Privacy Policy

2fit4u (we, us) respects your privacy. This policy explains what personal data we collect, why, and the rights you have under the EU General Data Protection Regulation (GDPR).

1. Data we collect

• Account data: your name and email address.
• Plan data: the information you give us to build your plan — goal, training experience, equipment, body metrics, dietary preferences and any injuries you choose to share.
• Progress data: workouts you log, weekly check-ins and, if you connect them, data from wearables and smart scales (with your explicit consent).
• Usage data: aggregate, anonymised traffic counts from our hosting provider — no advertising trackers and no cross-site profiling.
• Payment data: processed securely by our payment provider (Stripe). We never see or store your full card details.

2. How we use your data

We use your data to create and continuously adapt your training and nutrition plan, to operate and improve the service, to process payments, and to communicate with you about your account. We do not sell your personal data to anyone.

Sensitive data and optional AI photo analysis

Some data you may share — injuries, body metrics and wearable recovery data — can be health-related and is treated as sensitive under the GDPR. We process it only to build and adapt your plan, on the basis of your explicit consent, and never for advertising or profiling.

The physique photo check is entirely optional. If you use it, your photo is sent for a one-time analysis to our AI provider (Anthropic) with your explicit consent; it is not stored on our servers and is not used to train AI models. You can decline this feature, and you can request deletion of any photo or AI assessment, or a full export or deletion of your account data, by contacting info@2fit4u.com.

3. Legal basis

We process your data to perform our contract with you (delivering your plan), on the basis of your consent (e.g. connecting a wearable), and for our legitimate interests in running and improving the service.

4. Who we share data with

We share data only with trusted processors who help us run the service, under data-processing agreements — they may only use it to provide their service to us. We never sell your personal data.

• Vercel — website hosting & delivery.
• Supabase — secure account and database storage.
• Resend — sending account and plan emails.
• Stripe — payment processing (we never see your full card details).
• Anthropic — powering the AI coach (your questions are processed to generate answers).

Cookies

We use only essential cookies to keep you signed in and remember your settings (such as light or dark theme). We do not use advertising or cross-site tracking cookies.

5. Your rights

You have the right to access, correct, export or delete your data, to restrict or object to processing, and to withdraw consent at any time. To exercise any of these, email info@2fit4u.com.

6. Retention & security

We keep your data only as long as your account is active or as needed to provide the service and meet legal obligations. We protect it with industry-standard security measures.

7. Children

2fit4u is not intended for anyone under 16. We do not knowingly collect data from children.

8. Changes

We may update this policy from time to time. We'll post the new version here with an updated date.