Privacy Policy

Effective date: September 12, 2026  ·  Last updated: September 12, 2026

1. Introduction

FitScout ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices. By using the Service you agree to the practices described here.

2. Information We Collect

Information you provide

  • Account data: name, email address, and password when you register (or OAuth tokens if you sign in with Google).
  • Profile data: fitness goals, experience level, and equipment information you enter.
  • Equipment photos: images you upload for AI-powered equipment analysis. See Section 6 for how we handle them.
  • Workout data: workout logs, set/rep/weight entries, ratings, and notes.
  • Payment data: billing information handled directly by Stripe; we do not store full card numbers.
  • Communications: messages you send via the contact form.

Information collected automatically

  • Usage data: pages visited, features used, and referring URLs.
  • Device data: browser type, operating system, and IP address.
  • Cookies: session cookies required for authentication and optional analytics cookies.

3. How We Use Your Information

  • Provide, operate, and improve the Service.
  • Generate AI-powered workout plans personalized to your equipment and goals.
  • Process payments and manage your subscription.
  • Send transactional emails (account confirmations, receipts).
  • Send optional marketing emails (you can opt out at any time).
  • Respond to support requests.
  • Comply with legal obligations.

4. AI Processing

To generate a workout or a training program, we send a prompt to Anthropic's Claude API. That prompt can contain the following, and nothing else about you:

  • Equipment context: either the equipment items on the profile you selected (name, category, and any recorded specifications such as a weight range), or the equipment photo you uploaded for that session.
  • Workout parameters: the focus, workout type, intensity level, and duration for the session you requested.
  • Your self-reported profile — only if you have consented to health-data processing: age (derived from your date of birth), biological sex, height in centimetres, body weight in kilograms, self-reported fitness level, primary goal, and any free-text training notes you have written. Without that consent, only your primary goal is included.
  • Workout history (paid plans only): your last five completed workouts, including exercise names, sets, reps, the weights you logged, your difficulty ratings, and any feedback text you entered.

We do not send your name, email address, payment information, IP address, or account identifiers to Anthropic. Equipment photos are uploaded to Anthropic as image data for analysis. Anthropic's Privacy Policy governs their handling of this data.

5. Sharing Your Information

We do not sell your personal data. We share it with the following categories of recipient:

  • Anthropic (AI processing): receives the prompt contents described in Section 4, including equipment photos and, where you have consented, health-related profile data.
  • Stripe (payments): receives your email address and the billing and payment details you enter directly into Stripe's checkout. We never receive or store your full card number.
  • Cloudflare (storage and delivery): stores the equipment photos you upload, in Cloudflare R2.
  • Sentry (error monitoring): receives diagnostic data about application errors, which can include your account identifier and the URL you were visiting when the error occurred.
  • Google (sign-in and analytics): if you sign in with Google, Google provides us your name, email address, and profile image. If you accept analytics cookies, Google Analytics receives usage data about your visit — see our Cookie Policy.
  • Hosting and infrastructure providers: operate the servers and databases on which the Service runs.
  • Legal requirements: if required by law, court order, or to protect our legal rights.
  • Business transfers: in the event of a merger, acquisition, or sale of assets.

Health-related information you enter — date of birth, biological sex, height, body weight, fitness level and training notes — is governed by our Consumer Health Data Privacy Policy. We collect it only with your explicit consent.

6. Equipment Photos

Photographs you upload get specific handling, because a gym photo can reveal more than the gym:

  • Metadata is removed. Phone cameras embed GPS coordinates, capture time, and device identifiers in every photo. We strip that metadata when the file is received — before the image is stored or sent anywhere. We never derive your location from a photograph.
  • Where the image goes. The stripped image is sent to Anthropic for equipment analysis and stored in Cloudflare R2.
  • People in photos. We instruct the AI model to disregard any person appearing in an image, and we do not retain the raw model output. Please avoid photographing other gym members; the Terms of Service set out your responsibilities here.
  • Retention. Photos uploaded for a one-off analysis are deleted once the analysis completes. Photos attached to a saved equipment profile are kept until you delete the profile or close your account.
  • Reporting a photo. If a photograph on the Service depicts you without your permission or is otherwise objectionable, tell us via the contact form and we will review it. We aim to acknowledge reports within 5 business days.

7. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. Workout and equipment data is retained until you delete it or close your account. Anonymized, aggregated data may be retained indefinitely for analytical purposes.

8. Security

We use industry-standard security measures including HTTPS, encrypted storage, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Your Rights & Choices

  • Access & correction: you can view and update your account information in your settings.
  • Data portability: use "Download my data" in your profile settings to export everything we hold about your account — profile, consents, equipment, programs, workouts and logged sets — as a JSON file.
  • Deletion: you can request deletion of your account and associated data by contacting us. Payment records held by our payment processor, and records we are required to keep for tax, accounting or fraud-prevention purposes, are retained for as long as the law requires.
  • Marketing opt-out: click the unsubscribe link in any marketing email or contact us.
  • Cookies: use the "Cookie preferences" link in the footer of any page to change your analytics choice, or adjust cookie preferences in your browser settings.
  • Global Privacy Control: we honor the GPC signal. If your browser or extension sends one, we treat it as an opt-out of analytics cookies automatically and load no analytics.

Depending on your jurisdiction (e.g., EU/EEA, California), you may have additional rights such as the right to restrict processing. Contact us to exercise these rights.

10. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn we have done so, we will delete it promptly.

11. International Transfers

Your data may be transferred to and processed in the United States and other countries. By using the Service, you consent to such transfers.

The Service may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or by posting a notice on the Service. Continued use after changes take effect constitutes acceptance.

14. Contact Us

Questions or requests regarding your privacy? Contact us at hello@fitscout.me or via our contact page .