Privacy Policy

Effective Date: November 5, 2025

Last Updated: September 30, 2026

Connected health and AI Coach

With your permission, Fits Right stores dated sleep, resting heart rate and weight readings from Apple Health or Health Connect, and available sleep, resting heart rate, weight, overnight HRV and daily stress summaries from Garmin Connect. These private readings support your Health dashboard widget, weight history and personalised fitness and nutrition coaching. Device availability and the permissions you select determine which readings are received. Manual weight entries and saved targets are not overwritten.

For direct Garmin health readings, Use these readings with AI Coach is a separate optional choice in the same Garmin connection flow. Only after that choice do we send recent Garmin summaries to OpenAI, our AI processing provider, for personalised advice in Fits Right Coach and linked WhatsApp conversations. This is processing to answer coaching requests, not model training by Fits Right. We do not use these readings for advertising or community sharing. Our Coach requests are configured without provider-side conversation storage; provider processing and security retention remain subject to the applicable service terms.

You may withdraw Garmin Coach sharing under Connected Devices → Garmin → Manage, without removing the widget or stopping health imports. Withdrawal stops supplying stored and new Garmin health summaries to subsequent AI requests. Pre-withdrawal chat history remains visible but is excluded from new AI context, and stored coaching memory is withheld while Garmin Coach sharing is off; Coach may ask you to repeat relevant details. Requests already sent before withdrawal cannot be unsent. New messages you choose to send to Coach are processed as new coaching requests.

Pausing health imports retains saved readings; removing a dashboard widget only hides it. You may also revoke device permissions or Garmin access. Account deletion and requests to delete retained readings or chats follow the account-deletion and contact provisions below. Connected readings are not medical assessments, and Coach requests confirmation before changing saved targets or plans.

Fits Right Ltd (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Fits Right mobile application (“App”).

1. Who We Are

Fits Right Ltd is a UK-based company providing personalised fitness, nutrition, connected coaching, body progress and size guidance through the Fits Right App. Optional 3D body measurements add progress insight and support better fitting shopping.

2. Information We Collect

We may collect the following personal data:

Name and email address (unless hidden via Apple ID or similar)
Date of birth (if provided)
3D body measurements and derived data (e.g. sizing preferences)
Location data (when you actively use the scanner finder feature)
Fitness and health data (when you enable health sync features)

2.1 Health and Fitness Data Collection

When you enable health sync features in the App, we may access the following data from Apple Health (iOS), Health Connect (Android), or Garmin Connect (where enabled):

Steps and step cadence
Active calories burned
Basal energy burned
Exercise sessions (type, duration, intensity)
Heart rate
Distance (e.g. walking, running, cycling)
Cycling pedalling cadence
Workout and activity history

How We Use Health Data

Health data is used solely to:

Display fitness metrics in your dashboard
Calculate Total Daily Energy Expenditure (TDEE)
Adjust personalised calorie targets
Track workouts and activity history
Generate insights and summaries within the App
Optimise nutrition recommendations

Health Data Storage

Stored securely on your device and synced with UK-based servers where required for App functionality
Encrypted in transit and at rest
You may disable health sync at any time via App settings
Deleting your account starts a 30-day deletion window. If you sign back in and request restoration within those 30 days, your account and associated health data may be restored. After 30 days, associated health data is permanently deleted or anonymised except where retention is required for legal, fraud-prevention, billing, or security reasons

Health Data Sharing

We do not sell health or fitness data
We do not use or share health, fitness, Garmin Connect, body scan or measurement, progress photo, message, food or workout, or location data for advertising or cross-app tracking.
Health and fitness data is never used for advertising
Health and fitness data is used only for features you explicitly enable

2.2 Location Data Collection

We collect precise location data only when you actively use the scanner finder feature. This data is used to:

Display scanning services near you
Calculate distances to scanners
Provide location-based recommendations

Location data is processed in real-time and is not permanently stored. You may disable location access at any time through your device settings.

3. How We Use Your Data

We use your data to:

Provide personalised size recommendations
Deliver fitness and nutrition tracking features
Calculate calorie targets and activity metrics
Improve and maintain the App
Communicate with you when necessary
Process purchases of scanning services
Display nearby scanning services (when enabled)
Monitor anonymised affiliate activity (e.g. via Awin)

We do not track your browsing activity on third-party websites.

4. Legal Basis for Processing

We process personal data based on:

Your explicit consent (especially for health data)
Performance of our contract with you
Legitimate interests in improving and securing our services

You may withdraw consent at any time via App or device settings.

