Privacy Policy

1. Introduction

This Privacy Policy explains how QUODELABS SOFTWARE DEVELOPMENT SERVICES ("Fitqi", "we", "us" or "our") collects, uses, shares, stores and protects personal data when you use the Fitqi mobile applications, public websites, customer support, notifications, widgets, Live Activities and connected services.

Fitqi combines training, workouts, exercise programs, nutrition, hydration, body tracking, health and recovery context, optional cycle tracking, fasting, community, Fitcheck, messaging, squads, challenges, duels, Fitcoins, Qiqi coaching and Smart Scan. Some information handled through these features may be sensitive. We aim to minimize collection, keep sensitive data private by default and give you meaningful controls.

This Policy supplements any just-in-time notice shown before Fitqi requests a device permission, health connection or sensitive input. Those notices should explain the specific data involved and the immediate purpose before collection begins.

2. Quick summary

• We collect data needed to create your account and provide the Fitqi features you choose to use.
• Health, body, cycle, nutrition, fasting, progress-photo and private-message data are treated as sensitive.
• We do not use sensitive health or private-content data for targeted advertising.
• You control optional health connections, device permissions, notifications and many audience/sharing choices.
• You may request access, correction, export or deletion of your data. These controls are not Pro benefits.
• We do not sell health data, private messages, progress photos or private Qiqi/Smart Scan inputs.

3. Who we are

Fitqi is operated by QUODELABS SOFTWARE DEVELOPMENT SERVICES, located at Manila, Philippines.

For privacy questions or data-rights requests, contact privacy@fitqi.com. Where applicable law uses terms such as controller, business or data fiduciary, QUODELABS SOFTWARE DEVELOPMENT SERVICES is the responsible entity for the processing described in this Policy unless a separate notice says otherwise.

4. Scope

This Policy applies to:

• the Fitqi iOS and Android applications;
• Fitqi websites and landing pages;
• backend, storage, authentication and synchronization services;
• notifications, widgets and Live Activities;
• support, privacy, legal and safety communications; and
• features or services that link to this Policy.

Independent third-party products may have separate privacy notices. Their own processing is governed by their policies.

5. Personal data we collect

5.1 Account, authentication and profile data

We may collect:

• email address, authentication identifier and verification status;
• display name, username, profile image, biography and account settings;
• age or date-of-birth information where needed for eligibility, safety or legal compliance;
• preferences, goals, units, training experience, available equipment and onboarding responses;
• security events, account-recovery information and session metadata; and
• consent and policy-version records.

5.2 Training, program and activity data

We may collect:

• workout plans, exercises, sets, repetitions, weight/load, duration, rest periods and notes;
• workout schedules, completion history, skipped or rescheduled sessions and templates;
• enrolled programs, progression, exercise substitutions and recovery modifications;
• goals, steps, active minutes and energy-expenditure estimates; and
• exercise-library interactions and saved content.

5.3 Nutrition, hydration, body and wellness data

We may collect:

• food logs, recipes, meal plans, grocery items, calorie and macronutrient estimates;
• water intake, hydration goals and reminders;
• weight, body measurements, body metrics, progress photos and trends;
• sleep, heart rate, heart-rate variability, recovery context and related health signals;
• optional cycle, symptom and prediction information;
• fasting protocols, timing, status, history and related settings; and
• daily check-in information such as sleep, mood, soreness and optional wellness responses.

5.4 Apple Health and Health Connect data

When you explicitly authorize supported data types, Fitqi may read from or write to Apple Health or Health Connect. This may include supported activity, sleep, heart-rate, workout, body or nutrition-related records.

Fitqi also processes permission state, source information, synchronization timestamps and errors needed to operate the connection.

Fitqi does not receive health categories you do not authorize. Disconnecting a connection inside Fitqi may not revoke the operating-system permission. You can separately manage permissions in Apple Health, iOS Settings or Health Connect.

5.5 Qiqi and Smart Scan data

We may collect:

• questions, prompts, selected context and feedback submitted to Qiqi;
• meal photos and food descriptions submitted to Smart Scan;
• generated suggestions, extracted estimates and classifications;
• your corrections, confirmations, saved results and usage counts;
• consent, safety, abuse-prevention and reliability metadata; and
• provider request identifiers and technical logs that have been minimized to avoid sensitive payloads where practical.

Do not submit another person’s confidential or sensitive information unless you have authority and a valid reason to do so.

5.6 Community, Fitcheck and communication data

We may collect:

• posts, captions, photos, videos, polls, comments, reactions, reposts and hashtags;
• Fitcheck stories, progress content, audience choices and sharing history;
• direct messages and conversation metadata;
• followers, following, invitations and relationship state;
• squads, challenges, Proof Pacts, duels, leaderboards and competition participation;
• optional post location tags; and
• blocks, reports, moderation actions, appeals and safety records.

