FitCheck Global Privacy Policy

1. Introduction

ALMAREN LABS LLC ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use the FitCheck app and web services. We have designed this policy to align with global privacy standards, including the GDPR and CCPA, as well as app store requirements.

2. Information We Collect

To provide you with our fitness and nutrition services, we collect the following data:

Identity & Account Data: Username, email address, secure encrypted passwords, and notification preferences.

Health-Adjacent / Sensitive Data: Gender, age, height, weight, physical activity level, fitness goals, and optional profile pictures.

Usage & Community Data: Workout logs, meal entries, custom foods, forum posts, replies, likes, and follows.

Technical Data: Device notification identifiers (push tokens), limited diagnostic or crash-related information that may be collected by your device or app distribution platform (such as Apple or Google) as part of normal store or operating-system services, and standard server connection logs.

Advertising Data (free plan only): When we show advertising, our advertising partner may collect your device's advertising identifier (Apple IDFA or Android Advertising ID), IP address and the approximate location derived from it, device and operating-system information, and events such as which ads were shown, viewed, or tapped. This data is collected by the advertising SDK on your device and is transmitted to the advertising partner. Third parties may also place identifiers on your device as a result of serving ads.

Subscription Data (if you purchase a plan): The platform you purchased on (iOS or Android), the product you purchased, your subscription status and expiry date, whether auto-renewal is on, whether the purchase was made in a test or production environment, and the store's transaction identifier (Apple originalTransactionId / Google purchaseToken). We keep these identifiers because they are the only way to ask Apple or Google whether your subscription is still valid.

We never receive your payment details. Card numbers, billing addresses, and similar payment information are handled entirely by Apple and Google and are never sent to us.

3. How We Use Your Data

We process your data for the following purposes:

Service Provision: To create your account, sync data across devices, and maintain session security.

Algorithmic Calculations: We use your age, height, weight, and gender to calculate personalized metrics like BMI, BMR, and daily calorie/macronutrient targets. This automated processing is a core feature of the app to help you reach your goals.

Community Safety: To moderate user-generated content and manage blocked user lists.

Communication: To send necessary transactional emails (e.g., password resets).

Advertising: The free plan is supported by advertising. To show ads, the data listed under "Advertising Data" above is processed by our advertising partner. Paid plans remove advertising entirely; while a paid plan is active, no advertising SDK request is made for your device.

Note: We do not sell your personal data to data brokers.

Your health and body data is never used for advertising. Your gender, age, height, weight, activity level, fitness goals, workout logs, and meal entries are never sent to advertising networks and are never used to target or personalise ads. This is a deliberate product decision, not only a legal minimum. Advertising is based on the device-level data described above, not on what you record in FitCheck.

Who can see your information: Data you provide for private tracking and calculations (including health-adjacent profile fields and your personal workout/meal logs) is processed for your account and is not shown to other users through those private features. Community features (for example, forum posts and replies, and any profile or content you choose to share publicly) may be visible to other users as designed by those features.

4. Data Storage and Third-Party Subprocessors

Your primary account data and logs are securely hosted on cloud servers located in Sweden (European Union). We use trusted third-party providers for specific functions:

• Cloud hosting and database management.
• Transactional email infrastructure.
• App store platforms (Apple, Google) for distribution and basic analytics.
• Apple and Google as the payment service providers for in-app purchases and subscriptions. They process your payment and notify us of changes to your subscription status (renewal, cancellation, refund).
• Advertising and ad measurement: Google AdMob (Google Ireland Limited / Google LLC), used to serve and measure advertising on the free plan. This involves a transfer of the data listed under "Advertising Data" outside the European Economic Area, including to the United States, under the transfer mechanisms offered by that provider.

5. Your Privacy Rights

Depending on your location (e.g., EU, California), you may have rights regarding your data:

Access & Portability: You may request a copy of your data by contacting us at the email below (we will respond within a reasonable time).

Erasure: You can permanently delete your account and associated personal data using the in-app "Delete Account" feature (Profile -> Account Settings). See also: https://www.almarenlabs.net/fitcheck/account-deletion

Correction: You can update many details directly in the app.

California (CCPA/CPRA): If you are a California resident, you may have additional rights, including the right to request information about our practices and, where applicable, to limit certain uses of sensitive personal information.

We do not sell personal information for money. However, showing personalised advertising may qualify as "sharing" for cross-context behavioral advertising under the CPRA. You can opt out of this at any time:

1. In the app, open Profile → Settings → Privacy choices and turn it off; or
2. Email info@almarenlabs.net with the subject "Do Not Sell or Share My Personal Information".

If you opt out, you will still see advertising on the free plan, but it will be non-personalised. We do not knowingly sell or share the personal information of anyone under 16.

EEA / UK (GDPR): If you are in the European Economic Area or the UK, you may have rights including access, rectification, erasure, restriction, objection, and data portability. Contact info@almarenlabs.net. You may also lodge a complaint with your local supervisory authority.

6. Advertising and Your Choices

Advertising funds the free plan. How your consent is handled depends on where you are and which device you use:

European Economic Area, United Kingdom and Switzerland. Before any personalised advertising is served, we present a consent message provided through a Google-certified Consent Management Platform integrated with the IAB Transparency and Consent Framework. You decide whether to allow personalised advertising. You can change or withdraw your choice at any time in Profile → Settings → Privacy choices, which re-opens the same consent screen.

iOS (all regions). Apple requires your permission before an app may access the device advertising identifier for tracking. If you decline the App Tracking Transparency prompt, we do not access the identifier and only non-personalised advertising is shown.

Türkiye. Personalised advertising is served only if you have given explicit consent. Without consent, advertising is non-personalised. You can withdraw consent at any time in Profile → Settings → Privacy choices.

Everywhere else. You can turn personalised advertising off in Profile → Settings → Privacy choices, and you can reset or limit the advertising identifier in your device settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Privacy → Ads).

Removing advertising entirely. Every paid plan removes advertising. While a paid plan is active, no advertising is requested or displayed.

Advertising is served by Google AdMob. Google's own handling of this data is described at https://policies.google.com/technologies/partner-sites

7. Data Retention and Security

We retain your data as long as your account is active. When you delete your account, your personal data is securely purged from our active databases. We use industry-standard encryption for data in transit and secure session management for logged-in users.

Subscription event history. Records of subscription events (renewal, cancellation, refund, payment issues) are kept for 90 days and then deleted automatically. We keep them for this limited period so that we can answer questions such as why access to a paid feature changed, and to handle billing disputes.

Deleting your account takes priority over these retention periods. If you delete your account, your subscription records and subscription event history are deleted with it, even if the 90 days have not yet passed. Nothing tied to your account is kept behind after deletion.

8. Contact Us

If you have questions about your privacy or wish to exercise your rights, please contact us at:

Email: info@almarenlabs.net
Address: ALMAREN LABS LLC, 8 The Green, STE 23103, Dover, DE 19901, USA