Legal Changelog

We version our legal documents so you can see what changed and when. A change takes effect on the date shown on the document. We do not email account holders about changes. If you have an account, the app asks you to accept updated documents the next time you sign in after the documents you accepted there change; other changes are recorded here only. We describe a new practice before we start it, and we do not use, share or keep information we already hold in a materially different way unless you agree separately.

• v0.10·2026-10-06

  Connected health apps (Health Connect on Android), described before the app offers them. Effective 2026-10-06 on publication. Nothing is read from a connected health app until you choose to connect one in the app; connecting, and sharing any of its data with your coach, are separate choices made there, and accepting updated documents is neither. (1) Consumer Health Data Privacy Policy: section 1 adds data from a connected health app; section 2 adds filling in a day's steps, sleep hours or weight when you have not entered it yourself; section 3 now names Health Connect as a source, replacing the statement that we obtain no data from other apps; section 4 says your coach sees none of it unless you turn on sharing, and then only daily steps, sleep hours or body weight, each separately, from that day, and only that coach, never organisation administrators or other coaches, and that a new coach starts with nothing shared; section 5 says this data is never sent to AI features and that Health Connect is a source, not a service provider; section 6 adds deleting it yourself on the Connected devices screen. (2) Privacy Notice: sections 1.3, 3.1, 4 (kept until you delete it; upload copies deleted within 7 days; any other kind of device data added later is described first, asked for in the app, and kept for no more than 24 months), 5 and 7.5, and a new section 14, Connected Health Apps: what is read and why, a value you type in always comes first, we ask on our own screen before Android's, where it is kept, what we never do with it, that it is not offered to people located in the European Union, the European Economic Area, the United Kingdom or Switzerland, and how to disconnect or delete it. (3) Terms of Service: section 5 adds that coaches may not use the Service as a HIPAA covered entity or business associate, may use client data only to coach that client, and may not make sharing device data a condition of coaching; section 7 adds that device data is shown as recorded and may be incomplete or inaccurate, and that connected health apps are available at no extra charge to every client with an active coach. (4) Wellness Disclaimer section 2: device data is wellness data, not a clinical measurement. (5) Account Deletion: deleting your account removes device data, device connections and sharing settings; Delete my device data deletes only device data. (6) Subprocessors: connected sources such as Health Connect are not subprocessors. The documents you accept in the app change with this version, so if you have an account the app asks you to accept them the next time you sign in. Unchanged and reaffirmed: wellness and fitness data is never shared with advertisers.

• v0.9·2026-10-04

  Account deletion, support requests, and how changes are announced. Effective 2026-10-04 on publication. (1) The Account Deletion page, Privacy Notice section 4 and Consumer Health Data Privacy Policy section 6 now say exactly what deletion removes from chat: every message, photo, file and voice note you sent, quotes of your words, and your name; a 1-1 conversation is deleted in full for both people; in a group chat, messages written by other members stay. (2) Support requests: requests sent to FitTrainr support after 2026-10-04 are kept for 24 months after they are closed, without a link to a deleted account and without the files attached; requests sent on or before 2026-10-04 are deleted with the account. (3) Consumer Health Data Privacy Policy: section 1 lists health-related content in group chats and support requests, and section 4 says members of a group chat see what you post there. Item 3 describes how the Service already works. (4) Change notices: Privacy Notice section 12, Terms of Service section 16, Consumer Health Data Privacy Policy section 8 and the introduction to this changelog no longer promise an email or a waiting period. Changes are posted and recorded here; if you have an account, the app asks you to accept updated documents the next time you sign in after the documents you accepted there change; a new practice is described before it starts; information we already hold is not used, shared or kept in a materially different way unless you agree separately. Price changes keep their 30-day notice (Terms section 4.4). (5) Correction: versions v0.6 to v0.8 said account holders would be emailed about changes, and the v0.8 Privacy Notice introduction said every account holder had been emailed about that version. No notice email was sent for v0.6, v0.7 or v0.8. Those statements have been removed. Unchanged and reaffirmed: wellness and fitness data is never shared with advertisers.

• v0.8·2026-10-03

  Two corrections, effective 2026-10-03 on publication; no new practice starts. (1) Minimum age: Terms of Service section 1 and Privacy Notice section 6 now say 18. The Terms accepted inside the app already required 18; these pages had said 16. Anyone aged 16 or 17 who created an account before 2026-10-03 may keep using it until 2026-11-02. The Privacy Notice section 7.4 statement about selling or sharing the personal information of anyone under 16 is unchanged. (2) New page, Consumer Health Data Privacy Policy, required by Washington's My Health My Data Act and Nevada law: the categories of health-related data the Service collects, including reproductive or sexual health information where a coach's form asks for it, why, where it comes from, that it is shared with the coach you have joined and that coach's organisation, and how to use your rights and appeal. It describes practices already in place. Privacy Notice section 1.3 now lists the same categories and sections 1.3 and 5 link to the new page. Account Deletion page corrected: accounts are deleted from inside the app with no email needed; database records go immediately, and photo files, messages and AI chat history within 30 days. Data Deletion Request page corrected to list the records that can be deleted in the app. Unchanged and reaffirmed: wellness and fitness data is never shared with advertisers.

