Afitpilot®

Privacy Policy

Learn how we protect your privacy and handle your personal data with transparency and care.

Privacy Policy

Data Collection and Processing

Afitpilot Lite collects and processes the following personal and health-related data:

  • Basic Details: Name, email, phone number, age, gender, height, weight
  • Training Information: Goals, training frequency, preferred training times, equipment available
  • Health Data: Injury history, medical notes, fitness level
  • Training Logs: Workout sessions, performance data, feedback
  • Behavioral Signals: Patterns derived from your interactions with the app (see Psychological Profiling section below)

Purpose of Processing

Your data is processed exclusively for:

  • Generating personalized training plans through AI systems
  • Creating adaptive training programs based on your progress
  • Providing coaching services and recommendations
  • Improving the quality of training plans (without using your data to train AI models)
  • Personalizing coaching communication style based on your preferences (see Psychological Profiling section)

Data Processing Details

  • AI Processing: Your training plans are generated using various AI models via OpenRouter, our API routing provider. Before processing, your data is anonymized - personal identifiers like names are removed and replaced with anonymous IDs
  • Data Location: Your data is stored in Firebase (Google Cloud) within the European Union
  • Data Security: All data is encrypted in transit and at rest
  • AI Training: Your data is NOT used to train AI models. Our AI providers do not use API data for model training
  • Zero Data Retention (ZDR): Since February 2026, we route all AI requests through providers with Zero Data Retention policies. This means your data is processed in memory only and never stored by the AI provider

Third-Party Services

We use the following third-party services to provide our app:

  • Google Firebase: Database storage and authentication (EU region)
  • OpenRouter: API routing service that connects us to various AI providers. OpenRouter acts as a data processor under GDPR and maintains Data Processing Agreements (DPAs) with both us and their upstream AI providers. OpenRouter supports Zero Data Retention routing to ensure your data is not stored after processing.
  • AI Providers (via OpenRouter): We use multiple AI models for training plan generation, including models from OpenAI (via Azure), Google, Anthropic, and others. All requests are routed through Zero Data Retention endpoints where available.
  • Stripe: Secure payment processing (PCI-DSS compliant)
  • Brevo: Transactional email delivery (workout notifications, EU servers)
  • Google and Facebook (Meta): Optional sign-in. Only used if you choose "Continue with Google" or "Continue with Facebook" (see Signing In with Google or Facebook below)

All third-party services comply with GDPR requirements and have appropriate data processing agreements in place.

International Data Transfers

When you use Afitpilot Lite, your anonymized training data may be processed by AI services via OpenRouter that operate servers outside the European Union. We take the following measures to protect your data:

  • Anonymization: Before any data is sent for AI processing, personal identifiers (names, emails, etc.) are removed and replaced with anonymous IDs
  • Data Minimization: Only the minimum data necessary for generating training plans is transmitted
  • Zero Data Retention (ZDR): We preferentially route requests to AI providers that offer Zero Data Retention endpoints. This means your data is processed in real-time and immediately discarded - it is never stored on the AI provider's servers
  • Contractual Safeguards: We maintain data processing agreements with OpenRouter, who in turn maintains DPAs with upstream AI providers

By using Afitpilot Lite, you acknowledge that anonymized data may be processed outside the EU for the purpose of AI-powered training plan generation. Your identifiable personal data (name, email, etc.) remains stored exclusively within the EU.

Signing In with Google or Facebook

You can create your account or sign in with Google or Facebook instead of a password. If you do:

  • What we receive: your name, your email address and, if you allow it, your profile picture, plus confirmation from Google or Facebook that the account is yours
  • What we use it for: only to create your account, sign you in and keep your account secure
  • What we never receive: your Google or Facebook password, contacts, friends list, posts or messages
  • What we never do: post anything on your behalf or share your training data with Google or Facebook

Google and Facebook process your sign-in under their own privacy policies. You can stop using them at any time by removing AFitPilot in your Google or Facebook account settings; this does not delete your AFitPilot data (see Deleting Your Data below).

Coaches, Invitations and Join Links

AFitPilot lets coaches work with their clients. If you train with a coach:

  • Invitations: a coach can invite you by email. To do this they enter your name and email address, and they may prepare a training program for you before you accept
  • Join links and QR codes: a coach can share a link or QR code that adds whoever uses it to their roster and, for a program link, puts them on that program
  • What your coach can see: once you accept an invitation or join through a link, your coach can see your profile, training plan, logged sessions, the notes you write and your readiness check-ins, so that they can coach you
  • Ending it: you can ask your coach, or us, to end the coaching relationship at any time

If you never accept an invitation, the details your coach entered and any program prepared for you are deleted.

