Last updated: November 2, 2026
Website: fitinflow.space · Tracker: FitInFlow Tracker
Privacy contact: fitinflow@gmail.com
1. About this policy
This policy explains how FitInFlow handles information about visitors to its website and users of its nutrition and health Tracker, including the website-based Tracker and mobile applications. The mobile applications display hosted Tracker content and also provide device features. Information entered in the Tracker can therefore be sent to our servers; it does not necessarily stay on your phone.
FitInFlow is independently operated by an individual based in California, USA. In this policy, “we” means that operator. Our Terms of Use describe the rules for using the service; this policy describes information practices. Reading this policy or accepting the Terms does not replace consent required for sensitive data, optional permissions or nonessential cookies.
2. Information you provide and information we create
- Account information: email address, account name, password authentication information, settings, communications and account changes.
- Nutrition and activity: foods, recipes, portions, nutrients, saved meals, favorites, folders, exercise, steps, distance, sleep, weight, water, fasting, alcohol, supplements, goals and related notes.
- Profile and calculations: information such as height, weight, birth year, activity level and the calorie formula you select. The Tracker uses these inputs to calculate totals, scores, estimates, trends and suggested targets. These results can reveal or suggest health information.
- Optional reproductive-health information: period dates and flow, symptoms, mood, medication notes, basal body temperature, cervical mucus, ovulation information, ovulation and pregnancy-test results, protected or unprotected sexual activity, blood-pressure entries, pregnancy due date and related settings. Do not enter information you do not want us to process.
- Images and product content: meal, food and profile photos; beauty-product and supplement information; ingredient lists; and other material you submit. Photos and notes may contain personal information beyond the item you intended to record.
- Social and purchase information: friend connections, sharing preferences, cheers, referral information, subscription status and records described below.
Whether a particular field or feature is available depends on your platform, permissions, plan and configuration. Health-related records and inferences can be sensitive even when they are not medical records.
3. Technical information, cookies and local storage
WordPress login cookies and session information keep you signed in and help protect account requests. The Tracker also uses a random device identifier and a hashed browser/device signature for device limits and account security. Device records can include a device/browser label and first-use and last-use dates. The reviewed device cookie is configured for up to two years; browser controls, removal and subsequent use can affect its actual lifetime.
Browser or app storage holds preferences, drafts and temporary state, including language, appearance and cycle-unlock state. Clearing cookies or storage can remove these conveniences or sign you out; it does not by itself delete server-side records.
Web requests can disclose an IP address, browser or app information, time and requested resource to the server receiving them. Hosting, security, email, caching and backup services may process additional operational information. Specific providers and retention periods depend on the services in use.
Security cookies and device recognition are different from advertising measurement, but describing the Tracker as having “no tracking” would be misleading. See section 10 for advertising and analytics.
4. Google, Apple, passkeys and device unlock
If an enabled sign-in method is offered and you select it, Google or Apple provides an identity token and a stable provider account identifier, and may provide your email address and name. Apple may supply a private relay address. We use identity information to recognize a FitInFlow account and establish a WordPress session. We do not receive your Google or Apple password through that sign-in method.
Provider identifiers and account associations may remain with your account. Email addresses and provider identifiers are not interchangeable. Available sign-in and account-linking methods may differ by platform and application version. Contact us if an identity-provider account becomes inaccessible.
Where passkeys are used, the device or credential provider controls the private key and local authentication; the server stores the public credential information needed to verify a sign-in. Native device unlock may use biometrics or a device passcode. The reviewed native code does not send raw face or fingerprint measurements to FitInFlow. This does not mean FitInFlow receives no account or device information.
5. Apple Health, Health Connect and health imports
When you authorize a supported connection, the application reads permitted categories such as steps, active energy, workouts, distance, weight and sleep. The reviewed native integrations request read access, not permission to write those records back to Apple Health or Health Connect. Selected records or daily totals can be sent to the FitInFlow server and stored in your Tracker account.
A supported Apple Shortcuts connection can also send steps and active energy using an account-specific sync credential. Keep that credential private and revoke it if it is no longer needed.
You can manage platform permissions in Apple Health or Health Connect and disable a connection. Revoking permission stops access allowed by that permission; it does not automatically delete information already imported into FitInFlow. Use the deletion controls described below for stored records.
We use imported health data to provide the health-tracking features you request. We do not authorize its use for targeted advertising or sale. We do not intentionally submit imported health records for AI model training. Third-party health platforms also have their own privacy terms.
6. How information is used
We process account and Tracker information to provide the functions you request: storing records, synchronizing devices, displaying calculations and history, managing permissions and sessions, providing optional sharing and reminders, administering purchases and entitlements, responding to support requests, and investigating security problems or misuse.
We also make calculations and health-related estimates from the information you enter. This is not a claim that the service can diagnose a condition, reliably predict fertility or make medical decisions. See our Terms of Use for the limits of nutrition and wellness information.
We may also process limited account and technical information for service administration, troubleshooting, security and legal compliance. Sensitive information is not treated as freely available for unrelated marketing merely because you use the Tracker.
