fit witha plan.Back to home ↗

THE PRACTICAL DETAILS / 6 SEPTEMBER 2026

Your fitness. Your information.

Here is what we use, why we use it, and the choices you have.

What you share

We store your account name, email and password hash; the profile and goals you enter; your plans, workouts, food logs, check-ins and optional photos; and your coach conversations. Fitness records can reveal health information. You choose whether to provide optional details and photos.

We also record sign-in security events, subscription references, service requests and technical information needed to protect and operate the app. Stripe handles your payment details; we do not store your full card number.

Why we use it

We use account information to provide your membership and respond to requests. We use explicit health-data consent to build your fitness plan and connect your training, food and progress records. We keep necessary billing records for legal and accounting obligations, and limited security records to prevent misuse and protect the service.

We do not sell your personal information or use it for targeted advertising. We do not make credit, insurance or employment decisions about you.

AI is a separate choice

External AI is off until you opt in. With your permission, OpenAI receives relevant parts of your fitness profile, training, food and check-in history, optional progress photos for photo feedback, and the question or feedback request. For photo feedback, we send up to four resized images directly from private storage; we do not create a public photo link. It helps explain your plan and respond to you. Training calculations and saved plan changes follow the app’s rules.

OpenAI does not use API inputs and outputs for model training by default. Requests ask OpenAI not to store response state; abuse-monitoring records may still be retained for up to 30 days, or longer where legally required. This is not a zero-retention service. OpenAI’s data controls.

You can turn AI sharing off in privacy choices. This stops new requests. A request already in progress may still be sent or finish; information already sent cannot be recalled. Your existing records and saved responses remain until you delete them. Workout logging and rule-based plans work without external AI.

Who helps deliver the app

Our hosting provider stores the application and fitness records. Stripe processes payments. Our email provider delivers account messages. Inngest coordinates background jobs. OpenAI handles opted-in AI requests. Open Food Facts provides public packaged-food information when you submit a food-name search or look up a barcode. We send the search words or barcode and selected country, without your account identity or fitness profile. Public product results are cached; search-cache records hold product references and a search fingerprint, not your identity or raw search text.

Some providers process information outside the UK. Applicable provider agreements and transfer safeguards govern those transfers. Choosing AI does not promise UK-only storage. Optional photos are private account files; they are not publicly listed.

How long records stay

Your fitness records remain while your account is open so that you can use your history. You can export your records or request erasure through account data controls, including after a trial or subscription ends.

Account deletion removes identity and coaching content from the app and revokes active sessions. Minimal closed-account, billing and deletion records may remain where needed for legal obligations, disputes and proof of completed requests. Payment-provider records have separate retention requirements. Backup copies are removed through the backup retention cycle; they are not used to restore deleted accounts into active service.

Unfinished food and workout drafts may be saved on your device. Food drafts expire after 24 hours and workout drafts after seven days; expired drafts are discarded when reopened. A successful save clears that draft. Signing out or opening your confirmed erasure receipt clears the app’s food and workout drafts on that browser. Server erasure does not clear downloads, other devices or copies your browser may retain. On a shared device, sign out and clear browser storage when you finish.

Your choices and rights

You can access and correct your information, download it, ask for deletion or restriction, and object where we rely on legitimate interests. You can withdraw health-data consent and erase coaching information without cancelling billing first. Withdrawing consent does not change the lawfulness of earlier processing.

Manage privacy choices or download and manage account data. Contact us for a request the controls cannot handle. You may complain to the Information Commissioner’s Office.

Cookies and device storage

We use necessary sign-in and security cookies. The installable app stores a public offline page and icons; it does not cache your authenticated pages or API responses. Your device may keep unfinished food and workout drafts. No advertising cookies are used.

Who runs the service

Nathan Procter, sole trader.

12 Manorfield Road, Driffield, YO25 5JE, United Kingdom
support@fitwithaplan.co.uk
Membership termsPrivacyContact