Fitonomy
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Fitness data and meal photos go to Google, Anthropic, and Meta ads unless you limit sharing and tracking.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account, body stats, workouts, meals, photos, device IDs, and optional health-app data.
Read the exact line
Privacy policy
“Your profile may include a photo, age, gender, height, weight, goals, preferences, body measurements, and health integration settings.”
Training
They run the app, send meal photos to Anthropic AI, and measure ads with Meta if you allow it.
Read the exact line
Privacy policy
“Our server retrieves that image and sends its image content to Anthropic's Claude API with a food analysis request.”
Sharing
Google, Anthropic, payment apps, OneSignal, Meta, health apps, and other users if you share.
Read the exact line
Privacy policy
“Google Firebase provides authentication, cloud storage, databases, server processing, analytics, and crash reporting. Anthropic processes meal images for AI analysis.”
Kept
You can delete in the app, but some billing, support, and provider copies can stay.
Read the exact line
Privacy policy
“Deletion therefore does not mean that every copy in every service disappears immediately.”
Controls
Change activity sharing, tracking, health links, marketing email, and or rights by email.
Read the exact line
Privacy policy
“You can request account deletion in the app or contact support@fitonomyapp.com for help or an external deletion request.”
Fine print
Subscriptions auto-renew in the store you used; they can restrict accounts for abuse.
Read the exact line
Terms of service
“Auto-renewing subscriptions renew unless cancelled before the applicable renewal deadline.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off public activity sharing
Activity sharing control in the app (section 6 of the privacy policy)
Deny iOS tracking and withdraw web Meta consent
iOS Settings tracking permission; contact support@fitonomyapp.com for web checkout consent
Delete your account in the app
App settings or support@fitonomyapp.com; cancel the store subscription separately
Disconnect Health/Fitbit access
Apple Health or Health Connect settings; Fitbit disconnect in the app or Fitbit
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Meal pictures leave your phone and are processed in the cloud by Anthropic, not only on your device.
Read the exact line
Privacy policy
“Our server retrieves that image and sends its image content to Anthropic's Claude API with a food analysis request.”
For example, a photo of dinner on your kitchen table is uploaded and analyzed by Claude.
If you never set sharing, workout and streak updates can go out to all users.
Read the exact line
Privacy policy
“When no activity sharing choice has been saved, the current default is everyone.”
For example, finishing a run could show on a public feed until you change the setting.
Meta can get app events used for ads when tracking is allowed.
Read the exact line
Privacy policy
“The app includes Meta event measurement for interactions such as registration, onboarding, trial, checkout, and subscription events.”
For example, starting a trial can be sent to Meta if you turn on iOS tracking.
Web checkout consent can send hashed email and other IDs to Meta.
Read the exact line
Privacy policy
“These include hashed email and account identifiers, product, value, and currency, and, where provided in the consented checkout context, advertising identifiers, IP address, browser information, and the source page.”
For example, buying on the website can share a hashed email with Meta.
Logged meal photos stay with your account, not just for one scan.
Read the exact line
Privacy policy
“If you log the meal, its image and nutrition result can be saved with your meal history.”
For example, a logged lunch photo can sit in your history until you delete the account.
Fitbit data goes through Fitonomy’s servers, not only on your phone.
Read the exact line
Privacy policy
“These requests pass through our server; the Fitbit integration is not entirely local to your device.”
For example, your resting heart rate from Fitbit is requested by their server.
You still own your posts, but they get a license to show them for the features you use.
Read the exact line
Terms of service
“By submitting User Content, you grant Fitonomy a non-exclusive, worldwide, license to host, process, display, reproduce, and distribute your User Content as needed to provide the features you use”
For example, they can display your profile photo to other users if community is on.
Paid plans keep charging until you cancel in Apple, Google, or Stripe.
Read the exact line
Terms of service
“Auto-renewing subscriptions renew unless cancelled before the applicable renewal deadline.”
For example, deleting the app does not stop next month’s charge.
You are not told you must pay all their legal bills for ordinary use.
Read the exact line
Terms of service
“These Terms do not impose an unlimited duty on consumers to defend or Fitonomy for all claims arising from use of the Service.”
For example, using the workout plans does not automatically make you their lawyer.
Words to know
Legal words from the lines above, in plain English.
- auto-renewal
- Your subscription keeps charging you at the end of each period until you cancel it. For example, a free trial turns into a paid monthly plan unless you cancel before it ends.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
How we got here · grade B · score 48/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
Besides account and fitness content, they collect usage events, device and OS details, IP addresses, crash logs, and notification IDs.
Does it record your voice, face or body, and what happens to that?
They process profile and meal photos and can save logged meal images with your account. Voice is not described.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use Meta event measurement on mobile when tracking is allowed and can send web checkout events to Meta.
Do they sell or share your data, and can you opt out?
Data goes to providers plus Meta for ads; California users are told they can opt out of sale or sharing.
What rights do they take over what you type and what the AI makes?
You keep ownership; they take a license only to host and show content for the features you use, not for ads.
How long do they keep your data after you delete it, and can you delete it in the app?
You can delete in the app. A 30-day protection record expires, but billing, support, and provider copies can remain.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They keep a fitness profile and history with your account. No AI memory on/off switch is described.
Do they commit to basic security, and have they leaked data?
They mention access controls and encrypted connections, with no audit or leak history described.
Is there a real age gate, and are teens protected?
They say the app is not directed at children under 13, with no age-proof process described.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated 9 September 2026 and says material changes will be flagged where the law requires.
Can they close your account without warning, and can you get your data out first?
They may restrict access for breach, security, or law, with notice except when they say immediate action is needed. Export is not described.
If something goes wrong, who pays?
They keep mandatory consumer rights and say they do not put an unlimited indemnity duty on consumers.
Do subscriptions renew on their own, and can you get a refund?
Subscriptions auto-renew unless cancelled in Apple, Google, or Stripe. Refunds follow that store and local law.
The privacy policy is 2,065 words at a professional or legal expert level (Flesch reading ease 23.1); the terms are 1,562 words at a professional or legal expert level.