7. Product lookup, external content and optional AI
Food, barcode, beauty-product and supplement searches can send search text, product identifiers, ingredient information or barcodes to external services. The reviewed integrations include USDA FoodData Central, Open Food Facts, Open Beauty Facts, Open Products Facts, UPCitemdb and the NIH Dietary Supplement Label Database. Server-side searches generally originate from our server. Product images or other resources loaded directly by your browser or application expose request information, including your IP address, to their hosts.
Some scanning and text-reading functions load software from jsDelivr and may load related worker or language resources. The reviewed browser scanning functions process images on the device, which differs from optional AI photo recognition. Product searches using recognized text can still transmit that text. Customized fonts can load from Google Fonts.
If optional AI photo recognition is enabled and you choose it, the app sends a resized JPEG image to the FitInFlow server, which sends the image and a food-recognition prompt to Anthropic. The response supplies estimated food information. The reviewed request does not intentionally include the rest of your diary, but an image can itself reveal health details, faces, text or other personal information. Avoid submitting images containing information you do not want that provider to receive.
AI photo recognition is optional and may be unavailable. When used, the external provider may process submitted images under its applicable service terms. We cannot guarantee the provider’s retention period or practices beyond our contractual controls.
Shared product contributions are different from private diary entries. For example, a contributed beauty-product ingredient list may become available to other members. Account deletion can remove the contributor association while retaining shared product information. Do not place private health or identifying details in a shared product contribution.
8. Friends, sharing and reminders
Friend features can disclose your name, avatar, connection information and selected activity indicators. In the reviewed code, logging streak and whether you logged today are enabled by default for friend cards; fasting and steps require their sharing settings. A person who has your friend code can use it to establish a connection. Do not publish the code if you do not want others to use it.
Friend cards do not provide the complete private diary, but sharing an image, report, invitation or other content can disclose information included in that item to recipients and the application you choose for sharing. Recipients may keep or forward copies. Removing a connection or deleting an account does not recall those copies.
Optional reminders are scheduled through device notification features. Reminder text can reveal information such as supplement names or an expected period on a lock screen. Review notification previews and permissions on shared devices.
9. Premium, subscriptions and donations
Where purchases are offered through the Apple App Store, Apple processes the payment and sends purchase or subscription information used to verify access. FitInFlow can store transaction identifiers, plan, renewal or expiration information, trial status and a stable account-linked purchase token. That token is pseudonymous, not a guarantee of anonymity. Referral or complimentary access may also be associated with an account.
Payment providers handle their own payment-method information. Available purchase platforms vary by app version and location. If the website accepts PayPal donations, its provider, information received and purpose must be confirmed in the website-services inventory. Deleting a FitInFlow account is not a way to cancel a subscription managed separately through an app store.
10. Website advertising, analytics and affiliate services
The informational website may display Google AdSense advertising, use Google Analytics through Site Kit, offer Amazon Associates affiliate links, accept PayPal donations, and provide newsletters, contact forms, comments, social links and embedded content when those features are enabled. Advertising and analytics providers may receive cookie identifiers, IP addresses, device information and interaction data. Affiliate and donation providers may receive information when you follow a link or complete a transaction. Website functionality and available privacy controls can vary by page and region.
Website-level scripts, theme integrations, embedded pages and plugins can affect content displayed inside the Tracker or an app WebView. The repository alone does not establish that those surfaces are free of advertising or analytics. We therefore do not make that blanket claim in this draft.
Depending on the technology and applicable law, advertising disclosures may qualify as a “sale,” “sharing,” or targeted advertising even when no money changes hands. You can use applicable cookie or privacy controls presented on the Site and contact us to exercise available opt-out rights. We do not claim that a particular browser signal is honored unless supported by the live configuration.
11. Who may receive information
Recipients can include hosting, infrastructure, security, backup and email providers; the optional identity, product, image, code-delivery and AI services described above; purchase platforms; people or applications you choose for sharing; and verified website advertising or analytics services where active. A provider’s own permitted uses depend on its role and the applicable terms and contract.
Information may also need to be disclosed in response to valid legal process or to investigate fraud, abuse or threats, subject to applicable law. In a business transfer, information may be transferred subject to applicable law and appropriate notice.
We do not intentionally sell private Tracker diary records or use reproductive-health entries to target advertising. Information may nevertheless be disclosed to processors and services needed for the features you select, as described in this policy.
12. Security and access
The reviewed code includes password hashing, account-based access controls, rate limits and encryption of the stored cycle record using server-controlled keys derived from WordPress salts. That cycle encryption is not end-to-end encryption and does not prevent authorized server-side processing or access by a person with the necessary server credentials and keys. Backups containing both the database and server configuration require protection.
Tracker photos are excluded from certain public listings and stored under difficult-to-guess paths. Tracker photos are stored in a folder the web server does not serve directly. FitInFlow shows each photo only to a signed-in person who is allowed to see it: your photos to you, and your current profile photo also to your accepted friends and to people you have sent a friend request. Anyone else, including someone who is not signed in, gets a “not found” response. Treat image and export links as sensitive.
