Privacy Policy
Last updated: July 9, 2026
What we collect
- Account: your email address (for magic-link sign-in) and the display name you choose.
- Challenge data: the challenges you create or join and the progress you log (activity, amount, date).
- Chat:messages and photos you post in a challenge's chat.
- Notifications: if you enable nudge alerts, a push subscription token for each device.
- Usage: anonymous, cookie-free page analytics (page views, no personal profiles).
- Marketing (optional): only if you opt in, we may email you news about FitMates. You can turn this off anytime in Settings, and we record when consent was given.
Who can see your data
Your progress, messages, and photos are visible only to members of the same challenge. This is enforced at the database and storage level, not just in the interface. Challenges are joinable only with their invite code.
What we don't do
- We don't sell your data. Ever.
- We don't show ads or share data with advertisers.
- We don't track you across other sites.
Where your data lives
FitMates runs on Supabase (database, authentication, file storage) and Vercel (hosting). Sign-in emails are delivered via Resend. Each processes data only as needed to run the service.
Your choices
- You can undo progress entries you logged.
- You can turn push notifications off per device in Settings at any time.
- You can request deletion of your account and all associated data by contacting us.
Contact
Questions or deletion requests: support@fitmates.app.