Privacy Policy for FitBi Effective Date: January 24, 2026 Last Updated: January 24, 2026 Version: 1.2 1. Introduction This Privacy Policy describes how FitBi ("we," "us," "our," or "the App") collects, uses, stores, and protects your personal information. We are committed to protecting your privacy and handling your data transparently in accordance with: General Data Protection Regulation (GDPR) for users in the EU/EEA California Consumer Privacy Act (CCPA) for California residents Other applicable data protection laws worldwide By using FitBi, you agree to the collection and use of information as described in this Privacy Policy. 2. Contact Information Developer: KIkc Email: kitkeyxxz@outlook.com For privacy-related questions or to exercise your data rights, please contact us at the email above. 3. Information We Collect 3.1. Information You Provide Directly Account Information: Full name Email address Age (date of birth) Gender Password (stored in encrypted form only) Health and Fitness Information: Weight Height Fitness goals (weight loss, muscle gain, general fitness) Fitness level (beginner, intermediate, advanced) Workout history and activity logs Steps counted Calories burned Exercise duration and intensity Heart rate data (if provided by connected devices) Sleep patterns (if tracked) Dietary preferences and nutrition logs Other fitness metrics you choose to input Note: Health and fitness data is considered sensitive personal information. We collect this data only with your consent and use it to provide personalized fitness recommendations and track your progress. 3.2. Information Collected Automatically Device Information: Device type, model, and manufacturer Operating system type and version (Android/iOS) Unique device identifiers (Advertising ID, IDFA) Mobile network information Device language and region settings Screen resolution Battery level and charging status Available storage space Usage Data: App features and screens accessed Session duration and frequency Workout completion rates Time spent in the App Navigation patterns and interactions Search queries within the App Button clicks and feature usage In-app purchase history Subscription status and billing events Advertisement interactions (views, clicks, conversions) Technical Data: IP address App version Crash reports and error logs Performance data and diagnostics Network connection type (WiFi, cellular, speed) Cookies and Similar Technologies: Session cookies for authentication Analytics cookies to understand app usage Advertising cookies for personalized ads Device identifiers for app functionality Tracking pixels for ad performance measurement 3.3. Physical Activity and Sensor Data We collect and track physical activity data to provide core fitness tracking functionality. Motion and Activity Sensors: Accelerometer data for step counting Gyroscope data for activity recognition Movement patterns and activity levels Exercise type detection (walking, running, cycling, etc.) Activity intensity and duration Distance traveled during workouts Elevation changes during activities Wearable Device Integration: Data from connected fitness trackers and smartwatches Active minutes and sedentary time Workout Tracking: Exercise routines performed Sets, repetitions, and weights used Rest periods between exercises Workout completion status Personal records and achievements Progress photos (if uploaded) Note: Physical activity tracking is essential for the App's core functionality. You can control sensor permissions through your device settings, but disabling these may limit app features. 3.4. Camera and Food Photos: - Camera access for capturing food photos - Images processed for calorie and nutrition analysis - Photos are not stored on our servers permanently - Processing may use on-device ML or third-party API You can enable or disable at any time through app settings or device permissions. 3.5. Subscription and Payment Data When you purchase a subscription or make in-app purchases, we and our payment processors collect: Subscription type (monthly/annual) Purchase date and billing period Transaction identifiers and purchase history Payment method type (not full card details) Subscription status (active, cancelled, expired, trial) Renewal and cancellation events Refund requests and outcomes Note: Full payment details (card numbers, bank information) are handled exclusively by Google Play Billing or Apple App Store and are never stored by FitBi. 3.6. Information from Third-Party Services Firebase (Google Cloud Platform): Authentication data Analytics data about app usage Crash and error reports Performance monitoring data Advertising Partners: Ad impressions and interactions Advertising ID (IDFA on iOS, AAID on Android) Device information for ad targeting Conversion tracking data Payment Processors: Transaction information Purchase and subscription history Payment method type (not full payment details) 4. How We Use Your Information 4.1. To Provide and Improve Our Services We use your information to: Create and manage your account Provide personalized workout plans and recommendations Track your fitness progress and goals Calculate calories, steps, distance, and other fitness metrics Recognize different types of physical activities automatically Monitor your activity levels and send motivational reminders Improve app performance and fix bugs Develop new features based on user behavior Ensure app security and prevent fraud Analyze sensor data to improve activity recognition accuracy Legal Basis (GDPR): Performance of contract, legitimate interests, consent 4.2. To Process Subscriptions and Payments We use your subscription and payment data to: Activate and manage your premium subscription Process subscription renewals and billing Provide access to premium features and ad-free experience Send billing notifications and receipts Handle cancellations, refunds, and billing disputes Prevent subscription fraud and unauthorized account sharing Analyse subscription metrics to improve pricing and plans Legal Basis (GDPR): Performance of contract, legitimate interests, legal obligation 4.3. How We Use Fitness and Health Data Your fitness and health data is used solely to provide and improve your personal experience. Core Functionality: Generate personalised workout plans based on your goals and fitness level Calculate and display calories burned, steps taken, and distances covered Track your progress over time with charts and statistics Automatically detect and classify your physical activities Provide insights and recommendations based on your performance Send motivational reminders and achievement notifications Service Improvement: Improve the accuracy of activity recognition algorithms (using anonymised, aggregated data only) Calibrate calorie and step calculation models Develop new fitness features based on usage patterns What We Do NOT Do With Your Fitness Data: We do NOT sell your fitness or health data to third parties We do NOT share individual fitness data with advertisers for targeting We do NOT use your health data to make automated decisions that significantly affect you We do NOT share your fitness data with employers, insurers, or healthcare providers without your explicit consent Legal Basis (GDPR): Performance of contract, consent (for sensitive health data), legitimate interests 4.4. To Display