Privacy policy

What FitMaxx is

FitMaxx is a personal tracker for fasting, food, weight, peptide protocols and Apple Health data. It is built by one person. There are no ads, no analytics vendors and no data brokers.

Who never sees it

Nothing you log is shared with insurance companies, employers or data brokers - there is no one to share it with.

There is no arrangement of any kind with an insurer, an employer, an advertiser or a data broker, and no way for one to buy or request what you log. The only people and services that ever see anything are listed under "Who else sees it", and that list is the whole of it. This is true of a Free account and of Plus.

What is stored

Your account: the anonymous identifier Apple or Google issues when you sign in, and the name and email address you choose to share with the app. Signing in with both on the same email address opens the one account. Your date of birth, if you set it or let a lab report fill it in; it is used only to work out your age on the day of a blood draw.

What you log: meals and foods, fasts, weigh-ins and progress photos, peptide protocols and doses, workouts, blood work and lab PDFs, the goals you set, and your friends list.

What Apple Health provides, once you connect it: weight, height, body fat, lean mass, sleep, step totals, workouts, daily totals of food logged in other apps, resting heart rate, heart rate variability and VO₂ max.

If you turn notifications about friends on, the token Apple gives this phone for push notifications, so a friend request can reach you. It is stored against your account and used for nothing else; turning the switch off or signing out removes it.

If you subscribe to Plus, the identifiers Apple issues for the subscription - its transaction ids, the product, when it renews or ends and whether it was shared through Family Sharing - are stored with your account so the app knows the plan you are on. Apple keeps the payment itself; the app never sees a card or a bank.

If you tap Get FitMaxx on someone’s invite page, the invite code and a scrambled form of your network address, never the address itself, are kept for a day and then deleted, so that if you sign up from the same network the app can ask whether that person invited you. Nothing is applied unless you say yes. Taps are also counted by day and by the link’s channel, with nothing about who tapped. When an invite is applied to your account, the channel it came through, for example a link shared on a social app, is kept with the account.

If you installed FitMaxx from an ad in the App Store, Apple tells FitMaxx which campaign, ad group and keyword it was, whether it was a download or a re-download, or that it was not from an ad, and that answer is stored with your account. Apple never tells FitMaxx who you are, and FitMaxx does not track you across other apps or websites.

All of it is stored by FitMaxx, so that it is there when you reinstall the app or open it on another phone. Photos and PDFs are stored privately and can be read only through your own account.

Apple Health

Health data is read only after you grant permission, and only the types listed above. Weights, workouts, meals and the vitamins and minerals on the label of a supplement you log in FitMaxx are written back to Health so the Health app stays your record.

Health data is never used for advertising or marketing, never sold, and never shared with anyone except as described in "Who else sees it".

Contacts

FitMaxx never uploads your contacts. If you tap "Find friends from contacts", your phone asks iOS for permission, then turns each email address in your address book into a SHA-256 fingerprint - a fixed string of letters and numbers that cannot be turned back into the address - and sends only those fingerprints. No name, no phone number and no address leaves your phone.

FitMaxx compares the fingerprints against the ones it holds for its own users, answers with the people who match, and stores none of what you sent. Nothing about them is kept; they are gone the moment the answer is returned. Only people who have left "Findable by email" on under Settings › Friends & sharing can be matched, and matching only ever lets you send a friend request, which they still have to accept.

If you never tap that button, FitMaxx never asks for contacts permission and never reads your address book.

Who else sees it

When you log a meal from a photo, that photo is sent to an AI provider, Anthropic, to estimate what is on the plate. When you read in a lab report, the PDF is sent the same way so its results can be transcribed. Once a week the coach sends the figures the app shows you - the insight sentences, lift records, your latest lab panel, your goals, the names of your protocols and a summary of the last seven days - never a photo, a raw Apple Health sample or a dose amount. When you ask FitMaxx AI a question, the question and the figures of the screen you asked from are sent the same way - never a photo, a raw Apple Health sample, a dose amount or anything about a fast - and nothing of the conversation is kept unless you send it as feedback yourself, with Send to FitMaxx under an answer. Nothing else about you goes with any of these. Anthropic does not train on this data.

When you scan a barcode, the code alone is looked up in Open Food Facts, a public database. When you search for a food, the words you typed are sent to Open Food Facts and to USDA FoodData Central, a public database run by the US Department of Agriculture, and to Anthropic, the AI provider, so the AI can name the restaurant dish or packaged food they describe. No account details go with any of them.

When you send feedback, the note, the screen you were on, your iOS version and the screenshot if one is attached are stored with your account and emailed to the developer, who reads every one.

The app counts which of its screens you open and how often, by day, so the developer can see which parts are used. Each time the AI is asked something on your behalf - a photo read, a food looked up, a lab report transcribed, the weekly coach, a question to FitMaxx AI - the date, the feature and the size of the request are also counted, so the developer can see what those answers cost. The counts are stored with your account and deleted with it; nothing about what you logged is in them.

Friends. A friend is someone who sent you their code or link and whom you accepted, or the other way round; nobody is suggested and nothing is searchable. Friends see your first name, your streak of days with something logged, and this week’s counts of days logged, workouts and days you met your own protein target. In Activity they also see each workout you save or your watch records, the consistency milestones you reach (never one about your weight or a dose), and any card you post to them yourself from a share button; a card is the only way a weight or a meal is ever shown to a friend, and you can remove a post at any time. Every one of those but days logged can be switched off under Settings › Friends & sharing, and a switch turned off hides the past as well. Friends can give one reaction on a row; there are no comments or messages. Friends never see your doses, photos, sleep, blood work or fasts, and removing or blocking a friend ends what they can see at once. Whoever invited you learns only that someone joined from their link, unless you accept their friend request.

Once, after you first sign in on a phone, the app asks Apple whether the install came from an ad in the App Store: it sends Apple a one-time token that Apple issued to the app, and Apple answers with the ad’s ids or that there was none. No account details go with it.

The developer can see what is stored, in order to run the service, fix problems and answer questions; that access is never used for anything else.

That is the whole list. Nothing else leaves FitMaxx.

Deleting your data

Settings has a "Delete my account" button. It removes every record, photo and PDF tied to your account, at once. Apple Health keeps whatever it already has, because that is yours and lives on your phone.

Signing out keeps your data for when you sign back in.

Contact

Questions about any of this: danoph@gmail.com.