Türkçe

Privacy policy

Last updated 2 September 2026 · web-only sections 14 October 2026

FitOn is a tracking app that puts a coach and an athlete on the same record. The sections below describe what the app actually collects, who can see it and how it is deleted. What we do not collect is listed too.

Account details

• First name, last name, email address and role (coach or athlete).
• Your password is never stored in readable form, only an irreversible hash of it.
• A six digit verification code is emailed to you when you sign up. The account is not created until the code is confirmed.
• A session record is kept for every device you sign in from. It is deleted when you sign out.

What the athlete enters

• Meal entries, calories and macro values.
• Workout entries, exercise, set, rep and weight.
• Weight, body fat, waist, chest, arm and hip measurements.
• Progress photos. Front, side and back shots are stored on our server.
• Date of birth, gender, height and goal.
• Values for the custom fields your coach defined.

What is read from the Health app

• With your permission six items are read. Steps, active energy, resting heart rate, heart rate variability, weight and sleep.
• The last seven days are read and written to the server as daily totals. Raw samples stay on the device.
• FitOn writes NOTHING back to the Health app, it only reads.
• The iOS permission and your coach seeing the data are two separate things. Allowing the Health app does not mean your coach sees it.
• Health data is never used for advertising or marketing and is never sold.

What the coach enters

• Programs, sessions, lesson packages and attendance records.
• Notes about the athlete and measurements the coach enters.
• Business expense and payment records, and a receipt photo if they add one.

What we never collect

• Location. The app never asks for location permission.
• Contacts, messages, calendar and other apps.
• Advertising identifiers. There is no ad network, third party analytics or crash tracking in the app.
• When scanning a barcode the camera image never leaves the device. Only the scanned number is sent to the server.
• Only the photo you pick is taken from your library, the rest is never read.

Who can see it

• The coach you are connected to, only as far as you allow. Access ends when the connection closes.
• Health permission is per professional. You can allow your trainer and deny your dietitian.
• The master switch for photo sharing starts on. Turn it off and no coach can see them, and while it is on you can still limit it per person.
• Every time a coach looks at your health data it is logged, and you see that on the health screen.
• The team building the app can reach the records through a read only admin tool, for fault investigation and abuse review.

What leaves our server

• Verification and password reset emails are sent through Google’s mail service. Only your address and that code are sent.
• Membership is not sold inside the app. If you pay on the web, card details are handled by Stripe and never reach us.
• Beyond these, your data is not given to third parties and is never sold.

How long it is kept

• Records stay until you delete them.
• When a value changes the old one is archived rather than deleted, so history is not lost. Passwords and session tokens never enter the archive.
• Past records in the coach’s books belong to the business and stay there even after you leave.

Downloading and deleting your data

• On the athlete side the My data screen exports your nutrition, workout, measurement and photo inventory as a single file. No coach approval is needed.
• You can close your account from inside the app with the Delete my account row in your profile. That screen lists exactly what happens.
• On deletion sign in stops, open sessions close, the password hash is cleared and your email address is released.
• Write to our support address for permanent deletion, export or correction of your data.

Not medical advice

• FitOn is not a medical device. It does not diagnose, does not prescribe treatment and does not replace a doctor.
• Calorie, macro and training targets on screen are calculated from the values you or your coach entered.

Where the data is stored

• FitOn’s server and database run in DigitalOcean’s San Francisco data centre in the United States. Records entered from Turkey are stored on this server too.
• DigitalOcean is the infrastructure provider here, the party that hosts your data on our behalf. Records are not passed to any other DigitalOcean service or to third parties.

This website and the coach panel

• This site uses no cookies and writes nothing to your browser. No fonts, scripts or analytics tools are loaded from elsewhere.
• For every request the server writes the IP address, the time and the requested address to its access log. The log is kept for security and troubleshooting and deleted after 14 days.
• The coach panel keeps its session key only in the open tab and it is removed when the tab closes. The accent colour you pick in the panel is stored in your browser and does not identify you.

Contact

• Write to destek@erbeon.com for questions and requests.
• The app and this site are developed by Erbeon Ltd. Registered details: Company no 17220154 · Suite 10842, 5 Brayford Square, London E1 0SG, United Kingdom.

This text was written from what the app actually does. Tell us if you spot a contradiction.