Personalized Advertising We use your information to show you relevant advertisements (free version only): Display personalized ads based on your interests and activity Show fitness-related products and services that may interest you Measure ad performance and effectiveness Prevent ad fraud and ensure ad quality Premium subscribers receive an ad-free experience. No advertising data is collected or used for subscribers. Legal Basis (GDPR): Consent, legitimate interests 4.5. To Communicate with You Send important app updates and service notifications Respond to your support requests Notify you about subscription renewals, expirations, and billing events Send account security alerts Send promotional emails about new features or premium plans (you can opt out) Send personalized fitness tips and motivation (you can opt out) Legal Basis (GDPR): Performance of contract, legitimate interests, consent (for marketing) 4.6. For Analytics and Improvement Understand how users interact with the App Identify popular features and areas for improvement Analyse subscription conversion and retention rates Generate aggregated, anonymized statistics Optimise app performance and A/B test new features Legal Basis (GDPR): Legitimate interests, consent 4.7. For Safety and Security Verify user identity and prevent fraud Detect and prevent subscription fraud or unauthorized account sharing Detect and prevent security threats Comply with legal obligations Legal Basis (GDPR): Legal obligation, legitimate interests 5. How We Share Your Information We do NOT sell your personal information to third parties for monetary consideration. 5.1. Service Providers Firebase (Google Cloud Platform): Purpose: Cloud hosting, authentication, analytics, crash reporting, cloud storage Data Shared: Account information, usage data, device information, crash logs, fitness data Privacy Policy: https://firebase.google.com/support/privacy Advertising Networks (free version only): Purpose: Display ads, measure ad performance, personalized advertising Data Shared: Advertising ID, device information, app usage data, demographic information Partners: Google AdMob, Facebook Audience Network, Unity Ads Note: Premium subscribers are not subject to advertising data sharing. Payment Processors: Purpose: Process subscription payments and in-app purchases securely Data Shared: Transaction information, purchase history, subscription status Partners: Google Play Billing, Apple App Store All service providers are contractually obligated to protect your data and use it only for specified purposes. 5.2. Legal Requirements We may disclose your information if required to comply with legal obligations, enforce our Terms of Service, protect our rights, or prevent fraud or illegal activity. 5.3. Business Transfers If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different Privacy Policy. 5.4. Aggregated and Anonymized Data We may share aggregated, anonymized data that cannot identify you with analytics partners, research institutions, or public reports. 5.5. With Your Consent We may share your information with other parties only with your explicit consent. 6. Subscriptions 6.1. Subscription Plans FitBi offers the following subscription options: Free Plan: Basic fitness tracking with third-party advertisements Premium Monthly: Full access to all features, ad-free experience, billed monthly Premium Annual: Full access to all features, ad-free experience, billed annually (discounted rate) 6.2. Premium Features Premium subscribers receive access to: Ad-free experience throughout the App Advanced workout plans and personalised programmes Detailed fitness analytics and progress reports Unlimited workout history and data export Priority customer support Early access to new features Enhanced calorie and nutrition tracking Heart rate zone training and analysis Custom workout creation tools 6.3. Billing and Payments Subscriptions are billed through Google Play Store (Android) or Apple App Store (iOS) Subscription fees are charged at the beginning of each billing period Prices are displayed in your local currency before purchase All transactions are processed securely by the respective app store 6.4. Auto-Renewal Subscriptions automatically renew unless cancelled at least 24 hours before the current period ends Your account will be charged for renewal within 24 hours prior to the end of the current period You can manage or cancel your subscription through your app store account settings 6.5. Free Trials Free trial periods (if offered) will be clearly disclosed before purchase If you do not cancel before the trial ends, you will be charged for a subscription Trial eligibility is limited to new subscribers only 6.6. Cancellation You can cancel your subscription at any time through your app store account Cancellation takes effect at the end of the current billing period You will retain access to premium features until the end of the paid period Cancelling a subscription does not delete your account or fitness data 6.7. Refunds All purchases are processed through Google Play or Apple App Store Refund requests must be submitted through your app store within their refund period We do not directly process refunds; contact Google or Apple customer support In exceptional circumstances (billing errors, unauthorized charges), contact us at kitkeyxxz@outlook.com 6.8. Price Changes We reserve the right to change subscription prices at any time Price changes will not affect current subscribers until their next renewal We will communicate changes at least 30 days in advance 6.9. Data Processing for Subscriptions When you subscribe, we process the following data specifically for subscription management: Subscription type, start date, and expiration date Auto-renewal status and billing cycle Feature access entitlements tied to your subscription tier Cancellation and refund history This data is retained for up to 7 years for financial record-keeping and legal compliance, even after account deletion. Legal Basis (GDPR): Performance of contract, legal obligation 7. International Data Transfers 7.1. Where We Store Data Your data is stored on Firebase (Google Cloud Platform) servers and with our payment and advertising partners, which may be located in the United States, European Union, or other countries where our partners operate data centers. 7.2. Safeguards For transfers from the EU/EEA, we and our partners use Standard Contractual Clauses (SCCs), the EU-US Data Privacy Framework, and adequacy decisions by the European Commission. More information: Google: https://cloud.google.com/privacy/gdpr Facebook: https://www.facebook.com/privacy/policies/data-transfer 8. Data Retention 8.1. How Long We Keep Your Data Active Accounts: Account information: As long as your account is active Fitness and health data: As long as your account is active Physical activity tracking data: As long as your account is active Usage data: Up to 2 years Subscription and billing records: Up to 7 years (legal requirement) Advertising data: Up to 13 months Crash logs: Up to 90 days Deleted Accounts: Most personal data deleted within 30 days of account deletion Subscription and financial records retained for up to 7 years (legal compliance) Backup systems may retain data for up to 90 days Aggregated, anonymized data may be retained indefinitely 8.2. Legal Retention We may retain certain data longer if required by law or for legal proceedings. 