5. Data Storage

Fits Right stores account data on UK-based servers provided by IONOS. Features using external service providers, including AI Coach, also send the limited information needed for the feature to those providers. Provider processing and security retention are subject to the applicable service terms and safeguards. The connected-health notice explains the separate Garmin Coach choice.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties, except where required to operate and secure our services in accordance with applicable law and our data protection obligations.

6.1 Garmin Connect Data and External AI Providers

If you choose to connect Garmin Connect to the Fits Right App, we may receive fitness and health data from Garmin APIs, including steps, active calories, workouts, activity history, and related metrics (“Garmin Connect Data”). Garmin Connect Data supports the health, fitness and dashboard features you enable. Direct Garmin health summaries are included in external AI Coach requests only after your separate optional Coach-sharing choice, as described in the connected-health notice.

Fits Right does not sell Garmin Connect Data or use it for advertising. If you separately enable Garmin Coach sharing, recent health summaries are sent to OpenAI to answer your coaching requests.

Without your separate Garmin Coach-sharing choice, direct Garmin health summaries are excluded from external AI Coach requests. With that choice enabled, OpenAI processes recent summaries for personalised advice; this is not model training by Fits Right.

Garmin Connect Data is processed for the functionality you explicitly enable, including the separate optional AI Coach processing described above.

Any future change to how Garmin Connect Data is collected, used, processed, stored, shared, or disclosed will be made only in accordance with applicable Garmin Connect Developer Program requirements, including Garmin’s prior written approval where required.

6.2 Processing and AI-Assisted Features

Fits Right uses internal software and external AI processing to support the features you choose, including personalised coaching. Messages and relevant account context are processed to answer Coach requests. Direct Garmin health summaries require the separate optional Garmin Coach-sharing choice. We do not use health, fitness or Garmin Connect Data for advertising.

6.3 Anonymised and Aggregated Data

We may use and share fully anonymised and aggregated data with third parties for research, analytics, product development, and commercial purposes.

This data:

Does not identify any individual
Cannot be used to re-identify users
Is no longer considered personal data under UK GDPR once anonymised

7. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Correct or delete your data
Withdraw consent at any time
Restrict or object to processing
Control location and health data permissions
Export your health and fitness data

You may delete your account at any time via the App.

8. Data Retention

We retain your data until you delete your account. Upon deletion, access is removed immediately and the account enters a 30-day deletion window. If you sign back in and request restoration within those 30 days, your account and associated data may be restored. After 30 days, associated data is permanently removed or anonymised except where retention is required for legal, fraud-prevention, billing, or security reasons.

9. Children’s Privacy

The App is not intended for users under the age of 16. We do not knowingly collect data from children without appropriate parental consent.

10. Security

We protect your data using industry-standard measures, including:

Encrypted data transmission
Encrypted data storage
Secure authentication
Regular security reviews

11. Third-Party Services

The App integrates with Apple Health, Health Connect, and Garmin Connect where enabled by the user. Use of these services is governed by the relevant provider’s privacy policies. We access only the minimum data required for functionality.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via the App or email. Continued use of the App constitutes acceptance of the updated policy.

Any future changes relating specifically to Garmin Connect Data will be made only in accordance with Garmin Connect Developer Program requirements, including prior written approval from Garmin where required.

13. Contact Us

If you have questions about this Privacy Policy or your data rights, please contact:

Email: customerservice@fitsright.co.uk

Data Protection Officer: Fits Right Ltd, United Kingdom

Optional Event Location

If you choose Use my approximate location, Fits Right reads your device location once to place it into an approximately 5 km area. We do not store the precise GPS position and do not track your location in the background.

If you use the postcode fallback, the postcode is used once to find an approximate area and is not stored.

We use the approximate area to understand demand and plan optional Fits Right Scan events. You separately choose whether to receive nearby-event alerts. These choices are not marketing consent.

You can update the area, switch nearby-event alerts off, or delete the location at any time under Profile > Location & event preferences. Internal planning maps show grouped areas only and suppress groups with fewer than five users.

Advertising Measurement

Fits Right uses Meta App Events (the Meta SDK) to understand whether our Facebook and Instagram adverts lead to app installs and subsequent app activity or purchases. Depending on your device settings and permissions, Meta may receive a device advertising identifier and limited product-interaction or app-event data, such as app activation or conversion activity. Meta may link those signals with activity from other companies' apps or websites for advertising measurement; Apple classifies this as tracking.

We do not send or use your health or fitness data, HealthKit or Health Connect data, Garmin data, body scans or measurements, progress photos, messages, food or workout entries, or precise or approximate event location for advertising or cross-app tracking.

On iOS, access to the device advertising identifier is subject to your App Tracking Transparency choice. You can change that permission in iOS Settings. Marketing email consent and optional nearby-event alerts are separate choices.