Privacy Policy

01Who we are and what this Policy covers

Fit is a fitness competition app operated by Scribeberry Ltd., a Canadian company. This Policy applies to all of the Services: the Fit mobile application for iOS and Android (including beta builds distributed through TestFlight, Google Play or direct download), the usefitapp.com website, The Baseline blog and its email newsletter, invite links, and any other product or feature that links to this Policy. Your use of the Services is also governed by our Terms of Service, which contain the eligibility rules, disclaimers, assumption of risk, limitation of liability and dispute terms that apply to the Services.

"Personal Information" means information that identifies, relates to, describes, or could reasonably be linked to you. This Policy explains what Personal Information we collect, how we collect it, why we collect it, who we share it with, how long we keep it, and the choices and rights you have.

Fit is an independent product. It is not affiliated with, endorsed by, or sponsored by Apple, Google, Garmin, WHOOP, Oura, Fitbit, Samsung or any other tracker or platform vendor, and it is unrelated to Google Fit and Apple Fitness. Third-party names and logos appear in the Services only to identify those platforms and to describe compatibility; all trademarks remain the property of their respective owners. Scribeberry Ltd. also operates other products; those products are governed by their own separate privacy policies, and nothing in those policies applies to Fit or to this Policy.

02Fit is not a medical or healthcare service

Fit is a consumer wellness and fitness product built for motivation and friendly competition. It is not a healthcare provider, a medical device, a diagnostic tool, an electronic health record, or a substitute for professional medical advice, diagnosis or treatment. You should always consult a qualified physician or other licensed healthcare provider with any questions about your health, and you should never disregard or delay seeking medical advice because of anything you see in the Services.

Scribeberry Ltd. is not a "covered entity" or "business associate" as defined under the United States Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). Information you provide through the Services is not "protected health information" subject to HIPAA, and the Services are not designed or represented to satisfy HIPAA requirements. Likewise, in Canada, Fit is not a healthcare custodian service: Scribeberry Ltd. does not act as a "health information custodian" (or equivalent) under provincial health-information statutes such as Ontario's PHIPA or Alberta's HIA when operating Fit, and information handled by Fit is not a clinical health record. Your information is governed solely by this Policy and by the consumer privacy laws that apply to us.

Do not use the Services to store or transmit information that you believe requires clinical-grade or regulated health-record protection. The health and fitness readings Fit works with are consumer wearable data, and the Services treat them as such.

03Your consent

Fit is built around explicit permission. We only ever receive your health and fitness data after you take a deliberate action to grant access, and each of those actions is your express consent for us to collect, use, store, process and disclose that data in accordance with this Policy:

• When you tap Allow on the Apple Health permission sheet, you consent to Fit reading the specific HealthKit data types you approved.
• When you grant permissions in Health Connect on Android, you consent to Fit reading the record types you approved.
• When you sign in to WHOOP, Oura, Garmin or Google Health (used for Fitbit devices) through their authorization screens and approve the requested scopes, you consent to Fit receiving the data those scopes cover on an ongoing basis until you disconnect.
• When you join a crew, enter a contest, set your sharing toggles, post a message, or add information to your profile, you consent to the collection and the sharing behaviour that this Policy and the in-app controls describe for that feature.

By providing information to us, or by permitting a third-party platform to provide it to us, you consent to that information being collected, used, disclosed, processed, transferred and stored by us as set out in this Policy. If you do not want us to have a category of data, do not grant the corresponding permission; the Services will continue to work with whatever you choose to share, with reduced functionality.

You may withdraw your consent at any time, as described in Your choices and controls. Withdrawal stops future collection and, where you request it, removes what we hold, but it does not undo processing or sharing that happened while your consent was in effect, and it may make some or all of the Services unusable for you.

04Information you provide to us

Account information

When you create an account we collect your email address and a password (stored in hashed form by our authentication provider; we never see or store your plaintext password), or, if you use a supported sign-in provider, the information that provider shares with us. If you sign in with a phone number, we collect that phone number to deliver one-time codes.