8.3. Anonymized Data We may retain anonymized, aggregated data indefinitely for analytics and research purposes. 9. Your Privacy Rights and Choices 9.1. Rights for All Users Access your profile and fitness data in App settings Request a copy of your data by contacting us Export your workout history and activity logs Update your profile information in the App Delete your account through App settings (all personal data deleted within 30 days) Adjust app permissions in device settings Disable physical activity tracking (may limit functionality) Opt out of analytics tracking Opt out of personalized advertising (see Section 15) Unsubscribe from promotional emails via the unsubscribe link 9.2. Additional Rights for EU/EEA Users (GDPR) You have the right to: Right to Access: Request a copy of your personal data Right to Rectification: Correct inaccurate or incomplete data Right to Erasure ("Right to be Forgotten"): Request deletion of your data Right to Restrict Processing: Limit how we use your data Right to Data Portability: Receive your data in JSON or CSV format Right to Object: Object to processing based on legitimate interests Right to Withdraw Consent: Withdraw consent at any time Right to Lodge a Complaint: File a complaint with your local supervisory authority (https://edpb.europa.eu/about-edpb/board/members_en) Automated Decision-Making: We do not make automated decisions that significantly affect you without human review. To exercise your rights: Email kitkeyxxz@outlook.com Response Time: 30 days (extendable to 60 days for complex requests) 9.3. Additional Rights for California Residents (CCPA/CPRA) Right to Know: Categories and specific pieces of personal information collected Right to Delete: Request deletion of your personal information Right to Opt-Out of Sale/Sharing for advertising purposes Right to Non-Discrimination for exercising privacy rights Right to Correct: Request correction of inaccurate information Right to Limit Use of Sensitive Personal Information (health and fitness data) To exercise your rights: Email kitkeyxxz@outlook.com Response Time: 45 days (extendable to 90 days for complex requests) 10. Children's Privacy FitBi is intended for users aged 13 years and older. We do not knowingly collect personal information from children under 13 without verifiable parental consent. Users aged 13–17 should obtain parental or guardian consent before using the App. If we discover we have collected data from a child under 13 without consent, we will delete the data immediately and terminate the account. Parents can contact us at kitkeyxxz@outlook.com to review, delete, or refuse further collection of their child's data. 11. Data Security 11.1. Security Measures Technical Safeguards: Encryption for data in transit (TLS 1.3/SSL) Encryption for data at rest (AES-256 via Firebase) Secure authentication (Firebase Authentication with bcrypt password hashing) Regular security monitoring and audits Automatic security updates Protection against SQL injection and XSS attacks Payment Security: All payment processing handled by Google Play or Apple App Store (PCI DSS compliant) FitBi does not store full payment card details Subscription tokens and transaction IDs stored securely with encryption Access Controls: Restricted access to personal data on a need-to-know basis Multi-factor authentication for administrative access Regular access reviews and logging of data access 11.2. Your Responsibility Keep your password secure and confidential Use a strong, unique password (minimum 8 characters) Do not share your account credentials Log out on shared devices Report suspicious activity immediately 11.3. Data Breach Notification In the event of a data breach: We will investigate and contain the breach immediately Notify affected users within 72 hours (as required by GDPR) Report to relevant authorities as required by law Provide information about the breach and steps to protect yourself 11.4. Security Limitations No method of transmission or storage is 100% secure. While we use industry-standard security measures, we cannot guarantee absolute security of your data. You use the App at your own risk. 12. Third-Party Services 12.1. Firebase (Google Cloud Platform) We use Firebase Authentication, Firestore, Analytics, Crashlytics, Cloud Storage, and Cloud Functions. Privacy Policy: https://firebase.google.com/support/privacy Google Privacy Policy: https://policies.google.com/privacy 12.2. Advertising Networks (free version only) Google AdMob: https://policies.google.com/privacy | Opt-out: https://adssettings.google.com Facebook Audience Network: https://www.facebook.com/privacy/policy | Opt-out: https://www.facebook.com/ads/preferences Unity Ads: https://unity.com/legal/privacy-policy 12.3. Payment Services Google Play Billing: For Android in-app purchases and subscriptions Apple App Store / StoreKit: For iOS in-app purchases and subscriptions 12.4. Analytics Services Google Analytics / Firebase Analytics: Usage patterns and engagement 12.5. Links to Other Websites The App may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information. 13. Advertising and Tracking Technologies Advertising is displayed only in the free version of FitBi. Premium subscribers do not see ads and are not subject to advertising data collection. 13.1. How We Use Advertising We display third-party advertisements to support our free app Ads are personalized based on your interests, app usage, and demographics Ad revenue helps us maintain and improve the App 13.2. Types of Ads Banner Ads: Small ads displayed at top/bottom of screens Interstitial Ads: Full-screen ads shown at natural breaks Video Ads: Short video advertisements (optional) Rewarded Ads: Watch ads to unlock premium features temporarily Native Ads: Ads integrated into app content 13.3. Ad Personalization We and our advertising partners may use your age, gender, fitness goals, workout history, app usage patterns, device information, and inferred interests to create a profile for personalized advertising. 13.4. Ad Measurement and Attribution We and our partners use tracking technologies to measure ad views and clicks, track conversions, optimize ad performance, and prevent ad fraud. 13.5. Opting Out of Personalized Ads See Section 15 for detailed instructions. 14. Updates to This Privacy Policy 14.1. How We Update This Policy We may update this Privacy Policy to reflect changes in our data practices, new features, applicable laws, new advertising or payment partners, or enhanced security measures. 14.2. Notification of Changes We will notify you of material changes through: In-app notification (pop-up or banner) Email notification to your registered email address Notice in the App before you continue using it Updated "Last Updated" date at the top of this policy Notice Period: At least 30 days before significant changes take effect. 