FitFlowCircle — Privacy Policy

11 oct. 2026 ·

Version 2026.10 · Last updated: October 11, 2026. This version replaces version 2026.07.

1. Who we are

FitFlowCircle is operated by FitFlowRecreation LLC, a Florida company ("FitFlowRecreation", "we", "us"). This Privacy Policy explains what personal data we collect when you use the FitFlowCircle app and related services, why we collect it, who receives it, and the choices and rights you have.

FitFlowCircle is a wellness and fitness app, not a medical or health care app, and it is not a HIPAA covered entity. In this policy, "health data" means wellness measurements from the wearable devices you connect. It does not mean medical records.

Contact for privacy questions and requests: contact@fitflowrecreation.com.

2. The data we collect

Account details, such as your email address, your pseudonym and your sign-in information.
Wearable metrics from the devices and health platforms you connect, such as sleep, heart rate variability (HRV), heart rate, VO₂ max and recovery.
Demographic details you provide, such as age and sex.
Location, only through GPS during workouts you start, and only while the workout is active.
Emergency contact phone numbers, only if you choose to add them.
Meal photos you submit for nutrition analysis. They are processed in real time and deleted after analysis.
Purchase and subscription information, described in Section 5.
Device and technical data, such as device model, operating system and app version.
Anonymized analytics about how the app is used.

The mobile app does not use cookies.

3. How we use your data and our legal bases

Providing the app (your account, your scores, the leaderboard and social features): performance of our contract with you.
Processing your health and biometric data, including wearable metrics: your explicit consent.
Analyzing meal photos to provide nutrition information: performance of our contract with you.
Confirming purchases and unlocking the features you paid for: performance of our contract with you.
Keeping the service secure and preventing fraud and abuse: our legitimate interests.
Meeting our accounting, tax and legal obligations: legal obligation.

We do not sell, rent or trade your personal data.

4. Health and biometric data

We process health and biometric data, such as the wearable metrics listed in Section 2, only with your separate and explicit consent. You can withdraw that consent at any time in Settings. When you withdraw it, we erase the related data within 30 days.

We never sell, rent or trade your personal or biometric data.

The Longevity Score and BioScore are informational only. They have no legal or medical effect.

5. Purchases and subscriptions

When you buy a subscription in the app, the payment is handled by Apple (App Store) or Google (Google Play). We do not receive or store your payment card or bank details.

What we process. Your FitFlowCircle account identifier; the product you subscribed to, for example Nutrition AI (monthly); the status and dates of the subscription, such as start, renewal, expiry, cancellation and billing issues; the store used; transaction identifiers; and related billing-event information.

Why we process it. To confirm your purchase and unlock the features you paid for, to restore purchases on a new device, to answer support and refund questions, to meet our accounting and legal obligations, and to prevent fraud.

Who receives it.

Apple and Google process your payment as independent controllers, under their own privacy policies.
RevenueCat, Inc., a purchase-validation provider based in the United States, processes your account identifier and your purchase and subscription information on our behalf, to confirm which subscriptions are active.
Our hosting provider stores the resulting subscription status (see Section 6).
For purchases made outside the app, for example on our website or for organizations, our payment processor, Stripe, receives the information needed to process the payment.

How long we keep it. We keep subscription records while your account is active, and afterwards for as long as tax and accounting law requires.

Deleting your account. Deleting your FitFlowCircle account does not cancel a store subscription. Cancel it first in your Apple Account or Google Play settings (see Section 9.5 of our Terms of Service).

6. Who we share data with

We share personal data only with the service providers (sub-processors) that help us run the app, under contracts that limit their use of it:

Supabase: database, authentication and hosting.
Anthropic: analysis of the meal photos you submit.
Resend: sending emails.
Mapbox: maps.
Expo (EAS): app building and delivery.
RevenueCat: purchase validation (see Section 5).
Apple and Google: payment processing for subscriptions (see Section 5).
Stripe: payment processing for purchases outside the app.

We disclose personal data to authorities only when we are legally compelled to do so.

7. International transfers

Some of our providers are based in the United States. Transfers of personal data to these providers are covered by Standard Contractual Clauses.

8. Security

We protect your data with TLS 1.3 encryption in transit, AES-256 encryption at rest and Row Level Security on our database.

9. Retention and deletion

We keep your data while your account exists. Meal photos are deleted after analysis.

You can delete your account in the app or by emailing us. When you do, we wipe your live data and purge encrypted backups within 30 days. We keep only what the law requires us to keep, such as subscription and accounting records (see Section 5).

You can request an export of your data in the app or by email. We provide it within 30 days.

10. Your rights

Under the GDPR, the UK GDPR and similar laws, you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have your data erased;
receive a copy of your data in a portable format;
object to certain processing;
withdraw your consent at any time, without affecting processing that took place before; and
complain to a data protection authority, such as the CNIL in France, or the authority in your country.

To exercise a right, use the options in the app or email contact@fitflowrecreation.com. We respond within the time the law requires.

11. California residents

If you live in California, the CCPA/CPRA gives you the right to know what personal information we collect and how we use it, to request its deletion or correction, to limit the use of sensitive personal information, and not to be treated differently for exercising these rights. We do not sell your personal information. To make a request, email contact@fitflowrecreation.com.

12. Children

FitFlowCircle is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child under 13 has given us personal data, contact us and we will delete it.

