FitVen — Privacy

Who is responsible

FitVen is run by a private individual rather than a company, so there is no CVR number.

Sebastian Dalbjørn
Ørnegårdsvej 61, 1. th.
2820 Gentofte
Denmark

Anything about your data — a copy of it, a correction, having it deleted, or a complaint — goes to zhadowseb@gmail.com.

What FitVen stores about you

Your email address and password, used to sign in.

Your profile: display name, username, an optional short bio, an optional photo, your birth year, and — if you choose to give it — your sex. Your sex and birth year are only used so that leaderboards can be split into men and women and into age groups. Neither is ever shown on your profile, but somebody who picks Men, Women or an age group on a leaderboard can see whether you are in it. You can clear your sex at any time in Edit profile.

Your training: programs, workouts, exercises, sets, weights, repetitions, personal records and the notes you write on them, the split of workouts you choose to rotate through, and how each workout was started — from a program, from a recent workout or your split, in the calendar, as an empty workout, or copied from another workout.

Exercises you make yourself: the name, the muscles, the equipment, the weight mode, a short description, the steps and — if you add one — a video and a still frame taken from it. They are kept with your account, so they come back on a new phone. The shared exercises you save, the ones you add a copy of, and the ones you report are stored too.

Centres: the centre you choose as yours, or else the one you have trained in most over the last 90 days; the centre each workout was done in; and the lifts from those workouts that go on a centre's leaderboard.

Health data: sickness and injury entries you record, heart rate measured from a chest strap or watch, the route, distance and steps of the walks you track with FitVen, and the location and route of runs you tracked with an earlier version of FitVen. A walk's route, distance and steps stay on your phone; only the walk itself, with its date and time, is stored with your account like any other workout - unless you post the walk to your feed (see below).

Social: who you follow, who follows you, who you have blocked, the people and posts you report, the workout posts you publish and the posts you like.

Music: if you connect Spotify and turn on sharing, the name of the track and the artist playing during a workout is saved with that workout.

Feedback: what you write when you send us feedback, and the version of the app it was sent from.

App use: when you last opened the app, whether that was on an iPhone or an Android phone, and which version of the app it was. It is saved at most once an hour, and it is how the developer counts how many people use the app and which versions are still in use.

Notifications: the notifications you have been sent, and a push token identifying this device so they can reach it.

Health data and why we ask

Sickness entries, heart rate, route data and daily steps are health data. European law treats health data as a special category and does not allow it to be stored on the basis of an ordinary legitimate interest — it needs your explicit consent, which is what the screen asking you to accept this policy is for.

You can withdraw that consent at any time by deleting your account, which removes everything listed above. There is no way to keep the account and withdraw consent separately, because the app has no use without this data.

Where it is stored

Training and profile data is stored on Supabase in the eu-north-1 region, in Sweden, inside the EU.

Push notifications are delivered through Expo's notification service, which means a notification's title and text pass through Expo's servers on the way to your phone.

Location is read in two cases, and only if you allow it. Once when you start a workout, to find the centre you are in. And continuously while a walk is running, to draw its route and measure its distance: FitVen stops reading it when you pause or finish the walk, when the app goes to the background and when you close the app, and does not follow you there. A walk's route stays on your phone and is deleted with the walk. It is only sent to FitVen's server if you post the walk and choose to share its route, and then only as a simplified copy with the first and last 200 metres left out. FitVen does not track runs; the routes of runs tracked with an earlier version stay stored with those runs. For a centre, your position is sent to FitVen's server to look the centre up and is not kept there: only the centre is stored with the workout. Your phone keeps the position with the workout, so the lookup can be tried again if it failed.

While a walk runs, FitVen also reads your phone's step counter (Motion & Fitness on an iPhone, Physical activity on an Android phone), only if you allow it, to count the walk's steps and your cadence. The count stays with the walk on your phone, unless you post the walk.

Your daily steps are read from Apple Health, Health Connect or your phone's step counter on your phone, and the number for each day is stored on Supabase with the rest of your account, where only you can read it. It is not shared with other people, not used for advertising and not used for anything but showing it to you. On an Android phone you can also let FitVen read the walks you started on a watch or in a health app, from Health Connect: when each walk started and how long it lasted, how far it went, the steps in it and, only when you ask for it on that walk - Health Connect asks you each time - its route. FitVen asks you before it adds a walk, and only reads; it never writes anything to Health Connect. The route, distance and steps stay on your phone, and only the walk itself, with its date and time, is stored with your account like any other workout. It is switched off until you switch it on, and you can switch it off again; the walks already added stay.