14.3. Version History Version 1.2 — February 2026: Added dedicated Subscriptions section (Section 6) and expanded Fitness Data usage disclosures (Section 4.3) Version 1.1 — January 24, 2026: Added advertising section, physical activity tracking, enhanced sensor data collection Version 1.0 — January 10, 2026: Initial release You can request previous versions of this Privacy Policy by contacting us. 15. Opt-Out of Personalized Advertising 15.1. Device-Level Settings Android: Go to Settings → Google → Ads Enable "Opt out of Ads Personalization" Or reset your Advertising ID iOS: Go to Settings → Privacy & Security → Tracking → Disable "Allow Apps to Request to Track" Go to Settings → Privacy & Security → Apple Advertising → Disable "Personalized Ads" 15.2. In-App Settings Go to Settings → Privacy → Advertising → Toggle off "Personalized Ads" You will still see ads, but they will not be personalized 15.3. Advertising Partner Opt-Outs Google: https://adssettings.google.com Facebook: https://www.facebook.com/ads/preferences NAI: https://optout.networkadvertising.org DAA: https://optout.aboutads.info 15.4. Limitations of Opt-Out You will still see advertisements, but they will be generic/non-personalized Opting out does not stop data collection for other purposes (analytics, fraud prevention) You may need to opt out on each device separately Clearing cookies/data may reset opt-out preferences 16. Do Not Track (DNT) Our App does not currently respond to Do Not Track (DNT) signals. However, you can control tracking through device settings (see Section 15.1), in-app privacy settings, or advertising opt-out tools. 17. Legal Basis for Processing (GDPR) Consent: Collection of health and fitness data Physical activity and sensor data tracking Personalized advertising Marketing communications Analytics cookies (where required) Performance of Contract: Creating and managing your account Providing fitness tracking and personalization Delivering app services you requested Processing subscriptions and payments Legitimate Interests: Improving app functionality and user experience Analyzing usage patterns Ensuring security and preventing fraud Subscription fraud prevention Customer support Displaying non-personalized advertising Legal Obligation: Complying with applicable laws Financial and tax record-keeping Responding to legal requests Protecting intellectual property rights You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before withdrawal. 18. California Privacy Rights (CCPA/CPRA) 18.1. Categories of Personal Information Collected In the past 12 months, we have collected the following categories: Identifiers: Name, email address, device ID, advertising ID, IP address Personal characteristics: Age, gender, fitness level Health information: Weight, height, fitness goals, activity data, steps, calories, heart rate, sleep patterns, sensor data Commercial information: Purchase history, subscription status, in-app transactions Internet activity: Usage data, app interactions, ad interactions, search history Sensory data: Accelerometer and gyroscope data, photos (if uploaded) Inferences: Fitness level, preferences, interests derived from usage patterns Sensitive Personal Information: Health and fitness data Precise geolocation (when enabled) 18.2. Sale or Sharing of Personal Information Sale: We do NOT sell your personal information for monetary consideration. Sharing for Advertising: We may "share" advertising identifiers and device data with advertising partners for cross-context behavioral advertising purposes (free version only). Premium subscribers are excluded from this sharing. You can opt out (see Section 15). 18.3. Your California Privacy Rights California residents have the right to: Know what personal information we collect, use, and share (up to 2 times per year) Delete personal information (with some exceptions for legal compliance) Correct inaccurate personal information Opt-out of Sale/Sharing for cross-context behavioral advertising Limit use of Sensitive Personal Information to purposes necessary to provide services Non-discrimination for exercising privacy rights To exercise your rights: Email kitkeyxxz@outlook.com Response Time: 45 days (may extend to 90 days with notice for complex requests) Appeals: If we deny your request, you may appeal by emailing us. 19. International Users Depending on your location, you may have specific privacy rights under: EU/EEA: GDPR rights (see Section 9.2) California: CCPA/CPRA rights (see Sections 9.3 and 18) Brazil: LGPD rights (access, correction, deletion, portability) UK: UK GDPR rights (similar to EU GDPR) Canada: PIPEDA rights (access, correction, challenge compliance) Australia: Privacy Act rights (access, correction) We comply with all applicable data protection laws in regions where the App is available. 20. How to Contact Us For any questions, concerns, or requests regarding this Privacy Policy or our data practices: Developer: KIkc Email: kitkeyxxz@outlook.com For specific requests, use these subject lines: Data access requests: "Access Request" Data deletion requests: "Deletion Request" Data correction requests: "Correction Request" Subscription/billing issues: "Subscription Issue" Privacy questions: "Privacy Inquiry" Security concerns: "Security Issue" Opt-out requests: "Opt-Out Request" Complaint: "Privacy Complaint" We take all privacy inquiries seriously and will respond as quickly as possible. 21. Your Consent By using FitBi, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and sharing of your information as described. For sensitive health and fitness data and physical activity tracking, you provide explicit consent when you create an account and enter your fitness information, use fitness tracking features, grant sensor and location permissions, enable physical activity tracking, or accept this Privacy Policy. For personalized advertising, you provide consent when you accept this Privacy Policy and use the free, ad-supported version of the App. You can withdraw your consent at any time by deleting your account through App settings, contacting us at kitkeyxxz@outlook.com, adjusting permissions in your device settings, opting out of personalized ads (see Section 15), or disabling specific features in app settings. Summary of Key Points ✓ We collect account information, health/fitness data, physical activity sensor data, and usage information ✓ Fitness and health data is used only to provide your personal experience — never sold or shared with advertisers individually ✓ We track your physical activity using device sensors (accelerometer, gyroscope) to provide core fitness tracking ✓ Premium subscribers enjoy an ad-free experience with no advertising data collection ✓ Free users see personalized ads; opt-out is available via device settings or in-app controls ✓ Subscriptions are managed through Google Play or Apple App Store; FitBi does not store payment card details ✓ Subscription billing records are retained for up to 7 years for legal compliance ✓ We use Firebase (Google) for hosting, authentication, analytics, and crash reporting ✓ We do NOT sell your personal information for money ✓ You can access, correct, and delete your data at any time ✓ We use industry-standard security measures including encryption (TLS 1.3, AES-256) ✓ We comply with GDPR, CCPA, and other applicable privacy laws ✓ Minimum age: 13 years old ✓ Contact us at kitkeyxxz@outlook.com for privacy questions Last Updated: January 24, 2026 Version: 1.2 Effective Date: January 24, 2026 FitBi Developer: KIkc Email: kitkeyxxz@outlook.com Privacy Policy for FitBi Effective Date: January 24, 2026 Last Updated: January 24, 2026 Version: 1.2 1. Introduction This Privacy Policy describes how FitBi ("we," "us," "our," or "the App") collects, uses, stores, and protects your personal information. We are committed to protecting your privacy and handling your data transparently in accordance with: General Data Protection Regulation (GDPR) for users in the EU/EEA California Consumer Privacy Act (CCPA) for California residents Other applicable data protection laws worldwide By using FitBi, you agree to the collection and use of information as described in this Privacy Policy. 