Version: 2026-10-06
Fath Göktuğ Pamukçu. Contact: fitrotaaa@gmail.com. Location: Türkiye, Adana/Çukurova. Postal address: Yüzüncü Yıl Mahallesi, 85012 Sokak, Florya B Blok, Kat: 4, Daire: 7, 01000 Çukurova/Adana, Türkiye
You enter age, height, weight, waist measurements, dietary preferences, allergies, health restrictions, meals, water, workouts, activity preferences, sleep answers, notes and coach messages. The app derives energy estimates and progress summaries. Sources are your entries, selected backups and calculations. This release does not connect to wearables, clinical records or precise GPS location. Food databases supply public food facts, not your health records.
We use the information to provide the planning, tracking and coaching you request. Local records remain in this browser until you choose backup or AI sharing. Health restrictions limit automatic plans rather than diagnose conditions. We do not sell consumer health data, use it to advertise treatments or create health-based advertising audiences.
Read this policy before creating a profile. Cloud backup and AI are separate optional, initially unchecked choices. Backup sends profile, health preferences, meals, measurements, workouts and calendar records through Render to Supabase. Private notes and AI history require an additional backup choice. AI sends the messages you submit through Render to OpenAI; profile context and seven-day progress require separate choices. Your free text may itself contain health data. Signing in with Google or Apple does not select any of these sharing choices.
Render hosts the application and receives service requests. Supabase handles account identity and optional health-record backups. OpenAI receives submitted messages and selected context. Their contracted subprocessors may process this data. An enabled country gateway also processes requests passing through it; its actual provider and locations must appear in the processing-location notice. Google and Apple receive sign-in information when you select them; sign-in alone does not send your meal diary. Paddle receives checkout and subscription/account information for enabled web checkout, including sandbox tests. RevenueCat receives subscription/account information only for separately enabled integrations that use it. Open Food Facts receives a food/brand/UPC query only when external lookup is selected. No provider affiliation or US-only processing is claimed.
Turn off automatic backup in Settings and separately delete the cloud backup in Account. Disconnect AI and turn off the context controls in Coach to stop future sharing. Disabling a switch does not recall old disclosures. Export records in Settings; delete the local profile there or delete your cloud backup/account in Account. Other devices may retain offline copies. Account deletion does not cancel a subscription; cancel it separately in the billing portal. Email fitrotaaa@gmail.com for access, correction, deletion, a copy of records, withdrawal, recipient information or an appeal. We request only information needed to verify the request and never passwords. Authorized agents may contact us; verification may be required. Applicable state rights, response deadlines and appeal rights apply. Washington health-data requests receive a response within 45 days, with one additional 45-day extension when permitted and explained within the first period. Washington appeals receive a response within 45 days; complaints may be submitted at https://www.atg.wa.gov/file-complaint. Nevada health-data requests receive the applicable 45-day response period and any permitted extension. We do not discriminate for exercising privacy rights.
Advertising is optional and governed by a separate choice. FitRota does not pass meals, body measurements or health restrictions as ad-targeting parameters. Advertising privacy lets you stop ad/CMP script loading on this device. Global Privacy Control overrides ad opt-in. Repeat device settings on other devices. Non-personalized ads still process connection/device information; ad scripts may operate in the browser context.
Records stored on your device remain until you delete them. Cloud backups remain until you delete the backup or your account. Offline copies on other devices must be deleted separately. Provider operational and security logs follow each provider's retention policies and may remain after account deletion. OpenAI abuse-monitoring logs may be retained for up to 30 days by default, or longer when required for legal or security reasons. Deleting your FitRota account does not immediately erase provider security logs or temporary caches. Render application hosting is in Frankfurt (EU Central), Germany. The Supabase primary database is in Tokyo, Japan. These regions were supplied by the operator and do not determine all provider or subprocessor processing locations. OpenAI and Google may process information in additional countries under their applicable service arrangements. Cloudflare Workers operates the country-access gateway. Requests pass through Cloudflare before reaching Render. Cloudflare processes IP addresses, network/request metadata and the country derived from the connection; forwarded requests may include sign-in requests, selected cloud-backup records and AI messages. Cloudflare uses its global network, so gateway processing is not restricted to the United States. Application request-body logging is disabled in the supplied Worker configuration. Local storage is not an end-to-end encrypted vault. Cloud backups are not encrypted against provider access. OpenAI store:false does not guarantee no abuse/security logs. Access controls, HTTPS and server-held provider credentials protect online requests; no system can promise zero risk. We investigate incidents and provide individual, regulator and other notices where applicable. You may register a first-class mail notification preference by emailing the operator.