You can stop FitVen reading your steps at any time in Apple Health, in Health Connect or in your phone's settings; the days already stored stay until you delete them by deleting your account.

Exercise videos are stored on Supabase with the rest of your data.

The map that draws your route is Google Maps. Drawing a route means asking Google for the map of that area, so Google can see roughly where you ran or walked, even though the route itself is never sent to them.

If you connect Spotify, the app asks Spotify what is playing while a workout is running. Your Spotify login stays on your phone.

Those four — Supabase, Expo, Google Maps and, if you connect it, Spotify — are the only outside services FitVen uses. There is no analytics, no advertising, no crash reporting, and no mailing list.

How long it is kept

Your account data is kept for as long as the account exists.

Notification history is kept for 14 days and then deleted automatically.

When you delete your account, everything is removed immediately. There is no grace period and no backup copy you can be restored from.

There are no database backups today, so nothing survives a deletion anywhere. If backups are turned on later this section has to say how long one is kept, because deleted data lives on inside a backup until it expires.

Who can see your data

Anyone signed in to FitVen can see your profile: your display name, username, photo and bio, the centre you train at, how many people follow you and how many you follow, how many workouts you have finished and how many you did in each of the last twelve weeks, and your best lift in bench press, squat and deadlift. Your email address, your birth year and your sex are never shown to anyone.

The workout posts you publish are shown to the audience you choose for each of them, together with the centre the workout was done in. A post of a walk contains its distance, its time and its steps and - only if you leave "Share route" on - a simplified copy of its route. FitVen leaves out the first and last 200 metres of the route, so the post does not show where the walk started or ended; the exact route and the positions it was made from never leave your phone. You choose for each post, and in the post settings what the switch starts as.

When you like a post, its author is told that you liked it, with your name and photo, in their notifications, and as a push notification if they have notifications on.

People who follow you can also see whether you are training today, how many records you set in today's workout, and — if you share music — what you are listening to during a workout.

When a workout is matched to a centre, your best lifts from it go on that centre's leaderboard, where anyone signed in can see them with your name and photo. Your best lift of an exercise at any centre also appears on the national leaderboard.

If you have finished a workout at a centre in the last 90 days, you also appear in its categories, and in those of its region and country. Anyone signed in can see there, with your name and photo, how many workouts you have finished this week, month or year, how many weeks in a row you have trained and when you last did; the heaviest weight you have lifted in bench press, squat and deadlift, and their total; which exercise your estimated best has risen most in over the last 30 days, with that estimate before and now; and your most pull-ups, dips and push-ups in one set.

An exercise you make is private until you choose to share it. A shared exercise — its name, description, steps, muscles, equipment, video, and your name and photo as the person who made it — can be seen by anyone signed in, and they can add a copy of it to their own exercises. A copy never includes your sets, and you can stop sharing at any time; copies already taken stay with the people who took them. Three reports from different people hide a shared exercise until it has been looked at.

A shared exercise shows figures drawn from everyone who uses it: how many use it, how many of them train at the viewer's centre, and the typical sets, repetitions and weights. If you use an exercise somebody shared, your sets with it count towards those figures. They are only ever shown as totals, never with a name, and the spread of weights only once at least 20 sets have been logged.

Blocking someone removes the follow in both directions, takes you out of each other's search results and leaderboards, and hides your profiles, your posts and your shared exercises from each other.

The developer's own overview of the app counts things only as totals — how many trained this week, how many came back, how many use each feature, which versions are in use — and never lists who.

The person responsible for FitVen can read the database directly through the Supabase dashboard. That access exists so the app can be run and repaired, and it is not used to look at individual training data without a reason such as a fault you have reported.

Your rights

You can see and correct your profile in the app.

You can delete your account, and everything in it, from your profile — Account, then Delete account.

You have the right to a copy of your data, to have it corrected, to have it erased, and to complain to Datatilsynet if you believe it is being handled wrongly.

For a copy of your data, write to zhadowseb@gmail.com and it will be put together by hand; the app has no export button. You will have an answer within one month, which is the deadline the regulation sets.

Children

You have to be at least 13 to use FitVen.

Thirteen is the age at which Danish law lets you consent to your own data being processed. Below it a parent has to give that consent, and FitVen has no way to ask a parent or to check that one answered, so accounts for younger children cannot be created lawfully here.