Privacy Policy

Who we are

FitCheck Duo is the controller responsible for the personal information described in this policy.

Information we collect

Most information comes directly from you. Connected-service data comes from the service you choose to connect, and imported data comes from the files or pages you choose to provide.

How and why we use your information

AI coaching, voice notes and video reviews

Paid coaching features use OpenAI services to generate Tim’s check-in feedback, exercise form checks, training and nutrition plans, weekly meal plans, daily coaching, chat responses and conversational scripts. Ultimate uses HeyGen to animate Tim’s supplied portrait and generate the talking video review.

In a human-coach workspace, AI controls are available to the coach rather than the client. The coach may use relevant client information to create a private draft, edit it using their own knowledge and publish the final plan or review to the client. Clients see the coach-published result, not the private draft or AI controls. A coach may also record a real voice note; that recording is stored privately and delivered to the intended client.

• Only information relevant to the feature being generated is sent.
• Progress or goal photos may be included only when the feature needs image analysis.
• For an exercise form check, the original video is stored privately by FitCheck. Representative still frames sampled on your device are sent to OpenAI in chronological order; the full video is not sent to OpenAI.
• If you enable cycle context for Tim, the estimated cycle position and recent symptoms may be included in the AI request used to generate your coaching.
• AI output can be incomplete or incorrect and should be treated as guidance, not professional medical advice.
• A human coach remains responsible for reviewing and personalising any AI-assisted draft before publishing it to a client.
• AI does not make decisions that produce legal or similarly significant effects about you.
• Stored audio can be replayed without generating it again.
• Ultimate video reviews are stored privately by FitCheck after generation so they can be replayed without creating a new video.
• The Tim shown in an Ultimate video is an AI-generated character, not a real personal trainer recording the review live.
• Messages sent through Chat with Tim are stored in your FitCheck account so the conversation can continue. You can clear the conversation from the chat panel.

Our OpenAI integration is configured not to request storage of API responses by OpenAI where the available API setting supports this. OpenAI may still process limited data as necessary to provide, secure and monitor its service under its own terms and privacy commitments.

Connecting WHOOP, Strava and MyFitnessPal

WHOOP is optional. When you choose to connect it, you are taken to WHOOP to sign in and approve the exact read-only permissions requested by FitCheck Duo. We do not receive your WHOOP password.

Depending on the permissions you approve, FitCheck Duo may import your WHOOP profile, body measurements, physiological cycles, recovery, sleep and workout data. This can include recovery score, heart-rate variability, resting heart rate, sleep duration and performance, strain, workout type, duration and heart-rate information.

• Access and refresh tokens are stored server-side and protected using available encryption.
• The integration is read-only and cannot change your WHOOP account.
• You can disconnect WHOOP from FitCheck Duo or revoke access in WHOOP.
• Disconnecting removes the live connection tokens. Previously imported FitCheck history remains until you delete it or ask us to do so.

WHOOP remains responsible for how it processes data within its own service.

Strava is also optional. When connected, FitCheck requests read-only access to your activities, including activities whose Strava visibility is set to Only You when you approve that scope. FitCheck may import the activity name and type, date and time, distance, moving time, elapsed time, elevation, speed, heart rate, power and related activity flags when Strava makes them available. These activities are added to your workout history and may be used as context for Tim’s coaching.

• FitCheck never receives your Strava password and cannot edit your Strava activities.
• You can disconnect in FitCheck or revoke FitCheck from your Strava connected-app settings.
• Disconnecting removes the live Strava tokens. Previously imported workout history remains until you delete your account or ask us to remove it.

Strava remains responsible for information processed within its own service.

MyFitnessPal is optional. When connected, FitCheck requests read-only access to the food-diary information you approve. FitCheck may import daily meal summaries including calories, protein, carbohydrates, fat, fibre, sugar and sodium. These totals may fill Daily check-ins and be used as context for Tim’s coaching.

• FitCheck never receives your MyFitnessPal password and cannot edit your food diary.
• You can disconnect in FitCheck or revoke FitCheck from your MyFitnessPal connected apps.
• Disconnecting removes the live MyFitnessPal tokens. Previously imported FitCheck nutrition entries remain until you edit them, delete your account or ask us to remove them.

MyFitnessPal remains responsible for information processed within its own service.

Who we share information with

We do not sell your personal information. We only share it where needed to operate the service, where you ask us to, or where the law requires it.

Some providers may process information outside the UK. Where required, we use recognised safeguards such as adequacy regulations or approved contractual protections.

How long we keep information

We keep personal information only for as long as it is reasonably needed for the purpose collected, including providing an active account, meeting legal obligations, resolving disputes and protecting the service.

• Account, check-in and plan information is normally retained while your account remains active.
• WHOOP, Strava and MyFitnessPal connection tokens are removed when you disconnect the relevant integration.
• Subscription and invoice records may be retained for accounting, tax, fraud-prevention and legal-obligation periods after a membership ends.
• Affiliate attribution, commission, refund and payout records may be retained for accounting, tax, fraud-prevention and dispute-resolution purposes.
• An inactive community profile is hidden from new leaderboards. Group membership and invitation records may be retained for safety, dispute and access-control purposes while the underlying account remains active.
• Generated plans, feedback, audio and exercise form-check videos remain attached to your account until deleted or your account is removed. Individual form-check videos and reviews can be deleted from the Form Check page.
• Where deletion is requested, information is removed or anonymised from live systems without undue delay, subject to security backups and legal retention requirements.
• Security and support records may be kept for a limited period where necessary to investigate issues or establish legal claims.

Your data-protection rights

Depending on the circumstances, you may have the right to:

We may need to verify your identity before completing a request. Some rights are subject to legal exceptions.

How we protect information

The installed app can be protected with Face ID, Touch ID, fingerprint or the phone’s device credential. Biometric matching is performed by the phone’s operating system; FitCheck receives only a success or failure result and never receives or stores a face image, fingerprint or biometric template.

We use reasonable technical and organisational safeguards, including password hashing, session protection, access controls, server-side secrets, encrypted connected-service tokens where supported, secure OAuth state and identity-token checks for Google and connected services, and restricted administrator access.

No online service can guarantee absolute security. Please use a strong, unique password and tell us promptly if you believe your account has been compromised.

Cookies and local storage

FitCheck Duo uses essential cookies to keep you signed in, protect forms and maintain security. On mobile, a secure persistent-login cookie may keep your member account signed in for up to 30 days; its server-side token is stored in hashed form, rotated when used and removed when you log out. These cookies are necessary for the requested account service to work. When you follow an affiliate link, FitCheck also stores a first-party referral cookie for up to 30 days so a new account can be attributed to the correct affiliate. We do not currently use advertising cookies in the application.

Children

FitCheck Duo is not designed for children under 16. If you believe a child has provided information without appropriate permission, please contact us so we can investigate and remove it where required.

Changes to this policy

We may update this policy when the service, providers or legal requirements change. The latest version will remain available at this public page, and significant changes may also be highlighted inside FitCheck Duo.