2. Contact Information Developer: KIkc Email: kitkeyxxz@outlook.com For privacy-related questions or to exercise your data rights, please contact us at the email above. 3. Information We Collect 3.1. Information You Provide Directly Account Information: Full name Email address Age (date of birth) Gender Password (stored in encrypted form only) Health and Fitness Information: Weight Height Fitness goals (weight loss, muscle gain, general fitness) Fitness level (beginner, intermediate, advanced) Workout history and activity logs Steps counted Calories burned Exercise duration and intensity Heart rate data (if provided by connected devices) Sleep patterns (if tracked) Dietary preferences and nutrition logs Other fitness metrics you choose to input Note: Health and fitness data is considered sensitive personal information. We collect this data only with your consent and use it to provide personalized fitness recommendations and track your progress. 3.2. Information Collected Automatically Device Information: Device type, model, and manufacturer Operating system type and version (Android/iOS) Unique device identifiers (Advertising ID, IDFA) Mobile network information Device language and region settings Screen resolution Battery level and charging status Available storage space Usage Data: App features and screens accessed Session duration and frequency Workout completion rates Time spent in the App Navigation patterns and interactions Search queries within the App Button clicks and feature usage In-app purchase history Subscription status and billing events Advertisement interactions (views, clicks, conversions) Technical Data: IP address App version Crash reports and error logs Performance data and diagnostics Network connection type (WiFi, cellular, speed) Cookies and Similar Technologies: Session cookies for authentication Analytics cookies to understand app usage Advertising cookies for personalized ads Device identifiers for app functionality Tracking pixels for ad performance measurement 3.3. Physical Activity and Sensor Data We collect and track physical activity data to provide core fitness tracking functionality. Motion and Activity Sensors: Accelerometer data for step counting Gyroscope data for activity recognition Movement patterns and activity levels Exercise type detection (walking, running, cycling, etc.) Activity intensity and duration Distance traveled during workouts Elevation changes during activities Wearable Device Integration: Data from connected fitness trackers and smartwatches Heart rate monitoring data GPS location data during outdoor activities (with your permission) Sleep tracking data Active minutes and sedentary time Workout Tracking: Exercise routines performed Sets, repetitions, and weights used Rest periods between exercises Workout completion status Personal records and achievements Progress photos (if uploaded) Note: Physical activity tracking is essential for the App's core functionality. You can control sensor permissions through your device settings, but disabling these may limit app features. 3.4. Location Data Approximate Location: We collect approximate location based on IP address for regional service optimization and localized content. Precise GPS Location (Optional): During outdoor workouts (running, cycling, hiking) when you enable GPS tracking To map your routes and calculate distance/pace To provide location-based workout recommendations To show nearby gyms or fitness facilities You can enable or disable GPS tracking at any time through app settings or device permissions. 3.5. Subscription and Payment Data When you purchase a subscription or make in-app purchases, we and our payment processors collect: Subscription type (monthly/annual) Purchase date and billing period Transaction identifiers and purchase history Payment method type (not full card details) Subscription status (active, cancelled, expired, trial) Renewal and cancellation events Refund requests and outcomes Note: Full payment details (card numbers, bank information) are handled exclusively by Google Play Billing or Apple App Store and are never stored by FitBi. 3.6. Information from Third-Party Services Firebase (Google Cloud Platform): Authentication data Analytics data about app usage Crash and error reports Performance monitoring data Advertising Partners: Ad impressions and interactions Advertising ID (IDFA on iOS, AAID on Android) Device information for ad targeting Conversion tracking data Payment Processors: Transaction information Purchase and subscription history Payment method type (not full payment details) 4. How We Use Your Information 4.1. To Provide and Improve Our Services We use your information to: Create and manage your account Provide personalized workout plans and recommendations Track your fitness progress and goals Calculate calories, steps, distance, and other fitness metrics Recognize different types of physical activities automatically Monitor your activity levels and send motivational reminders Improve app performance and fix bugs Develop new features based on user behavior Ensure app security and prevent fraud Analyze sensor data to improve activity recognition accuracy Legal Basis (GDPR): Performance of contract, legitimate interests, consent 4.2. To Process Subscriptions and Payments We use your subscription and payment data to: Activate and manage your premium subscription Process subscription renewals and billing Provide access to premium features and ad-free experience Send billing notifications and receipts Handle cancellations, refunds, and billing disputes Prevent subscription fraud and unauthorized account sharing Analyse subscription metrics to improve pricing and plans Legal Basis (GDPR): Performance of contract, legitimate interests, legal obligation 4.3. How We Use Fitness and Health Data Your fitness and health data is used solely to provide and improve your personal experience. Core Functionality: Generate personalised workout plans based on your goals and fitness level Calculate and display calories burned, steps taken, and distances covered Track your progress over time with charts and statistics Automatically detect and classify your physical activities Provide insights and recommendations based on your performance Send motivational reminders and achievement notifications Service Improvement: Improve the accuracy of activity recognition algorithms (using anonymised, aggregated data only) Calibrate calorie and step calculation models Develop new fitness features based on usage patterns What We Do NOT Do With Your Fitness Data: We do NOT sell your fitness or health data to third parties We do NOT share individual fitness data with advertisers for targeting We do NOT use your health data to make automated decisions that significantly affect you We do NOT share your fitness data with employers, insurers, or healthcare providers without your explicit consent Legal Basis (GDPR): Performance of contract, consent (for sensitive health data), legitimate