• v0.7·2026-10-02

  Marketing-website ad-signal changes (effective 2026-10-02 on publication). Privacy Notice section 7.2: on the marketing website the opt-in Meta Pixel now also sends one standard "lead" event, with no added parameters, when a visitor clicks a sign-up button — same opt-in, same Global Privacy Control suppression, never without the cookie-banner choice. Privacy Notice sections 1.7, 7.1, 7.3 and 7.4 and Cookie Policy section 2.4 now list the marketing website's first-party attribution entry in browser local storage (ft-attribution-v1), in place since 2026-08-19: it holds the campaign (UTM) parameters and any Google ad-click identifier from the link a visitor arrived on and adds them to links into the app. New in this version: the entry also carries the gbraid and wbraid identifiers, is kept for 90 days, and is never written — and is removed — when the browser sends Global Privacy Control. Your Privacy Choices updated to match. Unchanged and reaffirmed: wellness and fitness data is never shared with advertisers.

• v0.6·2026-09-28

  Ad-conversion measurement disclosures (effective 2026-09-28 on publication; disclosed before anything is enabled — none of the new practices start until this version is live). Privacy Notice: the opt-in Meta Pixel may now also run — under a separate, advertising-specific consent — on exactly two app sign-up pages, /register and /select-plan on fittrainr.com, sending only a page-view and a parameterless registration-completed event to a Meta dataset separate from the marketing website's; it remains off everywhere else in the app, is suppressed by Global Privacy Control, and never runs during support impersonation. New first-party ad-attribution cookie gl_ads_click on the app domain (httpOnly, Secure, SameSite=Lax, 90-day lifetime; stores the Google ad-click identifier and UTM parameters from ad landings; never set under GPC or on consumer-facing pages). New disclosure of server-side conversion reporting to Google Ads at coach sign-up/purchase — sent: the Google ad-click identifier, timestamp, conversion value and currency, and a Stripe order reference; never sent: names, emails, wellness data, or client data; Google acts as an independent controller. Privacy Notice sections 3.6–3.7 and 7.1–7.5 rewritten and renumbered accordingly. Cookie Policy: new first-party ad-attribution category (section 2.4); advertising-cookie section names the two app sign-up pages. Your Privacy Choices: covers Google conversion reporting under Do Not Sell or Share — GPC prevents it automatically, and an opt-out request deletes the stored ad-click identifiers, after which no conversion is reported. Subprocessors: Google (Google Ads) noted as an independent controller for ad services, alongside Meta. Privacy Notice section 12 amended to a two-track notice rule: changes that reduce rights or choices, or that affect already-collected data, keep the 30-day advance email; disclosures of new, forward-looking practices take effect on publication, with the email sent no later than publication day and always before the practice starts. Unchanged and reaffirmed: wellness and fitness data is never shared with advertisers.

• v0.5·2026-08-25

  New 'Sales Tax' page: FitTrainr collects sales tax only in Tennessee (where it is headquartered) — 7% state plus the local option rate — on subscriptions billed to a Tennessee address; no tax is added anywhere else until a state's economic-nexus threshold is crossed. Tax is calculated at checkout for new subscriptions from 2026-08-25 and appears on existing Tennessee subscriptions from their first invoice on or after 2026-09-01, never retroactively. Documents how tax appears on invoices, that prices exclude tax, how tax-exempt organizations submit a certificate, and that client payments to coaches are unaffected. Pricing page: corrected 'tax-inclusive pricing' to 'prices exclude sales tax' with a link to the new page.

• v0.4·2026-08-19

  Added advertising disclosures for the marketing-website Meta Pixel (strictly opt-in; effective 2026-09-18). Privacy Notice: intro and sections 1.7, 3, 5, and 7 rewritten — Meta named as an advertising partner acting as an independent controller (not a subprocessor), categories shared (identifiers, internet activity), purposes (ad measurement, retargeting), a CPRA cross-context behavioral advertising 'sharing' disclosure, and opt-out instructions including Global Privacy Control. New 'Your Privacy Choices' page with a live consent control. Cookie Policy: new 'Advertising cookies (opt-in only)' category documenting _fbp, _fbc, and the fbclid URL parameter, plus the new opt-in consent banner. Subprocessors page: clarified that the marketing-site pixel involves Meta as an independent controller, not a subprocessor. The pixel ships disabled and stays off until this version takes effect at the earliest. Unchanged and reaffirmed: wellness and fitness log data is never shared with advertisers.

• v0.3·2026-08-11

  Added Privacy Notice section 11 (Google Account Data): what we access via the optional Google Drive, Calendar, and Ads connections and why, how tokens are encrypted at rest, an affirmative Limited Use commitment under the Google API Services User Data Policy — including that Google user data is never used to train AI or ML models — and how to disconnect or revoke access. Required for Google OAuth verification. Later sections renumbered accordingly.

• v0.2·2026-08-03

  Added SMS/text-messaging disclosures: Privacy Notice section 10 (mobile number collection, consent records, non-sharing of mobile information, STOP/HELP opt-out) and Terms of Service section 15 (SMS program description, consent, frequency, rates, opt-out). Later sections renumbered accordingly.

• v0.1·2026-04-26

  Initial draft of all legal documents. Pending counsel review.