13. Representatives for the EU and the UK

Where the GDPR or the UK GDPR requires it, our representatives for data protection matters can be reached through contact@fitflowrecreation.com.

14. Changes to this policy

We may update this Privacy Policy. We flag significant changes in the app, and where the law requires it we ask for your consent again before they apply to you. The version number and date at the top show when it was last updated.

15. Contact

FitFlowRecreation LLC, a Florida company. Email: contact@fitflowrecreation.com.

FitFlowCircle — Privacy Policy

11 oct. 2026 ·

​

Version 2026.10 · Last updated: October 11, 2026. This version replaces version 2026.07.

​

1. Who we are

FitFlowCircle is operated by FitFlowRecreation LLC, a Florida company ("FitFlowRecreation", "we", "us"). This Privacy Policy explains what personal data we collect when you use the FitFlowCircle app and related services, why we collect it, who receives it, and the choices and rights you have.

FitFlowCircle is a wellness and fitness app, not a medical or health care app, and it is not a HIPAA covered entity. In this policy, "health data" means wellness measurements from the wearable devices you connect. It does not mean medical records.

Contact for privacy questions and requests: contact@fitflowrecreation.com.

​

2. The data we collect

Account details, such as your email address, your pseudonym and your sign-in information.

Wearable metrics from the devices and health platforms you connect, such as sleep, heart rate variability (HRV), heart rate, VO₂ max and recovery.

Demographic details you provide, such as age and sex.

Location, only through GPS during workouts you start, and only while the workout is active.

Emergency contact phone numbers, only if you choose to add them.

Meal photos you submit for nutrition analysis. They are processed in real time and deleted after analysis.

Purchase and subscription information, described in Section 5.

Device and technical data, such as device model, operating system and app version.

Anonymized analytics about how the app is used.

The mobile app does not use cookies.

​

3. How we use your data and our legal bases

Providing the app (your account, your scores, the leaderboard and social features): performance of our contract with you.

Processing your health and biometric data, including wearable metrics: your explicit consent.

Analyzing meal photos to provide nutrition information: performance of our contract with you.

Confirming purchases and unlocking the features you paid for: performance of our contract with you.

Keeping the service secure and preventing fraud and abuse: our legitimate interests.

Meeting our accounting, tax and legal obligations: legal obligation.

We do not sell, rent or trade your personal data.

​

4. Health and biometric data

We process health and biometric data, such as the wearable metrics listed in Section 2, only with your separate and explicit consent. You can withdraw that consent at any time in Settings. When you withdraw it, we erase the related data within 30 days.

We never sell, rent or trade your personal or biometric data.

The Longevity Score and BioScore are informational only. They have no legal or medical effect.

​

5. Purchases and subscriptions

When you buy a subscription in the app, the payment is handled by Apple (App Store) or Google (Google Play). We do not receive or store your payment card or bank details.

Why we process it. To confirm your purchase and unlock the features you paid for, to restore purchases on a new device, to answer support and refund questions, to meet our accounting and legal obligations, and to prevent fraud.

Who receives it.

Apple and Google process your payment as independent controllers, under their own privacy policies.

RevenueCat, Inc., a purchase-validation provider based in the United States, processes your account identifier and your purchase and subscription information on our behalf, to confirm which subscriptions are active.

Our hosting provider stores the resulting subscription status (see Section 6).

For purchases made outside the app, for example on our website or for organizations, our payment processor, Stripe, receives the information needed to process the payment.

How long we keep it. We keep subscription records while your account is active, and afterwards for as long as tax and accounting law requires.

Deleting your account. Deleting your FitFlowCircle account does not cancel a store subscription. Cancel it first in your Apple Account or Google Play settings (see Section 9.5 of our Terms of Service).

​

6. Who we share data with

We share personal data only with the service providers (sub-processors) that help us run the app, under contracts that limit their use of it:

Supabase: database, authentication and hosting.

Anthropic: analysis of the meal photos you submit.

Resend: sending emails.

Mapbox: maps.

Expo (EAS): app building and delivery.

RevenueCat: purchase validation (see Section 5).

Apple and Google: payment processing for subscriptions (see Section 5).

Stripe: payment processing for purchases outside the app.

We disclose personal data to authorities only when we are legally compelled to do so.

​

7. International transfers

Some of our providers are based in the United States. Transfers of personal data to these providers are covered by Standard Contractual Clauses.

​

8. Security

We protect your data with TLS 1.3 encryption in transit, AES-256 encryption at rest and Row Level Security on our database.

​

9. Retention and deletion

We keep your data while your account exists. Meal photos are deleted after analysis.

You can delete your account in the app or by emailing us. When you do, we wipe your live data and purge encrypted backups within 30 days. We keep only what the law requires us to keep, such as subscription and accounting records (see Section 5).

You can request an export of your data in the app or by email. We provide it within 30 days.

​

10. Your rights

Under the GDPR, the UK GDPR and similar laws, you have the right to:

access the personal data we hold about you;

have inaccurate data corrected;

have your data erased;

receive a copy of your data in a portable format;

object to certain processing;

withdraw your consent at any time, without affecting processing that took place before; and

complain to a data protection authority, such as the CNIL in France, or the authority in your country.

To exercise a right, use the options in the app or email contact@fitflowrecreation.com. We respond within the time the law requires.