Privacy Policy

Who we are

FitFjord is operated by Mandal Software, org. nr. 927 285 703, Lørenskog, Norway. Contact: hello@fitfjord.com

This policy is governed by the General Data Protection Regulation (GDPR) (EU) 2016/679.

Data we collect

• Account data: email address and profile information when you sign in with Apple, Google, or email.
• Workout data: exercises, sessions, sets, and preferences you log in the app.
• Photos: machine and meal images you scan. Images are processed by AI to identify equipment or estimate nutrition; we do not use them for advertising.
• Body metrics: optional weight or fitness inputs you provide.
• Device data: basic diagnostics, ad identifiers (free tier only), and app performance logs.

Special category health data (GDPR Article 9)

Workout logs and nutrition data are health data under GDPR Article 9. We process this data with your explicit consent for the sole purpose of providing the FitFjord service — including workout tracking, meal logging, and AI-assisted guidance. You may withdraw consent by deleting your account.

How we use data

We use your data to authenticate you, sync workouts across devices, provide AI coaching features, process subscriptions, show ads on the free tier, and improve reliability.

No data sales

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

Where data is stored

FitFjord is hosted on Cloudflare infrastructure in the EU. Primary account and workout data is stored in Cloudflare D1 (SQLite).

Data processors

Data processors we use:

• Cloudflare (EU) — hosting, database, API infrastructure
• Google (EU/US) — Sign-In authentication, Gemini AI for scan features (Pro users only, when scans are active)
• RevenueCat — subscription management
• AdMob by Google — advertising (free tier users only)

We do not use Anthropic or any other AI provider.

Images uploaded for scanning are processed and not stored beyond the scan session.

Your rights (GDPR)

If you are in the EEA, you may request access, correction, deletion, or export of your personal data, and object to certain processing.

Right to erasure: email hello@fitfjord.com — we delete all personal data within 30 days of a verified request.

California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know what personal data we collect
• Right to request deletion of your personal data
• Right to opt out of the sale of your personal data

We do not sell personal data to third parties.

To exercise your rights, email hello@fitfjord.com. We will respond within 45 days.

Data retention

We retain account data while your account is active. After account deletion, personal data is removed within 30 days. Residual backups may persist for up to 90 days after deletion before being fully purged.

Children

FitFjord is not directed at users under 18. We do not knowingly collect data from children.

Contact

Privacy questions: hello@fitfjord.com