This privacy policy explains what personal data FitSamen collects, why, and what rights you have. FitSamen is a trilingual (NL/EN/TR) health & fitness community app with social features, progress tracking and optional personal coaching.
1. Who is responsible for your data
[Company name], based in the Netherlands, is the data controller for the personal data processed through the FitSamen app and this website. Privacy questions can be sent to privacy@[domain].
2. What data we collect
Account data: name, email address, password (stored as a hash, never in readable form), preferred language (NL/EN/TR), city, goal (lose weight / maintain / get fit), height.
Health data (special category personal data, Art. 9 GDPR): weight, body measurements (waist, hip, chest, arm, leg), mood at weekly check-ins, and progress photos you choose to upload. This data is only processed after you give explicit consent at registration.
Community data: posts in the feed, comments, buddy connections, direct messages between users, group memberships.
Coaching data: if you have a coach subscription, your check-ins and progress are visible to the trainer you are linked to.
Technical data: push notification token, IP address (only for login attempts, for security against abuse), device/app language.
Subscription data: purchases go through the App Store or Google Play; we only receive your subscription status (active/expired/product), never your payment details.
3. What we use this data for
Creating and managing your account.
Providing the community and coaching features.
Showing your progress to yourself and, where applicable, to your linked coach.
Sending notifications (for example, a reminder for your weekly check-in).
Moderating content in response to reports from users.
Managing your subscription.
Security and abuse prevention.
4. Legal basis
Performance of a contract (Art. 6(1)(b) GDPR) for account management and the app's core functionality.
Explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR) for processing health data.
Legitimate interest (Art. 6(1)(f) GDPR) for security and fraud/abuse prevention.
You can withdraw your consent for the processing of health data at any time by deleting your account.
5. How long we keep your data
We keep your data for as long as your account exists. If you delete your account — which you can always do yourself, in the app, via Account → Delete account — your personal data and health data are deleted or irreversibly anonymised. Data we are legally required to keep longer (for example, for bookkeeping) is retained only for that purpose.
6. Who we share your data with
We only share data with parties that are necessary to provide the service (sub-processors):
Hosting provider — our servers are located in the Netherlands.
RevenueCat — for subscription management; receives only a user ID and subscription status, no payment details.
Expo — for sending push notifications.
Apple (App Store) and Google (Google Play) — for store account identification and processing subscription payments.
We have, or will put in place, a data processing agreement with each of these processors. Some of these parties may process data outside the EEA; in that case, we ensure appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
7. Security
We take appropriate technical and organisational measures: encrypted connections (TLS/HTTPS), encrypted storage of passwords, and restricted access to personal data within our team.
Object to processing based on legitimate interest.
You can exercise these rights by contacting us at privacy@[domain]. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
9. Minors
FitSamen is not intended for people under the age of 16. We do not knowingly collect data from children under 16.
10. Changes to this policy
We may update this privacy policy from time to time. The date at the top of this page shows when it was last changed. We will inform you of material changes through the app.