Privacy Policy

Effective: August 26, 2026  ·  Last updated: August 26, 2026

This Privacy Policy describes how AppVerge Technologies ("we", "us", "our") collects, uses, and shares information when you use the Fitro mobile application (the "App", available on Google Play and the App Store under the package identifier com.fitro.fitness.calorie.workout.scanner).

By downloading or using the App, you agree to the practices described here. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Account Information

When you sign in with Google or continue as a guest, we collect:

• Firebase user ID (UID)
• Email address (Google Sign-In only)
• Display name (Google Sign-In only)
• Profile photo URL (Google Sign-In only, if you've set one)
• Sign-in method (Google / Anonymous)

1.2 Profile & Fitness Data (you provide)

During onboarding and in the Profile screen, you may enter:

• Name, age, gender
• Height, weight, goal weight
• Activity level, fitness goal
• Dietary preference and allergies
• Unit system (metric / imperial)
• Profile photo (if you upload one)

1.3 Health & Activity Data

The App reads and writes:

• Daily steps — from the device pedometer and, if you connect it, Android Health Connect
• Water intake, meals, weight measurements, sleep, and workouts you log
• Challenges you start, mission progress, and completions
• XP, level, and streaks

1.4 Device & Usage Data (collected automatically)

• Device model, OS version, screen size, language, timezone
• App version and Firebase Cloud Messaging (FCM) token
• Google Advertising ID (used by AdMob for ad measurement)
• Crash reports (stack traces, no personal content)
• Analytics events (screen views, feature taps, workout completes)

1.5 Camera & Photos

Camera access is used only for the barcode scanner on the Food screen — images are not stored or uploaded. Photo library access is only used if you pick a profile photo from your gallery.

2. How We Use Your Information

• Provide the core features — workouts, meal tracking, challenges, XP, plans, streaks.
• Sync your data across devices when you sign in.
• Personalize recommendations based on your goals and preferences.
• Send push notifications you've opted into.
• Track usage in aggregate to prioritize improvements.
• Detect, diagnose, and fix crashes.
• Show ads and measure ad performance.

We do not sell your personal information.

3. Analytics

We use Firebase Analytics to log events like screen views, sign-in, workout starts/completes, challenge progress, food/water goals, and level-ups. Analytics data is associated with your Firebase UID and never sold to third parties.

4. Advertising

The App uses Google AdMob to show banner, interstitial, and rewarded ads. AdMob may collect the Advertising ID and coarse device information. You can opt out of personalized ads in your device settings (Android: Settings → Google → Ads; iOS: Settings → Privacy & Security → Apple Advertising).

5. How We Share Your Information

Provider	Purpose	Data shared
Google Firebase	Sign-in, sync, analytics, crash reporting, notifications, remote config	UID, profile fields, health/activity data, device info, analytics events
Google AdMob	Serve and measure ads	Advertising ID, coarse device info
Google Sign-In	Federated sign-in	Email, display name, profile photo URL
fitness.appy-taps.com	Exercise library backend	Search queries only — no account fields
Open Food Facts	Nutrition lookup	Barcode or food query only
Android Health Connect / Apple HealthKit	Read steps, weight, sleep on your device	Only after you explicitly grant permission

6. Your Choices and Rights

• Edit your profile at any time from Profile → Edit Profile.
• Turn notifications off in Notification Preferences.
• Revoke Health Connect access in your device's Health Connect settings.
• Sign out to stop syncing.
• Delete your account — see delete-account or email us.

Depending on where you live, you may have rights under GDPR (EU/UK), CCPA/CPRA (California), India's DPDP Act 2023, and similar laws — right to access, correct, delete, or export your data. Contact us at the address in Section 11.

7. Data Retention

• While you use the App, we keep the data described above so features work.
• After account deletion, we delete your Firebase Auth record and Firestore data within 30 days. Backups may take up to 90 days to purge.
• Anonymized analytics retained up to 26 months per Firebase Analytics defaults.
• Crash reports retained up to 90 days.

8. Security

• All network traffic is encrypted with TLS.
• Firebase services store data at rest with Google Cloud encryption.
• Firestore security rules restrict access so only you can read or write your own data.
• Sensitive fields like auth tokens are never logged to analytics.

9. Children's Privacy

Fitro is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children below that age.

10. International Users

Fitro is offered globally. Your data may be processed on servers operated by Google Cloud in countries outside your own. For users in the EEA, UK, or Switzerland, we rely on Google's Standard Contractual Clauses as the legal basis for international transfers.

11. Contact Us

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and, for material changes, notify you inside the App. Continued use after an update means you accept the revised policy.