5.7 Purchases, Pro access and Fitcoins

We may collect:

• subscription product, app store, transaction state, entitlement state, renewal or expiration state and restore history;
• limited purchase metadata received from Apple, Google and RevenueCat;
• Fitcoin balances, ledger entries, reward events, stakes and settlement records; and
• fraud, duplication, reversal and reconciliation signals.

Fitqi generally does not receive your complete payment-card details from Apple or Google.

5.8 Device, notification and diagnostic data

We may collect:

• device type, operating system, app version, language, time zone and technical identifiers;
• push-notification token, notification preferences and delivery/action metadata;
• IP address, authentication logs and security events;
• crash reports, performance diagnostics and feature errors; and
• limited widget and Live Activity data stored in an app-group/shared device container.

5.9 Website and cookie data

When you visit a Fitqi website, we may process browser type, device information, IP address, requested pages, referral information and cookie or similar-technology data.

Essential technologies may be used to provide security and basic site functions. Non-essential analytics or marketing technologies must be enabled only where the deployed site and applicable consent configuration permit them. The production cookie banner and policy must match the technologies actually deployed.

5.10 Location data

Fitqi may access foreground location or a place-search query when you deliberately use a location feature, such as attaching a place to a community post. Location is optional unless clearly stated for a particular feature.

A place name or location tag that you choose to publish can be visible to the selected audience.

5.11 Support and legal communications

We may retain messages, attachments and account details you submit to support, privacy, legal or safety channels, together with records needed to investigate incidents and respond to requests.

6. How we obtain data

We obtain data:

• directly from you when you register, enter information, upload content or communicate;
• from your device and operating system when you grant a permission or use a device capability;
• from Apple Health or Health Connect when you authorize supported data types;
• from Apple, Google and RevenueCat for purchases and entitlement state;
• from other users when they interact with, invite, mention or report you; and
• automatically from app, website, security and reliability systems.

7. How we use personal data

We use personal data to:

• create, authenticate, secure and support your account;
• provide workouts, programs, scheduling, tracking, trends, reminders and recommendations;
• process Smart Scan submissions and provide Qiqi responses and plans;
• operate community, messaging, Fitcheck, squads, challenges, duels and moderation;
• manage Pro subscriptions, entitlements and purchase restoration using store-authoritative information;
• maintain server-authoritative Fitcoin and competition records;
• synchronize optional health data;
• provide notifications, widgets and Live Activities;
• personalize Fitqi using your settings and activity inside Fitqi;
• provide customer support and answer privacy or legal requests;
• detect security incidents, spam, fraud, abuse, unsafe conduct and technical faults;
• enforce our Terms of Service and Community Guidelines;
• measure reliability and product performance using minimized analytics; and
• comply with law and establish, exercise or defend legal claims.

Fitqi does not use connected-health data, private messages, progress photos, cycle data or private Qiqi/Smart Scan content for targeted advertising.

8. Legal bases where required

Where applicable law requires a legal basis, we rely on one or more of the following:

• Contract: processing needed to provide the Fitqi service and features you request.
• Consent: optional health connections, device permissions, sensitive processing, marketing or other activities where consent is required.
• Legitimate interests: security, fraud prevention, support, reliability, product improvement and enforcement, balanced against your rights.
• Legal obligation: accounting, consumer-protection, regulatory, safety or lawful-request duties.
• Vital interests or public interest: only where legally permitted and genuinely applicable.

You may withdraw consent where processing relies on consent. Withdrawal does not affect processing that was lawful before withdrawal.

9. How we disclose personal data

We disclose personal data only as needed for the purposes described in this Policy and subject to appropriate contractual and security safeguards.

9.1 Infrastructure and service providers

Fitqi may use:

• Supabase for authentication, database, storage, row-level access controls and server functions;
• Expo and EAS services for builds, updates and notification infrastructure where applicable;
• Sentry for minimized error and performance monitoring;
• Cloudflare Turnstile or a comparable service for anti-abuse verification;
• LocationIQ or a comparable place-search provider when you initiate an optional geocoding/place-search feature;
• approved Qiqi and Smart Scan processing providers through a server-side boundary;
• customer-support, email, legal and security providers; and
• other vendors added to the maintained production vendor register.

The final provider list, hosting regions and subprocessors must match the production configuration before treating this list as exhaustive.

9.2 Subscriptions and app stores

RevenueCat processes subscription products, transactions and entitlement state. Apple App Store and Google Play process billing, cancellation and refunds under their own terms and privacy policies.

9.3 Health platforms

Apple Health and Health Connect exchange only supported data types that you authorize.

Fitqi does not sell health-platform data or use it for advertising, credit, employment or insurance decisions.

9.4 Other users and the public

Content is shared according to the audience and settings you select, subject to feature behavior and moderation.

Public profile information and public posts can be viewed, copied or reshared by others. Private messages are intended for conversation participants, but may be accessed when reasonably necessary for service operation, safety, abuse investigations or legal compliance.

9.5 Legal, safety and corporate events

We may disclose information when reasonably necessary to:

• comply with law or valid legal process;
• protect users or investigate abuse, fraud or security incidents;
• enforce agreements or defend legal rights; or
• complete a merger, financing, acquisition, reorganization or asset transfer, subject to continued protection and notice where required.

