Last updated: November 6, 2026
Fitlyra ("the App") is a fitness and nutrition tracker. Account, subscription, community, and some daily summary data are stored on our servers. Detailed tracking data stays on your device unless Cloud Sync or backup is enabled. This policy explains what is collected, where it is stored, and how to control it.
| Data | Where it's stored | Why |
|---|---|---|
| Name, email, username/handle, bio, and profile avatar | Firebase Authentication and Firestore / Firebase Storage | Create and manage your account and profile. Firebase Authentication manages sign-in credentials; Fitlyra does not store plaintext passwords. |
| Subscription status, plan, receipts | Firestore + RevenueCat | Manage your subscription and entitlements |
| Community messages, activity posts, captions, photos, comments, follows, blocks, and reports | Firestore and Firebase Storage | Provide and moderate Community. Content is shown to the audience selected when you share it. |
| Content reports you file or that are filed about you | Firestore (admin-only access) | Moderation and abuse prevention |
| Food and activity logs, weight, water, sleep, meditation, fasting history, and progress photos | Your device by default. Eligible records and photos are copied to Firestore or Firebase Storage when Cloud Sync or backup is enabled. | Tracking features and restoring your data across devices |
| Food photos you choose for AI analysis | Sent to Google Gemini to return an estimate. If Cloud Sync is enabled, a saved food-photo copy may also be stored in Firebase Storage for backup. | AI calorie and macro estimation and, when enabled, backup |
| Precise location (GPS route points) | Recorded on your device during a workout. Routes may be included in a cloud backup or uploaded with a workout you share in Community; route privacy settings can mask endpoints on shared routes. | Distance and pace tracking, backup, and optional workout sharing |
| Motion and step data; Apple HealthKit readings | Processed on your device. HealthKit readings are not uploaded to Fitlyra servers. | Step counting, calorie estimates, and the Health screen |
| App interactions and app/device information (iOS and Android) | Firebase Analytics (Google), including app and device identifiers. Analytics user IDs may link events to your account after sign-in. | Measure feature use and improve the app |
| Daily summary statistics (calories eaten and burned, protein, workouts, and streak) | Firestore | Account-backed community and leaderboard features |
| Crash reports and error diagnostics | Firebase Crashlytics and Firestore; reports may include app/device identifiers and may be linked to your account after sign-in. | Diagnose errors, maintain reliability, and provide support |
| Camera and photo library | Photos you choose for AI analysis are sent to Gemini. Saved photos may also be uploaded to Firebase Storage for Cloud Sync or backup, or shared with the audience you select in Community. | Food estimates, progress tracking, profile photos, and workout sharing |
When you use AI food-photo estimation, meal planning, or the AI coach, the relevant photo or text is sent to our AI provider (Google, via the Gemini API) to generate a response, then discarded by us. We don't use your content to train AI models. We use Google's paid Gemini API tier, under which Google does not use your submitted content to train their models either — see Gemini API Additional Terms of Service for details. AI output is an estimate and may be inaccurate — it is not medical advice.
We do not sell your personal information, and the Fitlyra app does not show third-party ads.
On public Fitlyra marketing and information pages, Google Analytics 4 is used only if you
choose “Allow analytics.” It measures page visits, general browser/device information, and
interactions with public links such as Google Play install buttons. The analytics tag is not
used on the Web Logger page at /app.html, where account and health information may
be entered. You can reject analytics or change your choice at any time with the Privacy
settings button. Your choice is saved in this browser. Google may process this usage data to
provide analytics services. See Google Analytics data collection details.
The App is not directed at children and requires users to be at least 13 (or the minimum age in your country). We do not knowingly collect data from children under that age; if we learn we have, we'll delete it.
Server-side data is protected by Firebase security rules and transmitted over HTTPS. We retain account data while your account is active and for a reasonable period after, to comply with legal and billing obligations. On-device data is retained until you delete it or uninstall the App.
Our service providers may process data on servers located in the United States and other countries.
Use the in-app "Report" option on any message, or email abuse@fitlyra.com. We review reports within 24 hours.
We'll update the "last updated" date above when this policy changes, and post material changes in the App.
Questions or requests: support@fitlyra.com