Profile information

You may provide a handle, a display name, and an avatar (a photo you upload, a photo from your sign-in provider, or an illustration you pick). To place you in fair comparison groups and compute fitness-age style insights, you may also provide your year of birth and sex. These two fields are optional; features that depend on them simply stay off until you provide them. We also store settings you choose, such as your timezone and content preferences.

Content you create

We collect the content you create in the Services, including crew chat messages, direct messages, comments and reactions on workouts, contest entries, manually logged activity, and your conversations with the Fit Coach. Messages you send in a crew are visible to that crew; direct messages are visible to their participants.

Communications with us

If you contact us (for example at hello@scribeberry.com), we collect your email address, the contents of your message, and any attachments, and we keep records of the correspondence.

Newsletter subscriptions

If you subscribe to The Baseline on the web, we collect your email address through a double opt-in flow (you must confirm from your inbox before you are subscribed). If you subscribe from inside the app, we use your account email. Every email we send includes an unsubscribe link.

05Health and fitness information

With your permission, the Services connect to third-party health platforms and import health and fitness information about you ("Health Information"). The platforms Fit can connect to are:

• Apple Health (HealthKit) on iOS;
• Health Connect on Android (which is also how data from Samsung Health and many other Android apps reaches Fit);
• WHOOP, Oura and Garmin, via their account authorization flows; and
• Google Health, which is how data from Fitbit devices reaches Fit.

Depending on the permissions you grant and what your devices record, Health Information may include: step counts; distance; active energy (calories); active or exercise minutes; workouts (including type, duration, timing and associated measurements); heart rate; resting heart rate; heart rate variability; respiratory rate; blood oxygen saturation; sleep (including duration, timing and stages where available); body weight; VO2 max and similar cardio-fitness estimates; and vendor wellness scores such as strain, recovery and sleep scores. Vendor-branded scores are computed by the platform that provides them and are imported and displayed as that platform's values; Fit does not recreate them. You can also enter some of this information manually.

Unlike apps that keep imported data only on your device, Fit syncs the Health Information you authorize to our servers. This is what the product is: crews, leaderboards, contests and coaching all require your recent numbers to be available to our systems so they can be scored and, where you choose, shown to your crew. We also compute derived values from your Health Information, such as your daily fit score, work load, readiness, cohort standing and fitness age; these derived values are treated as Health Information too.

How we connect. We access these platforms only through their official developer interfaces (the authorized APIs and SDKs each platform publishes for third-party apps), under developer agreements with those platforms, using the standard authorization flows they provide. We never ask for the password to your tracker account, and we do not scrape, crawl or reverse engineer any platform. When you disconnect a platform from Fit, we stop collecting from it and, where the platform provides a disconnection interface, we signal the disconnection so the platform stops sending us data.

We do not import GPS routes or workout location traces, and the app does not request access to your device's location.

06Information collected automatically

When you use the Services, we and our service providers automatically collect:

• Device and technical information: device model, operating system and version, app version, language, timezone, network type, and identifiers such as your account ID, installation or device identifiers, and push notification tokens.
• Usage information: the screens you view, the features you use, the actions you take, and the timing of those interactions, collected through our product analytics tooling.
• Optional session replay: if you enable "record this session for support" in the app, Microsoft Clarity records screens, gestures and interaction patterns linked to your account identifier. Recordings may include visible health data and messages. Recording is off by default, shows an in-app indicator while enabled, can be stopped at any time, and stops on sign-out. We use recordings to investigate usability problems and defects.
• Crash and diagnostic data: crash reports, stack traces, performance measurements and related device state, so we can find and fix defects.
• Log and network information: IP address (from which a coarse, city-level region may be inferred), request timestamps, and the pages or endpoints accessed. Our website is served through hosting infrastructure that keeps standard access logs.
• Website data: the usefitapp.com website loads fonts from Google Fonts, which means your browser sends Google a standard web request (including your IP address) when a page loads. We also use Google Analytics to measure website traffic and how pages are used (for example page views, referrer and coarse, IP-based region); this is website measurement only and is not linked to your app account. Our website does not use advertising trackers.

We do not collect precise geolocation. Coarse location (such as country or city inferred from IP address) may be processed by us and by the analytics providers listed in Service providers.

