phone where you allow notifications, group memberships, challenges, check-ins, notes, encouragement, block preferences and photos you upload. Shared step totals and weight entries in weight challenges are optional. We also process support and abuse reports and basic request information, such as IP address and device/browser details, for operation and security.

We use account and group data to provide the service you request, authenticate you, show progress and deliver sign-in emails (performance of our agreement). We use optional fitness data and optional reminders with your consent. You can turn reminders off in the app's Profile tab.

If you allow notifications on your phone, the app registers a push token so we can tell you about activity in your group: when someone encourages your check-in, when your leader sets a new challenge and, for leaders, when someone joins. Notifications may contain a first name, the group name or the challenge title. They do not automatically include weight entries or step totals, but can include anything entered in a group or challenge name. Daily reminders are scheduled on your phone and are not sent from our servers. You can turn group notifications off in the Profile tab or in your phone settings at any time.

In Android app version 1.1.0 and later, Google Firebase also generates an installation identifier for its messaging service. This can happen even if you do not allow notifications; it is separate from the push token we store when you enable group notifications.

Security, abuse prevention, support and limited website audience measurement serve our legitimate interests in protecting and improving the service. We process data where necessary to meet legal obligations. We do not sell personal data, run third-party advertising, use cross-app tracking or make automated decisions with legal or similarly significant effects.

An email address and display name are needed for an account and group participation. Photos, notes, phone-step permissions, step sharing and weight entries are optional. You can use regular challenges without fitness permissions. Do not include sensitive information about yourself or others in free-text fields or photos unless you intend to share it with the group.

If you enable the step counter, FitForGod requests read-only access to today's aggregated step count: Health Connect on Android and Motion & Fitness on iPhone. The counter displays data locally. We do not collect raw Health Connect records or minute-by-minute activity, we do not read any other health measurements from your device, and we do not write to or modify Health Connect data.

In a step challenge, you may explicitly share today's phone count or enter a daily total yourself. Only when you choose to share is that number sent to FitForGod, stored with your account and challenge, and shown to authenticated members of your group. The app explains this before sharing. There is no automatic upload of step data. Your explicit choice provides consent to this processing and sharing, including explicit consent where fitness data is treated as sensitive health data. Step data is never sold or used for advertising or tracking.

Device access and sharing are separate choices. Revoke access in Health Connect or your phone settings to stop local reading. This does not delete totals you previously shared. Undo today's check-in, delete your account or contact us to remove older totals and withdraw consent to their further processing. Withdrawal does not affect processing already lawfully performed. Manual entry works without device access.

Weight is optional and only used in weight challenges. You enter it yourself; the app does not read it from Health Connect or other device sources. When you save a weight goal, you give explicit consent to FitForGod storing your goal and the weights you log, per challenge, with your account, including explicit consent where weight is treated as sensitive health data. Your group never sees your weight in kilograms or pounds. It sees that you weighed in and, only if you turn on progress sharing, your progress toward your goal as a percentage. You can delete your weight data at any time in the app, for one challenge under Progress or for every challenge under Profile, which keeps your check-ins, or by emailing hi@ac0.ai. Your weight data for a group is also deleted when you leave or are removed from that group. Deleting it withdraws your consent to further processing. Weight data is never sold or used for advertising or tracking.

Your group sees your display name, participation and content you choose to share. Group leaders manage membership and challenges. Invitations should be shared only with intended members. Blocking prevents posts and encouragement between the accounts; membership and shared group progress remain visible. Other members may retain content they have already seen or copied.

Our service providers are Vercel (hosting and website analytics), Turso (database), Cloudflare R2 (uploaded photos), Brevo (sign-in, reminder and support/report email) and Expo (push notification delivery). Expo passes notifications to Apple Push Notification service on iPhone and Google Firebase Cloud Messaging on Android, which deliver them to your phone. They process data to deliver these services under their service and data-processing terms. We may also disclose information when required by law or necessary to protect people and the service.

Providers may process information outside the European Economic Area. Where such transfers occur, the applicable safeguards include an adequacy decision or contractual safeguards such as the European Commission's standard contractual clauses. Contact us for information about the safeguards applicable to your data.

Necessary cookies support sign-in and your chosen language. We use Vercel Web Analytics for aggregate statistics on public information pages, with query strings and fragments removed from page-view URLs. Authentication, invitations, app-opening and account-deletion pages are excluded. No app check-ins, step counts or weights are sent to website analytics.

Vercel's measurement uses a temporary request-derived visitor hash rather than an analytics cookie or cross-site identifier; the visitor session is discarded after 24 hours. Statistics can include page, referring site, time, browser, operating system, device type and approximate country. See Cookies and analytics choices to opt out on this browser. We also honor the browser's Do Not Track signal for analytics.

Connections are encrypted in transit. The mobile app stores session credentials in operating-system secure storage. Group content uses authenticated access controls. No security system is perfect; contact us promptly about suspected unauthorized access.

We retain account and challenge data while your account remains active so you can view current and past progress. Optional content remains until removed, the relevant group is deleted or the account is deleted. Sign-in links are short-lived; sessions expire or end on sign-out. A push token is deleted when you sign out, turn group notifications off or delete your account, and when Apple or Google report that the phone no longer accepts notifications. Support, security and abuse records are kept only for as long as needed to resolve the issue, protect the service or meet applicable legal obligations. Relevant records may be retained for a legal claim for its applicable limitation period. Deleted information may temporarily remain in restricted backups until they are replaced; it is not used for active service features.

Account deletion removes the account, memberships, check-ins, notes, encouragement, block preferences, shared step totals, weight goals and entries, push tokens and uploaded photos. A group leader with other members must first transfer leadership or delete the group. A sole-member group is deleted with the account.

You may request access, correction, erasure, restriction, a portable copy of data where applicable, or object to processing based on legitimate interests. You may withdraw consent at any time. Email hi@ac0.ai from your account address; we may need proportionate identity verification. We normally respond within one month and will explain any lawful extension.

You can complain to the Spanish Data Protection Agency (AEPD) or your local supervisory authority. FitForGod is intended for adults aged 18 or over. Contact us if you believe a child has provided data so we can investigate and remove it where appropriate.

We publish policy changes here with an updated date and communicate material changes through the service or account email where required.