Privacy

Without an account

Everything you record is stored in your own browser, on your own device. It is not sent anywhere. We cannot read it, recover it, or know that it exists. If you clear your browser data or lose the device, it is gone, which is why the app asks you to keep backups.

With an account

If you create one, a copy of your records is stored in our database so it survives a lost phone. That copy holds the same entries you see in the app: dates, the fields you filled in, and your own notes.

We also store your email address, your name, a scrambled form of your password that cannot be turned back into the password, and a random session token so you stay signed in.

What we never do

• We do not sell your information, and we do not share it with advertisers.
• We run no analytics, no tracking pixels, and no third-party scripts. The app makes no network requests except to our own server.
• We do not read your health records. The admin view shows how many entries an account holds, never what is in them, and there is no screen anywhere that opens an individual person's record.
• Our server logs record the request method, the route pattern and the status code. They never contain your entries, your notes or your email address.

What an administrator can see

One administrator account can see a list of registered accounts: the name and email you gave, when you joined, whether you confirmed your address, how many entries you keep, and when you were last active. That is the whole list.

It cannot see what you recorded. Not a symptom, not a measurement, not a note, not even which kinds of things you track. No screen in this product opens someone else's health record, and the database queries behind that page count rows rather than reading them.

Who else is involved

Three companies handle data on our behalf, and only what they need to do their job:

• Vercel serves the site.
• Turso stores the database, currently in the United States.
• Resend sends account emails. They see your email address and the text of the message. We never put health information in an email.

Your choices

• Export. Profile has a button that downloads everything as a file you keep.
• Delete. You can remove any entry in the app. To delete your whole account and its copy of your records, email us and we will remove it.
• Leave. Signing out changes nothing on your device. Your records stay where they are.

Children

FitnessKinda is not intended for children under 16.

Changes

If this notice changes in a way that matters, we will say so in the app rather than quietly updating the date.

Contact

Questions, or a deletion request: hello@fitnesskinda.fit.