Your data and choices.

This policy describes Fitness Helper’s iPhone app and this app support website. Each hosted gym has a separate website, database and privacy notice; the gym you connect to controls its membership and booking records. Contact the Fitness Helper team through app support.

On your iPhone

Access and refresh tokens are stored in device-only Keychain storage. Preferences, cached member details, packages, coaches, branches, equipment, bookings and selected workout times are stored locally, with app cache files excluded from device backup. Cookies use a private memory-only jar. The app does not add a cloud-sync backend for these local records.

Logging out removes session credentials and account cache. The last successful email remains as a login hint for that service domain. You can remove it on the login screen. Diagnostic logs in Profile contain bounded request metadata, response structure and errors; they exclude authentication tokens and full API response bodies and are not automatically uploaded. You can clear or share those logs yourself.

Your chosen gym

The app sends your email, login code, session credentials and necessary requests directly to the fitness-service domain you choose. That service receives normal connection metadata and controls its own authentication, account, package and booking data. A public request can discover a redirected canonical domain, which the app remembers locally while retaining the domain you entered in the field. Images may load from the gym’s media hosts. Gym records are not sent to this app support site.

Optional features

Location calculates branch distances on the device and is not sent to our gym server or stored by the app. Apple Maps processes map requests under Apple’s privacy practices.
Calendar access writes session times, coach names and branch addresses to your selected calendar. Your calendar provider may sync those entries. Disable sync in Profile or revoke permission in Settings.
Live Activities show coach, branch and timing information on the Lock Screen, Dynamic Island and supported paired devices. This information can be visible to others near your screen. You can disable Live Activities in Settings.
Phone and WhatsApp open when you choose. A shared QR contains its verification payload, app mark, member ID and session date/time. “Send QR to coach” copies an image to the local clipboard for five minutes, opens the selected coach’s WhatsApp chat and leaves sending to you. “Share QR” opens the iOS share sheet. This support website does not receive or host your real verification QR.

The app does not use HealthKit or need photo-library permission to generate QR images. Location, Calendar and sharing are optional.

This support website

A support request contains your reply email, message, reference number and submission time. It is stored in this website’s separate Cloudflare D1 database and is accessible only to authorized app support staff. We keep support messages for up to 90 days. Use the support form to request earlier removal. Do not submit passwords, OTPs, tokens, cookies or sensitive health details.

Cloudflare provides hosting and security and may process IP addresses and request metadata. Rate limits use hashed identifiers. Operational logs avoid support-message content and credentials. Hosting may process information outside your country. We do not use advertising trackers, sell submitted information or use it for targeted advertising. We may disclose information when legally required or necessary to investigate abuse or protect the service.

Deletion and access

You can initiate gym account deletion from the app’s Profile page for our hosted gym service, or from that gym’s direct account deletion page. See delete your account. Deletion is self-service after sign-in and removes the gym account, bookings, package grants, verification records, associated support messages and session tokens from its active database. Your provider’s separate retention obligations, if any, are explained in its policy.

Deleting the iPhone app removes its local app storage; logout and uninstall do not automatically delete gym-side records or resolve payments and refunds. Calendar events and diagnostics you exported need to be managed separately. Cloudflare may retain security records or database recovery copies for its applicable retention period. Contact the gym for membership, booking, payment and refund questions, and app support for this website’s records.

Gym test mode

The current gym setup does not send login emails. Staff can enable fixed-OTP test mode accepting 123123 for all accounts. Anyone knowing an account email can access it while this mode is on, so use test details only. The gym website shows when this mode is active. Ordinary accounts start without synthetic bookings or package grants; designated demo accounts include sample data.

Children and changes

Fitness Helper is not intended to collect children’s information without any consent required by law. Gym age and parental-consent requirements are set by the gym. Policy changes will be dated here; material changes requiring consent will be presented before they apply.