Effective date: June 3, 2026
This Privacy Policy describes how FitnessPal ("FitnessPal", "we", "us", or "our") collects, uses, and shares information when you use our mobile application (the "App") on iOS or Android. By using the App, you agree to the practices described in this policy.
When you sign up, we collect your email address through our authentication provider (Supabase Auth). We use this to create and secure your account.
During onboarding we ask questions about your goals, habits, and preferences so we can personalize your experience. These answers are stored with your account.
We store your daily activity, streaks, completed tasks, leveling progress, and your bunny avatar state so your progress persists across devices.
If you choose to add friends in the App, we store the connection between your account and theirs so you can view shared activity. Adding friends is entirely optional.
Subscription and in-app purchase status is managed through RevenueCat. We receive purchase metadata (such as subscription status, product identifier, and renewal state) so we can unlock paid features. We do not receive or store your payment card details — those are handled entirely by Apple or Google.
We do not sell your personal information, and we do not use your data for advertising.
The App relies on a small number of trusted third-party services:
We retain your data for as long as your account is active. You can delete your account at any time from within the App (Settings → Delete account). Deleting your account removes your profile, onboarding answers, streaks, progress data, and friend connections from our systems. Some information may persist in encrypted backups for a limited period before being permanently purged, and we may retain limited records where required by law.
Depending on where you live, you may have the right to:
You can exercise most of these rights directly in the App. For anything else, email us at rogeryou@andrew.cmu.edu.
FitnessPal is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
We use industry-standard safeguards (including encryption in transit and at rest where offered by our providers) to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. Material changes will be communicated in the App or by email. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.
Questions, requests, or concerns? Email rogeryou@andrew.cmu.edu.