interests 4.4. To Display Personalized Advertising We use your information to show you relevant advertisements (free version only): Display personalized ads based on your interests and activity Show fitness-related products and services that may interest you Measure ad performance and effectiveness Prevent ad fraud and ensure ad quality Premium subscribers receive an ad-free experience. No advertising data is collected or used for subscribers. Legal Basis (GDPR): Consent, legitimate interests 4.5. To Communicate with You Send important app updates and service notifications Respond to your support requests Notify you about subscription renewals, expirations, and billing events Send account security alerts Send promotional emails about new features or premium plans (you can opt out) Send personalized fitness tips and motivation (you can opt out) Legal Basis (GDPR): Performance of contract, legitimate interests, consent (for marketing) 4.6. For Analytics and Improvement Understand how users interact with the App Identify popular features and areas for improvement Analyse subscription conversion and retention rates Generate aggregated, anonymized statistics Optimise app performance and A/B test new features Legal Basis (GDPR): Legitimate interests, consent 4.7. For Safety and Security Verify user identity and prevent fraud Detect and prevent subscription fraud or unauthorized account sharing Detect and prevent security threats Comply with legal obligations Legal Basis (GDPR): Legal obligation, legitimate interests 5. How We Share Your Information We do NOT sell your personal information to third parties for monetary consideration. 5.1. Service Providers Firebase (Google Cloud Platform): Purpose: Cloud hosting, authentication, analytics, crash reporting, cloud storage Data Shared: Account information, usage data, device information, crash logs, fitness data Privacy Policy: https://firebase.google.com/support/privacy Advertising Networks (free version only): Purpose: Display ads, measure ad performance, personalized advertising Data Shared: Advertising ID, device information, app usage data, demographic information Partners: Google AdMob, Facebook Audience Network, Unity Ads Note: Premium subscribers are not subject to advertising data sharing. Payment Processors: Purpose: Process subscription payments and in-app purchases securely Data Shared: Transaction information, purchase history, subscription status Partners: Google Play Billing, Apple App Store All service providers are contractually obligated to protect your data and use it only for specified purposes. 5.2. Legal Requirements We may disclose your information if required to comply with legal obligations, enforce our Terms of Service, protect our rights, or prevent fraud or illegal activity. 5.3. Business Transfers If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different Privacy Policy. 5.4. Aggregated and Anonymized Data We may share aggregated, anonymized data that cannot identify you with analytics partners, research institutions, or public reports. 5.5. With Your Consent We may share your information with other parties only with your explicit consent. 6. Subscriptions 6.1. Subscription Plans FitBi offers the following subscription options: Free Plan: Basic fitness tracking with third-party advertisements Premium Monthly: Full access to all features, ad-free experience, billed monthly Premium Annual: Full access to all features, ad-free experience, billed annually (discounted rate) 6.2. Premium Features Premium subscribers receive access to: Ad-free experience throughout the App Advanced workout plans and personalised programmes Detailed fitness analytics and progress reports Unlimited workout history and data export Priority customer support Early access to new features Enhanced calorie and nutrition tracking Heart rate zone training and analysis Custom workout creation tools 6.3. Billing and Payments Subscriptions are billed through Google Play Store (Android) or Apple App Store (iOS) Subscription fees are charged at the beginning of each billing period Prices are displayed in your local currency before purchase All transactions are processed securely by the respective app store 6.4. Auto-Renewal Subscriptions automatically renew unless cancelled at least 24 hours before the current period ends Your account will be charged for renewal within 24 hours prior to the end of the current period You can manage or cancel your subscription through your app store account settings 6.5. Free Trials Free trial periods (if offered) will be clearly disclosed before purchase If you do not cancel before the trial ends, you will be charged for a subscription Trial eligibility is limited to new subscribers only 6.6. Cancellation You can cancel your subscription at any time through your app store account Cancellation takes effect at the end of the current billing period You will retain access to premium features until the end of the paid period Cancelling a subscription does not delete your account or fitness data 6.7. Refunds All purchases are processed through Google Play or Apple App Store Refund requests must be submitted through your app store within their refund period We do not directly process refunds; contact Google or Apple customer support In exceptional circumstances (billing errors, unauthorized charges), contact us at kitkeyxxz@outlook.com 6.8. Price Changes We reserve the right to change subscription prices at any time Price changes will not affect current subscribers until their next renewal We will communicate changes at least 30 days in advance 6.9. Data Processing for Subscriptions When you subscribe, we process the following data specifically for subscription management: Subscription type, start date, and expiration date Auto-renewal status and billing cycle Feature access entitlements tied to your subscription tier Cancellation and refund history This data is retained for up to 7 years for financial record-keeping and legal compliance, even after account deletion. Legal Basis (GDPR): Performance of contract, legal obligation 7. International Data Transfers 7.1. Where We Store Data Your data is stored on Firebase (Google Cloud Platform) servers and with our payment and advertising partners, which may be located in the United States, European Union, or other countries where our partners operate data centers. 7.2. Safeguards For transfers from the EU/EEA, we and our partners use Standard Contractual Clauses (SCCs), the EU-US Data Privacy Framework, and adequacy decisions by the European Commission. More information: Google: https://cloud.google.com/privacy/gdpr Facebook: https://www.facebook.com/privacy/policies/data-transfer 8. Data Retention 8.1. How Long We Keep Your Data Active Accounts: Account information: As long as your account is active Fitness and health data: As long as your account is active Physical activity tracking data: As long as your account is active Usage data: Up to 2 years Subscription and billing records: Up to 7 years (legal requirement) Advertising data: Up to 13 months Crash logs: Up to 90 days Deleted Accounts: Most personal data deleted within 30 days of account deletion Subscription and financial records retained for up to 7 years (legal compliance) Backup systems may retain data for up to 90 days Aggregated, anonymized data may be retained indefinitely 8.2. Legal Retention We may retain certain data longer if required by law or for legal proceedings. 