Privacy Policy
FitFlow is a fitness training application. You can use the app on its own, and you can optionally connect it to ChatGPT so the assistant can create and adjust your training plans.
What we collect
- Account data — your email address, an internal user ID, and which sign-in method you used (Google or email and password).
- Training profile — the information you enter about yourself: goal, experience level, sessions per week, session length, available equipment, training location, movements to avoid, focus muscles, and any free-text notes you add.
- Training data — generated plans and sessions, exercise prescriptions, completion records for each set, objectives, and tasks.
- Connection data — when you connect ChatGPT, we store the OAuth client identifier and the fact that you approved the connection.
- Server logs — request path, response status, and user agent, retained by our hosting provider to operate and debug the service.
The app contains no analytics, crash-reporting, or advertising SDKs. We do not collect advertising identifiers and we do not read your contacts, photos, precise location, or data from Apple Health or Health Connect.
What the ChatGPT plugin can see
Only if you connect the plugin and approve the request. Once connected, it can:
- read your training profile, plans, workout history, objectives, and tasks;
- create a new training plan, or update a plan or a single training day.
It cannot read your password or your raw account credentials. You can revoke the connection at any time in ChatGPT settings, and we stop receiving requests from it.
How we use data
- generate and store your training plans;
- show today's session and record what you complete;
- let you review history and progress;
- serve the ChatGPT plugin you explicitly authorized.
We do not sell your personal data, and we do not use it for advertising.
Who processes data for us
- Supabase — database and authentication. Our project is hosted in the ap-northeast-2 (Seoul) region.
- Vercel — hosting for the MCP server and the API.
- OpenAI — only when you connect the plugin; ChatGPT exchanges data with us under your authorization.
- Google — only if you choose Google sign-in.
Retention and deletion
We keep your data while your account exists. In the app, Me → Delete account and data permanently deletes your account and your training data. You can also email us at support@wattflow.net and we will delete it for you.
Health disclaimer
FitFlow is not a medical device and does not provide medical advice, diagnosis, or treatment. Training plans are general fitness suggestions. Consult a qualified professional before starting a new program, especially if you have an injury or a medical condition.
Children
FitFlow is not directed to children under 13, and we do not knowingly collect data from them.
Contact
中文
隐私政策
FitFlow 是一款健身训练应用。你可以单独使用它，也可以选择把它连接到 ChatGPT，让助手为你创建和调整训练计划。
我们收集什么
- 账号信息 —— 邮箱地址、内部用户 ID、以及你使用的登录方式（Google 或邮箱密码）。
- 训练资料 —— 你填写的目标、经验水平、每周训练次数、单次时长、可用器械、训练地点、需要避开的动作、重点部位，以及你补充的文字备注。
- 训练数据 —— 生成的计划与课程、动作处方、每组的完成记录、目标与任务。
- 连接信息 —— 当你连接 ChatGPT 时，我们会保存 OAuth 客户端标识和你已授权的记录。
- 服务日志 —— 请求路径、响应状态、User-Agent，由托管服务商保存用于运维和排查。
App 内没有接入任何分析、崩溃上报或广告 SDK。我们不收集广告标识，也不读取你的通讯录、相册、精确定位，或 Apple Health / Health Connect 中的数据。
ChatGPT 插件能看到什么
只有在你连接插件并确认授权之后。连接后它可以：
- 读取你的训练资料、训练计划、训练记录、目标与任务；
- 创建新的训练计划，或更新计划、更新某一天的课程。
它读不到你的密码或原始账号凭据。你可以随时在 ChatGPT 设置里撤销连接，撤销后我们不再收到它的请求。
我们如何使用数据
- 生成并保存你的训练计划；
- 展示每日课程并记录你的完成情况；
- 让你查看历史与进度；
- 为你明确授权过的 ChatGPT 插件提供服务。
我们不出售你的个人数据，也不将其用于广告。
谁代我们处理数据
- Supabase —— 数据库与身份认证，项目托管在 ap-northeast-2（首尔）区域。
- Vercel —— MCP 服务端与 API 的托管。
- OpenAI —— 仅在你连接插件时；ChatGPT 在你的授权下与我们交换数据。
- Google —— 仅在你选择使用 Google 登录时。
保留与删除
账号存续期间我们会保留你的数据。在 App 内「我的 → 删除账号与数据」会永久删除账号与全部训练数据。你也可以发邮件到 support@wattflow.net，我们代为删除。
健康声明
FitFlow 不是医疗器械，不提供医疗建议、诊断或治疗。训练计划属于一般性健身建议。如有伤病或疾病，开始新计划前请咨询专业人士。
儿童
FitFlow 不面向 13 岁以下儿童，我们也不会在知情情况下收集其数据。