Last updated: July 2026
Fitlyra ("the App") is a fitness and nutrition tracker. This policy explains what information we collect, how it's used, and the choices you have. We designed the App so most of your health and fitness data stays on your device rather than on our servers — see the table below for specifics.
| Data | Where it's stored | Why |
|---|---|---|
| Name, email, password, bio | Firebase Authentication / Firestore (our servers) | Create and secure your account |
| Subscription status, plan, receipts | Firestore + RevenueCat | Manage your subscription and entitlements |
| Community chat messages, follows, blocks | Firestore | Power the Community feature; messages are visible to other users |
| Content reports you file or that are filed about you | Firestore (admin-only access) | Moderation and abuse prevention |
| Food & activity logs, weight, water, sleep, meditation, fasting history, progress photos | Your device only — never uploaded | Core tracking features |
| Food photos you snap or upload | Sent transiently to our AI provider for analysis, not stored by us | AI calorie/macro estimation |
| Precise location (GPS) | Your device only, while a workout is active | Distance & pace tracking |
| Motion & step data | Your device only | Step counting, calorie estimates |
| Camera / photo library access | Not uploaded except the specific photo you choose to analyze or post | Snap food photos, scan barcodes, set a progress photo |
When you use AI food-photo estimation, meal planning, or the AI coach, the relevant photo or text is sent to our AI provider (Google, via the Gemini API) to generate a response, then discarded by us. We don't use your content to train AI models. We use Google's paid Gemini API tier, under which Google does not use your submitted content to train their models either — see Gemini API Additional Terms of Service for details. AI output is an estimate and may be inaccurate — it is not medical advice.
We do not sell your personal information, and we do not show third-party ads.
The App is not directed at children and requires users to be at least 13 (or the minimum age in your country). We do not knowingly collect data from children under that age; if we learn we have, we'll delete it.
Server-side data is protected by Firebase security rules and transmitted over HTTPS. We retain account data while your account is active and for a reasonable period after, to comply with legal and billing obligations. On-device data is retained until you delete it or uninstall the App.
Our service providers may process data on servers located in the United States and other countries.
Use the in-app "Report" option on any message, or email abuse@fitlyra.com. We review reports within 24 hours.
We'll update the "last updated" date above when this policy changes, and post material changes in the App.
Questions or requests: support@fitlyra.com
Template notice: this document was generated for the demo build — have legal counsel review it (and confirm the contact emails are real, monitored inboxes) before releasing to the App Store / Play Store.