Privacy Policy

Privacy Policy

FitMusc ("we", "us", or "Platform") values the privacy of its users. This Privacy Policy explains how your personal data is collected, processed, stored, and protected. By using our Platform, you agree to the terms described herein.

1. Data We Collect

FitMusc collects the following categories of personal data to deliver its services:

• Identity Information: Name, surname, email address
• Health Data: Height, weight, body measurements (chest, waist, hip, arm, leg), health notes, allergy information, current medications
• Fitness Data: Workout logs, meal plans, supplement schedules, progress records
• Usage Data: Session information, device details, IP address, browser type, access timestamps
• Notification Data: Push notification subscription, notification preferences

2. Purpose of Data Processing

The collected data is processed for the following purposes:

• Creating personalized fitness and nutrition plans
• Tracking your progress and providing analytical reports
• Providing AI-powered suggestions and analyses (meal variations, exercise form tips, progress analysis, AI coaching chat)
• Generating weekly shopping lists and supplement reminders
• Account management and authentication
• Sending reminders via push notifications and email
• Ensuring platform security and improving service quality
• Providing plan sharing functionality (read-only access with user consent)

3. Third-Party Data Sharing

Your data may be shared with the following third-party service providers solely for the purpose of delivering our services:

• Anthropic (Claude AI): Anonymized summaries of your fitness and nutrition data are processed for AI-powered suggestions, analyses, and chat features. Anthropic does not use this data for model training.
• Neon Database (PostgreSQL): Secure cloud database service where all user data is stored. Data is transmitted over encrypted connections.
• Mailjet: Email delivery service used for invitation emails, password reset links, and notifications. Only email addresses and relevant message content are shared.
• Vercel: Infrastructure provider hosting the Platform. Server-side operations and static content run on Vercel.

Your data will not be shared with, sold to, or rented to any third party outside of the purposes stated above.

4. Cookies and Local Storage

FitMusc uses HTTP cookies for session management. These cookies are essential for authentication and session persistence. Push notification subscriptions are stored in your browser's local storage. No third-party analytics or advertising cookies are used. The Platform operates as a PWA (Progressive Web App) and uses Service Worker technology for offline functionality.

5. Data Retention Period

Your personal data is retained for as long as your account remains active. Upon request for account deletion, all personal data will be permanently deleted within 30 days. Data required to be retained for legal obligations (e.g., billing records) will be kept for the duration mandated by applicable legislation. Anonymized statistical data may be retained indefinitely for service improvement purposes.

6. User Rights

Our users have the following rights:

• Request access to your personal data
• Request correction or updating of your data
• Request deletion of your data (right to be forgotten)
• Object to data processing
• Request data portability
• Change your notification preferences at any time
• Revoke access to shared plans at any time

To exercise any of these rights, please contact us using the information provided below.

7. Data Security

We implement SSL/TLS encryption, secure session management, authorization controls, and regular security assessments to protect your data. Database connections are established over encrypted channels. Passwords are stored using one-way hashing algorithms.

8. Contact

For questions or requests regarding our Privacy Policy, please contact us:

FitMusc
Email: destek@fitmusc.com