Effective Date: November 5, 2025

Fits Right Ltd (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Fits Right mobile application (“App”).

1. Who We Are

Fits Right Ltd is a UK-based company providing size recommendation technology and fitness tracking through the Fits Right App. Our services use 3D body measurement data to offer tailored size guidance for online shopping, as well as fitness and nutrition tracking features.

2. Information We Collect

We may collect the following personal data:

• Name and email address (unless hidden via Apple ID or similar)
• Date of birth (if provided)
• 3D body measurements and derived data (e.g. sizing preferences)
• Location data (when you actively use the scanner finder feature)
• Fitness and health data (when you enable health sync features)

2.1 Health and Fitness Data Collection

When you enable health sync features in the App, we may access the following data from Apple Health (iOS) or Health Connect (Android):

• Steps and step cadence
• Active calories burned
• Basal energy burned
• Exercise sessions (type, duration, intensity)
• Heart rate
• Distance (e.g. walking, running, cycling)
• Cycling pedalling cadence

How We Use Health Data

Health data is used solely to:

• Display fitness metrics in your dashboard
• Calculate Total Daily Energy Expenditure (TDEE)
• Adjust personalised calorie targets
• Track workouts and activity history
• Generate insights and summaries
• Optimise nutrition recommendations

Health Data Storage

• Stored securely on your device and synced with UK-based servers
• Encrypted in transit and at rest
• You may disable health sync at any time via App settings
• Deleting your account permanently removes all health data within 30 days

Health Data Sharing

• We do not sell or share health data with third parties
• Health data is never used for advertising
• Health data is used only for features you explicitly enable

2.2 Location Data Collection

We collect precise location data only when you actively use the scanner finder feature. This data is used to:

• Display scanning services near you
• Calculate distances to scanners
• Provide location-based recommendations

Location data is processed in real time and is not permanently stored. You may disable location access at any time through your device settings.

3. How We Use Your Data

We use your data to:

• Provide personalised size recommendations
• Deliver fitness and nutrition tracking features
• Calculate calorie targets and activity metrics
• Improve and maintain the App
• Communicate with you when necessary
• Process purchases of scanning services
• Display nearby scanning services (when enabled)
• Monitor anonymised affiliate activity (e.g. via Awin)

We do not track your browsing activity on third-party websites.

4. Legal Basis for Processing

We process personal data based on:

• Your explicit consent (especially for health data)
• Performance of our contract with you
• Legitimate interests in improving and securing our services

You may withdraw consent at any time via App or device settings.

5. Data Storage

All personal data is stored securely on UK-based servers provided by IONOS. Industry-standard encryption and security practices are used at all times.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties, except where required to deliver our services (e.g. secure hosting providers).

6.1 Anonymised and Aggregated Data

We may use and share fully anonymised and aggregated data with third parties for research, analytics, product development, and commercial purposes.

This data:

• Does not identify any individual
• Cannot be used to re-identify users
• Is no longer considered personal data under UK GDPR once anonymised

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct or delete your data
• Withdraw consent at any time
• Restrict or object to processing
• Control location and health data permissions
• Export your health and fitness data

You may delete your account at any time via the App.

8. Data Retention

We retain your data until you delete your account. Upon deletion, all associated data (including health data) is permanently removed within 30 days.

9. Children’s Privacy

The App is not intended for users under the age of 16. We do not knowingly collect data from children without appropriate parental consent.

10. Security

We protect your data using industry-standard measures, including:

• Encrypted data transmission
• Encrypted data storage
• Secure authentication
• Regular security reviews

11. Third-Party Services

The App integrates with Apple Health and Health Connect. Use of these services is governed by Apple’s and Google’s privacy policies. We access only the minimum data required for functionality.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via the App or email. Continued use of the App constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or your data rights, please contact:

Email: customerservice@fitsright.co.uk

Data Protection Officer: Fits Right Ltd, United Kingdom