HTTPS encrypts a connection in transit; it does not make stored information anonymous or inaccessible to the operator and service providers. Our safeguards may change as infrastructure and security needs evolve. No system is completely secure. We will handle any required incident notifications according to applicable law.
13. Retention, exports and deletion
Tracker records remain available until removed through supported controls or an applicable account process. Retention can differ for account records, uploaded files, transaction information, security records, support messages and backups. We do not promise a uniform deletion deadline for backups, server logs or third-party records. We retain information for as long as reasonably necessary for the described purposes, legal obligations, security, dispute resolution or applicable backup cycles, and review deletion requests under applicable law.
Settings includes import/export and data/account deletion functions. Export formats contain different categories; an export is not necessarily a copy of every item held by every service. Unlock a protected cycle record when necessary before making an export. Downloaded exports and copies you share are outside the live account’s deletion controls.
To request account deletion: use Settings, Delete my data or account, Whole account, and confirm. If you cannot sign in, contact the privacy address above and describe the request without sending unnecessary health information. We may need to verify account ownership.
The reviewed deletion code removes specified live Tracker records and, for whole-account deletion, the WordPress user. Shared product records can remain without the contributor association, and messages or shared copies held by other people may remain. Partial data deletion is not identical to deleting the WordPress account. Removal from backups, logs, outside services and legally retained records depends on the confirmed retention and deletion process; this draft does not promise immediate deletion everywhere.
14. Choices and privacy requests
You can edit supported account and diary fields, manage sharing, remove friends, change permissions, clear device storage, export supported records and use deletion controls. Disconnecting a health source or changing a permission does not automatically erase earlier imports or copies already shared.
Depending on the law that applies, you may have rights to access, correct, delete or obtain a copy of personal information, restrict or object to processing, withdraw consent, opt out of certain disclosures or targeted advertising, and appeal a denied request. Contact the privacy address with the subject “Privacy Request.” We may ask for proportionate identity verification and will respond within the time required by applicable law. Exceptions and permitted extensions may apply.
To submit a request or appeal a decision where applicable, email fitinflow@gmail.com. Include the email associated with your account and the type of request, but do not email sensitive diary details or passwords. We will respond within applicable legal timeframes, subject to identity verification and lawful exceptions.
15. Consumer health data
Nutrition, activity, reproductive and sexual-health records and related inferences may qualify as consumer health data under state law. Where applicable law requires separate notice, consent, withdrawal or other rights for this information, those requirements apply in addition to this policy. Creating an account or merely reading a policy does not replace legally required consent. Contact us at fitinflow@gmail.com to request information about applicable consumer health data rights.
16. HIPAA, other health privacy laws and breach notification
HIPAA status. FitInFlow is offered as an independent consumer wellness and nutrition tracking service. It is not offered as a health plan, healthcare clearinghouse or HIPAA-covered healthcare provider, and it is not currently offered on behalf of a HIPAA-covered entity as its business associate. Accordingly, health information you enter in FitInFlow is generally not protected by the federal Health Insurance Portability and Accountability Act (HIPAA) solely because it concerns your health. If our role or services change, we will reassess applicable obligations and update our disclosures.
Other protections. The absence of HIPAA coverage does not mean that health information is unprotected. Federal consumer protection requirements, including the Federal Trade Commission Act and, where applicable, the FTC Health Breach Notification Rule, may apply. California privacy and data-security laws and other states’ consumer health data laws may also apply depending on our activities and your location. We will assess and respond to privacy requests and security incidents under the laws that apply to the particular circumstances.
Security incidents. If we discover unauthorized access to or disclosure of personal information, we will investigate and take appropriate protective steps. Where legally required, we will notify affected individuals and relevant authorities, including the Federal Trade Commission where its Health Breach Notification Rule applies. Not every incident triggers the same notice requirements, and this policy does not promise a fixed notification deadline where none is legally established.
Health-data choices. Health and reproductive-health information can be especially sensitive. We describe available access, correction, export, sharing, consent and deletion choices in this policy. Where a separate consumer health data notice or specific consent is legally required, that notice and consent process must be provided in addition to this general Privacy Policy.
17. International users and children
Information may be processed where the operator and its service providers operate. Where required, we apply legally required transfer and processing protections; we do not represent that all information remains in the United States. Where sensitive-data consent is required, provide the specific notice and choice before the relevant processing. Withdrawal affects future processing as applicable, not every legal duty or earlier lawful action.
The Tracker is intended for adults age 18 or older. That policy is not a statement that age verification is implemented. If you believe a child has supplied information, contact us. The operator must establish an appropriate response under the laws that apply.
18. Changes and contact
We may update this policy as our practices or legal obligations change. The date at the top identifies the latest published revision. Where required, we will provide additional notice or obtain consent before materially different processing.
Privacy questions: fitinflow@gmail.com. FitInFlow is independently operated by an individual based in California, USA.