Core architecture principles behind Fit GorillAI health data handling.
Never sold, never broadcast to ad networks or data brokers. HealthKit data is read-only and used solely to enhance your fitness experience.
When account closure is initiated, all identifiers, workout logs, and cloud records are permanently deleted immediately.
HealthKit access requires your permission through iOS. You can revoke access anytime via iOS Settings > Privacy > Health.
This Privacy Policy describes how your personal data collected through the Fit GorillAI mobile application ("App") is protected.
We act as the data controller within the meaning of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the European Union General Data Protection Regulation ("GDPR").
Any information relating to an identified or identifiable natural person.
Sensitive data as listed in KVKK Art. 6, including biometric and health data.
Any operation performed on personal data, including collection, recording, storage, alteration, disclosure, transfer, retrieval, classification, or restriction of use.
The natural or legal person who determines the purposes and means of processing personal data.
Consent that is freely given, specific, informed, and unambiguous.
Email address, first and last name, display name.
Height (cm), weight (kg), gender, age, activity level.
Device identifier (identifierForVendor), device name.
Subscription status, purchase history (via RevenueCat).
Workout, nutrition, sleep, and HealthKit data processed within our App constitute health data and fall under the category of special category personal data.
This data is processed solely on the basis of your explicit consent. Access to Apple HealthKit data is additionally subject to your explicit consent through the permission mechanism provided by the iOS operating system. You may revoke HealthKit access at any time via iOS Settings > Privacy > Health.
Your health data will under no circumstances be used for advertising purposes or sold to third parties.
| Provider | Purpose & Scope | Data Transferred | Policy Link |
|---|---|---|---|
| 6.1 Google LLC | OAuth authentication via Google Sign-In | Google account ID, email address, name | Privacy Policy open_in_new |
| 6.2 Apple Inc. | Apple Sign-In, HealthKit integration, App Store transactions | HealthKit data is read with your permission and stored on our servers to provide fitness tracking features. Never shared with third parties. | Privacy Policy open_in_new |
| 6.3 RevenueCat Inc. | Subscription management & in-app purchases (Server: USA) | User ID, purchase receipts, subscription status | Privacy Policy open_in_new |
Your personal data may be transferred abroad in the following cases:
These transfers are carried out under the respective providers' data processing terms and adequate protection mechanisms in accordance with KVKK Art. 9 and GDPR Art. 46.
Retained as long as your account remains active.
All personal data is permanently deleted immediately.
Automatically removed upon expiration from secure storage.
Read with your permission and stored on our servers to provide fitness tracking features. Deleted immediately upon account deletion.
All data communication is protected with high-grade TLS encryption.
Authentication tokens are securely stored in the iOS hardware Keychain.
Server-side records are segregated and maintained in encrypted environments.
Regular security reviews and assessments are conducted to maintain data protection standards.
You have the following rights regarding your personal data:
To exercise these rights, contact us at aifitapp@protonmail.com. Your request will be processed free of charge within 30 days.
You also retain the right to file a complaint with the Turkish Personal Data Protection Board (www.kvkk.gov.tr) or the data protection authority in your country.
Our App engages in profiling activities as part of its AI-powered workout program generation feature. During this process, your physical data, workout history, and preferences are automatically analyzed to generate personalized workout programs.
Important note: Programs created as a result of this profiling are recommendations only. You have the statutory right to object to decisions based exclusively on automated processing.
Fit GorillAI is not designed for use by individuals under the age of 16. We do not knowingly collect personal data from persons under 16. If such a situation is identified, the relevant data will be deleted immediately from our infrastructure.
The Fit GorillAI mobile application does not use cookies. However, integrated third-party SDKs (Google Sign-In, RevenueCat) may have their own tracking and analytics mechanisms. We recommend referring to their respective privacy policies for granular controls.
We reserve the right to update this Privacy Policy as necessary. Significant changes will be communicated through in-app notifications. The effective date will always be indicated at the top of this page.
For questions, requests, and applications regarding our privacy policy:
We are here to help with data deletion requests and privacy rights inquiries.