10. Health data and device permissions

• Health, camera, photo, notification and location permissions are requested only when relevant to a feature.
• You may decline optional permissions and continue using other available features where practical.
• You can change operating-system permissions at any time.
• Fitqi health, cycle, nutrition, fasting and recovery outputs are estimates and wellness context, not medical diagnoses or emergency guidance.

11. Community privacy and audience controls

Review your selected audience before posting health, body, progress, Fitcheck or location-linked content.

Deleting a post removes it from normal active views, but copies may remain temporarily in backups or may have been independently captured or reshared by recipients. Blocking limits interactions as implemented by the service; it does not erase content already received by another person.

Fitqi may retain moderation evidence where necessary to protect users, investigate abuse, resolve appeals or comply with law.

12. Retention and deletion

We retain data only as long as necessary to provide Fitqi, fulfill the purposes in this Policy, resolve disputes, enforce agreements and satisfy legal, security and fraud-prevention requirements.

Unless a longer period is required or justified:

• account-associated production data is targeted for deletion within 30 days after a verified deletion request;
• encrypted residual backups may remain for up to 90 days before scheduled expiry; and
• security, fraud and abuse logs may remain for up to 365 days, or longer when linked to an active investigation or legal obligation.

Deleting your account is different from uninstalling Fitqi or cancelling a store subscription.

Account deletion should cover database records, stored media, derived records, widget/shared-container data and provider-side data where contractually supported. Certain transaction, fraud, moderation, security or legal records may be retained when necessary and permitted by law. Retained information is restricted to that purpose.

13. Your choices and privacy rights

Depending on your location, you may have rights to:

• access personal data;
• correct inaccurate data;
• export supported data in a portable format;
• delete content or request account and associated-data deletion;
• withdraw consent;
• object to or restrict certain processing;
• request portability;
• opt out of certain sales, sharing, targeted advertising or profiling where applicable;
• appeal a privacy-request decision where local law provides that right; and
• complain to an appropriate privacy or data-protection authority.

You can also manage:

• Apple Health and Health Connect permissions;
• camera, photo, notification and location permissions;
• post audiences and profile/Fitcheck visibility;
• relationship, block and report controls; and
• non-essential marketing communications.

Submit a request through the in-app privacy/data settings, https://fitqi.com/help or privacy@fitqi.com. We may need to verify your identity or authority.

Access, export, correction, deletion and privacy controls are not conditioned on a Pro subscription.

14. Regional disclosures

14.1 EEA, United Kingdom and Switzerland

You may have rights of access, correction, erasure, restriction, portability, objection and consent withdrawal. You may complain to your local supervisory authority. Where required, international transfers use an adequacy decision, approved contract or another lawful safeguard.

14.2 United States state privacy laws

Residents of certain states may have rights to know, access, correct, delete or receive a copy of personal data and to opt out of certain sales, sharing, targeted advertising or profiling.

Fitqi does not sell sensitive health data or private content. The final production request process must reflect all applicable state-specific requirements, including appeal procedures where required.

14.3 Philippines and other locations

If you are in the Philippines, you may have rights under the Data Privacy Act of 2012 (Republic Act No. 10173) and related regulations, including rights to be informed, object, access, correct, erase or block, and to damages under applicable rules. You may also complain to the National Privacy Commission where appropriate.

You may have additional rights under the law where you live. Contact privacy@fitqi.com to exercise an applicable right.

15. Security

We use administrative, technical and organizational measures designed to protect personal data, including encrypted network transport, authenticated access, least-privilege controls, database access policies, protected secret handling, monitoring and incident-response procedures.

No system is perfectly secure. Protect your credentials and device, and contact privacy@fitqi.com if you believe your account or data has been compromised.

16. International processing

Fitqi and its providers may process data in countries other than your own. Privacy laws may differ. Where required, we use contracts, adequacy decisions or another recognized transfer safeguard.

17. Children and age requirements

Fitqi is not intended for children under 13. Do not create an account if you are below the applicable minimum age unless an approved parental-consent process is available in your location.

If we learn that personal data was collected from a child contrary to applicable requirements, we will take appropriate steps to delete or restrict it. Contact privacy@fitqi.com with relevant details.

18. Recommendations and automated processing

Fitqi may use rules, statistical methods and automated systems to generate recommendations, estimates, Qiqi responses, Smart Scan results and safety signals. These outputs may be incomplete or incorrect and should be reviewed before use.

Fitqi does not use these outputs to make employment, insurance, credit, legal or similarly significant decisions about you.

19. Security incidents

If a security incident affects personal data, we will investigate, contain and remediate it and provide notices to users, regulators or other parties when required by applicable law.

20. Changes to this Policy

We may update this Policy when Fitqi, our providers or legal requirements change. We will update the effective date and provide additional notice or request renewed consent when required for a material change.

21. Contact us