8.3. Anonymized Data We may retain anonymized, aggregated data indefinitely for analytics and research purposes. 9. Your Privacy Rights and Choices 9.1. Rights for All Users Access your profile and fitness data in App settings Request a copy of your data by contacting us Export your workout history and activity logs Update your profile information in the App Delete your account through App settings (all personal data deleted within 30 days) Adjust app permissions in device settings Disable physical activity tracking (may limit functionality) Disable GPS location tracking Opt out of analytics tracking Opt out of personalized advertising (see Section 15) Unsubscribe from promotional emails via the unsubscribe link 9.2. Additional Rights for EU/EEA Users (GDPR) You have the right to: Right to Access: Request a copy of your personal data Right to Rectification: Correct inaccurate or incomplete data Right to Erasure ("Right to be Forgotten"): Request deletion of your data Right to Restrict Processing: Limit how we use your data Right to Data Portability: Receive your data in JSON or CSV format Right to Object: Object to processing based on legitimate interests Right to Withdraw Consent: Withdraw consent at any time Right to Lodge a Complaint: File a complaint with your local supervisory authority (https://edpb.europa.eu/about-edpb/board/members_en) Automated Decision-Making: We do not make automated decisions that significantly affect you without human review. To exercise your rights: Email kitkeyxxz@outlook.com Response Time: 30 days (extendable to 60 days for complex requests) 9.3. Additional Rights for California Residents (CCPA/CPRA) Right to Know: Categories and specific pieces of personal information collected Right to Delete: Request deletion of your personal information Right to Opt-Out of Sale/Sharing for advertising purposes Right to Non-Discrimination for exercising privacy rights Right to Correct: Request correction of inaccurate information Right to Limit Use of Sensitive Personal Information (health and fitness data) To exercise your rights: Email kitkeyxxz@outlook.com Response Time: 45 days (extendable to 90 days for complex requests) 10. Children's Privacy FitBi is intended for users aged 13 years and older. We do not knowingly collect personal information from children under 13 without verifiable parental consent. Users aged 13–17 should obtain parental or guardian consent before using the App. If we discover we have collected data from a child under 13 without consent, we will delete the data immediately and terminate the account. Parents can contact us at kitkeyxxz@outlook.com to review, delete, or refuse further collection of their child's data. 11. Data Security 11.1. Security Measures Technical Safeguards: Encryption for data in transit (TLS 1.3/SSL) Encryption for data at rest (AES-256 via Firebase) Secure authentication (Firebase Authentication with bcrypt password hashing) Regular security monitoring and audits Automatic security updates Protection against SQL injection and XSS attacks Payment Security: All payment processing handled by Google Play or Apple App Store (PCI DSS compliant) FitBi does not store full payment card details Subscription tokens and transaction IDs stored securely with encryption Access Controls: Restricted access to personal data on a need-to-know basis Multi-factor authentication for administrative access Regular access reviews and logging of data access 11.2. Your Responsibility Keep your password secure and confidential Use a strong, unique password (minimum 8 characters) Do not share your account credentials Log out on shared devices Report suspicious activity immediately 11.3. Data Breach Notification In the event of a data breach: We will investigate and contain the breach immediately Notify affected users within 72 hours (as required by GDPR) Report to relevant authorities as required by law Provide information about the breach and steps to protect yourself 11.4. Security Limitations No method of transmission or storage is 100% secure. While we use industry-standard security measures, we cannot guarantee absolute security of your data. You use the App at your own risk. 12. Third-Party Services 12.1. Firebase (Google Cloud Platform) We use Firebase Authentication, Firestore, Analytics, Crashlytics, Cloud Storage, and Cloud Functions. Privacy Policy: https://firebase.google.com/support/privacy Google Privacy Policy: https://policies.google.com/privacy 12.2. Advertising Networks (free version only) Google AdMob: https://policies.google.com/privacy | Opt-out: https://adssettings.google.com Facebook Audience Network: https://www.facebook.com/privacy/policy | Opt-out: https://www.facebook.com/ads/preferences Unity Ads: https://unity.com/legal/privacy-policy 12.3. Payment Services Google Play Billing: For Android in-app purchases and subscriptions Apple App Store / StoreKit: For iOS in-app purchases and subscriptions 12.4. Analytics Services Google Analytics / Firebase Analytics: Usage patterns and engagement 12.5. Links to Other Websites The App may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information. 13. Advertising and Tracking Technologies Advertising is displayed only in the free version of FitBi. Premium subscribers do not see ads and are not subject to advertising data collection. 13.1. How We Use Advertising We display third-party advertisements to support our free app Ads are personalized based on your interests, app usage, and demographics Ad revenue helps us maintain and improve the App 13.2. Types of Ads Banner Ads: Small ads displayed at top/bottom of screens Interstitial Ads: Full-screen ads shown at natural breaks Video Ads: Short video advertisements (optional) Rewarded Ads: Watch ads to unlock premium features temporarily Native Ads: Ads integrated into app content 13.3. Ad Personalization We and our advertising partners may use your age, gender, fitness goals, workout history, app usage patterns, device information, and inferred interests to create a profile for personalized advertising. 13.4. Ad Measurement and Attribution We and our partners use tracking technologies to measure ad views and clicks, track conversions, optimize ad performance, and prevent ad fraud. 13.5. Opting Out of Personalized Ads See Section 15 for detailed instructions. 14. Updates to This Privacy Policy 14.1. How We Update This Policy We may update this Privacy Policy to reflect changes in our data practices, new features, applicable laws, new advertising or payment partners, or enhanced security measures. 14.2. Notification of Changes We will notify you of material changes through: In-app notification (pop-up or banner) Email notification to your registered email address Notice in the App before you continue using it Updated "Last Updated" date at the top of this policy Notice Period: At least 30 days before significant changes take effect. 