Privacy Policy

Who we are

FitFjord is operated by Mandal Software, org. nr. 927 285 703, Lørenskog, Norway. Contact: hello@fitfjord.com

This policy is governed by the General Data Protection Regulation (GDPR) (EU) 2016/679.

Data we collect

• Account data: email address and name, sign-in provider data when you use Apple or Google, a password hash if you sign up with email, your weekly report email preference, and whether your account has been approved for access.
• Workout data: workouts, sets, plans, and notes you log in the app.
• Body weight: optional body weight entries you log.
• Subscription status: whether you have FitFjord Pro, managed through RevenueCat.
• Device data: basic diagnostics and app performance logs. FitFjord shows no ads and does not track you across other apps or websites.

Special category health data (GDPR Article 9)

Workout logs and body weight entries are health data under GDPR Article 9. We process this data with your explicit consent for the sole purpose of providing the FitFjord service — including workout tracking and body weight logging. You may withdraw consent by deleting your account.

Apple Health and Health Connect

If you turn on Health sync, FitFjord writes your finished workouts and logged body weight to Apple Health or Health Connect on your phone. We do not read data from Apple Health or Health Connect, and nothing from them is sent to our servers. You can turn this off at any time in the app or in your phone settings.

Emails

We send account emails (confirming your email address, password reset) and a weekly workout report. Every weekly report has an unsubscribe link that turns it off with one click.

How we use data

We use your data to authenticate you, sync workouts across devices, process subscriptions, and improve reliability.

No data sales

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

Where data is stored

FitFjord is hosted on Cloudflare infrastructure in the EU. Primary account and workout data is stored in Cloudflare D1 (SQLite).

Data processors

Data processors we use:

• Cloudflare (EU) — hosting, database, API infrastructure
• Google (EU/US) — Sign-In authentication
• Apple — Sign in with Apple, in-app purchases
• SMTP2GO — email delivery (account emails and weekly reports)
• RevenueCat — subscription management

We do not use Anthropic or any other AI provider.

Your rights (GDPR)

If you are in the EEA, you may request access, correction, deletion, or export of your personal data, and object to certain processing.

Right to erasure: you can delete your account in the app (Profile), which immediately removes your account, workouts and body weight entries. You can also email hello@fitfjord.com — we delete all personal data within 30 days of a verified request.

Export: you can download your workout data as a file from the website.

You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no).

California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know what personal data we collect
• Right to request deletion of your personal data
• Right to opt out of the sale of your personal data

We do not sell personal data to third parties.

To exercise your rights, email hello@fitfjord.com. We will respond within 45 days.

Data retention

We retain account data while your account is active. After account deletion, personal data is removed within 30 days. Residual backups may persist for up to 90 days after deletion before being fully purged.

Children

FitFjord is not directed at users under 18. We do not knowingly collect data from children.

Contact

Privacy questions: hello@fitfjord.com