AI Assistants Connected by Coaches

Coaches can connect an AI assistant of their choice, such as Claude, to their own AFitPilot account, and use it to look after their clients and programs in conversation. If you train with a coach who has done this:

  • What the assistant can receive: when your coach asks it about you, the information needed to answer, for example your name, training profile, plan, logged sessions, the notes you wrote about them, your readiness check-ins, the messages you and your coach exchanged in the app chat, and the notes your coach keeps about you
  • What it never receives: your email address, phone number, date of birth or address
  • Who decides: your coach chooses the assistant, decides what to ask it, and is responsible for that use of your data. The assistant processes it under its own terms, not ours
  • What it can do: only what your coach allowed when connecting it. Anything that changes your training plan or profile, adds a note to your timeline, sends you a message, sends an email or uses AI credit is shown to your coach first and only happens once they confirm it. A message sent this way comes from your coach, in your chat with them
  • Disconnecting: your coach can disconnect the assistant at any time, and it loses access immediately

If you have questions about how your coach uses an AI assistant, ask your coach, or contact us at privacy@afitpilot.com.

Connecting your own AI assistant

If your coach allows it, you can connect an AI assistant of your choice, such as Claude or ChatGPT, to your own AFitPilot account:

  • What the assistant can receive: when you ask it, your training plan and program, the notes your coach wrote on your sessions and published about your program, and the sessions and requests you made through it. Never your coach's private notes about you, and never anyone else's data
  • Who decides: you choose the assistant and what to ask it, and it processes your data under its own terms, not ours
  • What it can do: read your plan, log your sessions (after reading your numbers back to you), add training you did outside the plan, and ask your coach for changes. Your coach decides what changes: they can let you swap an exercise for one of the same kind, or move a session within the same week, without asking. It can never change your program, and your coach sees, and can undo, everything it logs, adds, changes or asks
  • Disconnecting: you can disconnect it any time from your settings, and your coach can switch it off. Either way it loses access immediately

Your Rights

Under GDPR, you have the right to:

  • Access: Request a copy of all data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your data ("right to be forgotten")
  • Consent Withdrawal: Withdraw your consent at any time
  • Data Portability: Receive your data in a structured, machine-readable format
  • Object to Processing: Object to certain types of data processing
  • Lodge a Complaint: File a complaint with your local data protection authority

Psychological Profiling for Coaching Personalization

To provide you with a better coaching experience, we analyze your interactions with the app to understand your preferences and communication style. This is done in good faith to improve your training experience.

What We Analyze

We derive behavioral signals from:

  • Session Feedback: Your comments and ratings after workouts
  • RPE (Rate of Perceived Exertion): How you rate workout difficulty compared to prescribed targets
  • Adaptation Requests: When and why you request changes to your training plan
  • Communication Patterns: Length and style of your feedback messages

What We Derive

From this analysis, we create a coaching profile that may include:

  • Coaching Preferences: Preferred level of detail, encouragement style, explanation depth
  • Behavioral Patterns: Adherence tendencies, feedback frequency, workout completion rates
  • Communication Style: Preferred tone and detail level for coaching messages

How This Data Is Used

  • Your profile is used solely to personalize coaching messages and adapt training plans
  • This data is NOT used for marketing, advertising, or shared with third parties
  • This data is NOT used to train AI models

Your Rights Regarding Profiling

  • Transparency: You can view your psychological profile in the app settings
  • Opt-Out: You can disable psychological profiling without affecting core app functionality
  • Deletion: You can request deletion of your psychological profile at any time

Data Minimization

We store processed insights (scores and preferences), not your raw feedback text. Only brief excerpts (up to 100 characters) may be retained for context.

Deleting Your Data

You can delete your account and all your data at any time:

  • In the app: go to Settings and choose Delete Account
  • By email: write to privacy@afitpilot.com from the email address on your account and ask us to delete it

This applies however you signed up, including with Google or Facebook. Removing AFitPilot from your Google or Facebook settings only stops that sign-in method; it does not delete your AFitPilot data, so please also use one of the options above. We delete your data within 30 days of your request, except where the law requires us to keep something for longer.

Data Retention

  • Your data is retained only as long as necessary to provide our services
  • Upon consent withdrawal, your data will be deleted within 30 days
  • Some data may be retained longer for legal compliance purposes

Contact Information

For any privacy-related questions or requests:

Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated through the App or via email at least 14 days before taking effect. Continued use of the App after the effective date constitutes acceptance of the updated policy. If you do not agree with any changes, you may contact us to discuss alternatives or request account deletion before the changes take effect.

Last updated: October 26, 2026