14.3. Version History Version 1.2 — February 2026: Added dedicated Subscriptions section (Section 6) and expanded Fitness Data usage disclosures (Section 4.3) Version 1.1 — January 24, 2026: Added advertising section, physical activity tracking, enhanced sensor data collection Version 1.0 — January 10, 2026: Initial release You can request previous versions of this Privacy Policy by contacting us. 15. Opt-Out of Personalized Advertising 15.1. Device-Level Settings Android: Go to Settings → Google → Ads Enable "Opt out of Ads Personalization" Or reset your Advertising ID iOS: Go to Settings → Privacy & Security → Tracking → Disable "Allow Apps to Request to Track" Go to Settings → Privacy & Security → Apple Advertising → Disable "Personalized Ads" 15.2. In-App Settings Go to Settings → Privacy → Advertising → Toggle off "Personalized Ads" You will still see ads, but they will not be personalized 15.3. Advertising Partner Opt-Outs Google: https://adssettings.google.com Facebook: https://www.facebook.com/ads/preferences NAI: https://optout.networkadvertising.org DAA: https://optout.aboutads.info 15.4. Limitations of Opt-Out You will still see advertisements, but they will be generic/non-personalized Opting out does not stop data collection for other purposes (analytics, fraud prevention) You may need to opt out on each device separately Clearing cookies/data may reset opt-out preferences 16. Do Not Track (DNT) Our App does not currently respond to Do Not Track (DNT) signals. However, you can control tracking through device settings (see Section 15.1), in-app privacy settings, or advertising opt-out tools. 17. Legal Basis for Processing (GDPR) Consent: Collection of health and fitness data Physical activity and sensor data tracking GPS location tracking Personalized advertising Marketing communications Analytics cookies (where required) Performance of Contract: Creating and managing your account Providing fitness tracking and personalization Delivering app services you requested Processing subscriptions and payments Legitimate Interests: Improving app functionality and user experience Analyzing usage patterns Ensuring security and preventing fraud Subscription fraud prevention Customer support Displaying non-personalized advertising Legal Obligation: Complying with applicable laws Financial and tax record-keeping Responding to legal requests Protecting intellectual property rights You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before withdrawal. 18. California Privacy Rights (CCPA/CPRA) 18.1. Categories of Personal Information Collected In the past 12 months, we have collected the following categories: Identifiers: Name, email address, device ID, advertising ID, IP address Personal characteristics: Age, gender, fitness level Health information: Weight, height, fitness goals, activity data, steps, calories, heart rate, sleep patterns, sensor data Commercial information: Purchase history, subscription status, in-app transactions Internet activity: Usage data, app interactions, ad interactions, search history Geolocation data: Approximate location (IP-based), precise GPS location (when enabled) Sensory data: Accelerometer and gyroscope data, photos (if uploaded) Inferences: Fitness level, preferences, interests derived from usage patterns Sensitive Personal Information: Health and fitness data Precise geolocation (when enabled) 18.2. Sale or Sharing of Personal Information Sale: We do NOT sell your personal information for monetary consideration. Sharing for Advertising: We may "share" advertising identifiers and device data with advertising partners for cross-context behavioral advertising purposes (free version only). Premium subscribers are excluded from this sharing. You can opt out (see Section 15). 18.3. Your California Privacy Rights California residents have the right to: Know what personal information we collect, use, and share (up to 2 times per year) Delete personal information (with some exceptions for legal compliance) Correct inaccurate personal information Opt-out of Sale/Sharing for cross-context behavioral advertising Limit use of Sensitive Personal Information to purposes necessary to provide services Non-discrimination for exercising privacy rights To exercise your rights: Email kitkeyxxz@outlook.com Response Time: 45 days (may extend to 90 days with notice for complex requests) Appeals: If we deny your request, you may appeal by emailing us. 19. International Users Depending on your location, you may have specific privacy rights under: EU/EEA: GDPR rights (see Section 9.2) California: CCPA/CPRA rights (see Sections 9.3 and 18) Brazil: LGPD rights (access, correction, deletion, portability) UK: UK GDPR rights (similar to EU GDPR) Canada: PIPEDA rights (access, correction, challenge compliance) Australia: Privacy Act rights (access, correction) We comply with all applicable data protection laws in regions where the App is available. 20. How to Contact Us For any questions, concerns, or requests regarding this Privacy Policy or our data practices: Developer: KIkc Email: kitkeyxxz@outlook.com For specific requests, use these subject lines: Data access requests: "Access Request" Data deletion requests: "Deletion Request" Data correction requests: "Correction Request" Subscription/billing issues: "Subscription Issue" Privacy questions: "Privacy Inquiry" Security concerns: "Security Issue" Opt-out requests: "Opt-Out Request" Complaint: "Privacy Complaint" We take all privacy inquiries seriously and will respond as quickly as possible. 21. Your Consent By using FitBi, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and sharing of your information as described. For sensitive health and fitness data and physical activity tracking, you provide explicit consent when you create an account and enter your fitness information, use fitness tracking features, grant sensor and location permissions, enable physical activity tracking, or accept this Privacy Policy. For personalized advertising, you provide consent when you accept this Privacy Policy and use the free, ad-supported version of the App. You can withdraw your consent at any time by deleting your account through App settings, contacting us at kitkeyxxz@outlook.com, adjusting permissions in your device settings, opting out of personalized ads (see Section 15), or disabling specific features in app settings. Summary of Key Points ✓ We collect account information, health/fitness data, physical activity sensor data, and usage information ✓ Fitness and health data is used only to provide your personal experience — never sold or shared with advertisers individually ✓ We track your physical activity using device sensors (accelerometer, gyroscope) to provide core fitness tracking ✓ Premium subscribers enjoy an ad-free experience with no advertising data collection ✓ Free users see personalized ads; opt-out is available via device settings or in-app controls ✓ Subscriptions are managed through Google Play or Apple App Store; FitBi does not store payment card details ✓ Subscription billing records are retained for up to 7 years for legal compliance ✓ We use Firebase (Google) for hosting, authentication, analytics, and crash reporting ✓ We do NOT sell your personal information for money ✓ We may collect precise GPS location during outdoor workouts (with your permission) ✓ You can access, correct, and delete your data at any time ✓ We use industry-standard security measures including encryption (TLS 1.3, AES-256) ✓ We comply with GDPR, CCPA, and other applicable privacy laws ✓ Minimum age: 13 years old ✓ Contact us at kitkeyxxz@outlook.com for privacy questions Last Updated: January 24, 2026 Version: 1.2 Effective Date: January 24, 2026 FitBi Developer: KIkc Email: kitkeyxxz@outlook.com