07Information from third parties

We collect Personal Information from third parties in these cases:

• Sign-in providers. If you sign in with Google or Apple, we receive the information those providers share for authentication, such as your name, email address (or Apple's private relay address if you choose to hide your email) and profile photo.
• Health platforms. As described in Health and fitness information, we receive Health Information from the platforms you connect. What those platforms contain is in turn determined by the devices and apps you use with them.
• Other users. Other users may include information about you in content they create, for example by mentioning you in a crew chat. That content is governed by this Policy and by the sharing rules of the space it was posted in.

By connecting a third-party account or platform to Fit, you represent that you are entitled to grant us access to it, and you consent to our receipt of the data it provides.

08How we use information

We use the information described above for the following purposes:

• To provide the Services: creating and maintaining your account; syncing and normalizing your Health Information across tracker brands; computing scores, leaderboards, streaks, trends, cohort comparisons and other insights; running crews, contests, chat and reactions; and delivering the sharing behaviour you configure.
• To power the Fit Coach, as described in The Fit Coach and artificial intelligence.
• To communicate with you: service messages, permission and sync status, support replies, and, where you have subscribed or not opted out, product updates and The Baseline newsletter.
• To send push notifications you have enabled, such as crew activity, reactions, rank changes and streak reminders. You can turn these off at any time in your device settings.
• To operate, analyze and improve the Services: understanding which features are used, finding defects, testing changes, and improving scoring quality, including through analytics, crash reporting and session replay.
• To keep the Services safe and fair: authenticating users, enforcing sharing rules and access controls, preventing cheating in contests and leaderboards, preventing fraud and abuse, and protecting the rights, property and safety of Scribeberry, our users and others.
• To comply with law: meeting legal, regulatory, tax and accounting obligations, and responding to lawful requests.
• In aggregated or de-identified form: we may create and use aggregated or de-identified data (which can no longer reasonably identify you) for any lawful purpose, including product research and statistics, and we may retain it indefinitely.

09The Fit Coach and artificial intelligence

The Fit Coach is a generative AI feature that produces briefs, nudges and chat replies about your training, your crew and your standing. To generate a response, relevant context (which may include your recent Health Information, derived scores, crew standings and your messages to the coach) is sent to our AI infrastructure provider, processed to produce the response, and returned to the app.

• No model training on your data. Our AI infrastructure provider (currently Cloudflare) processes coach requests under terms that prohibit using your inputs or the generated outputs to train its models or anyone else's. We chose this infrastructure specifically for that guarantee.
• Minimum necessary context. Coach requests carry the context needed to answer, not your full history.
• Conversation history. Your coach conversations are stored with your account so the coach can keep context and you can review past exchanges. If you summon the coach in a crew chat, the coach's reply is visible to that crew like any other message.
• AI output can be wrong. Coach responses are generated automatically and may be inaccurate, incomplete or inconsistent. They are motivational and educational content only. They are not medical, nutritional or professional advice, and you must not rely on them as such. See Fit is not a medical or healthcare service and Disclaimers.

10Sharing with other users

Fit is a social product, and its core loop is showing your numbers to the small groups you choose. Nothing in Fit is public: there are no public profiles, no public feeds, and no way for a stranger to browse your data. Sharing works like this:

• Crews. When you join a crew, your profile identity (handle, display name, avatar) becomes visible to that crew, along with the activity and metrics you share. Sharing is controlled per crew and per metric (steps, calories, fit, work, distance, sleep, HRV, resting heart rate, VO2 max, strain, recovery, sleep score, and workouts). Your metrics become visible to a crew only after you confirm your sharing selections while joining: the join flow presents every category, preselected, and you can switch any of them off before you join and at any time afterwards. Metrics you hide are shown to other members as an explicit private state, not as your numbers.
• Workouts and activity. If you share workouts with a crew, its members can see your workout entries, react to them, and comment on them.
• Contests. Entering a contest is metric-specific consent: your standing on the contest metric is visible to the other entrants for the duration of the contest.
• Leaderboards and cohorts. Crew leaderboards show shared metrics to crew members. Cohort comparisons ("the field") show your standing against aggregate statistics of other users in the same age band and sex; other users are never individually identified to you through cohorts, and you are never individually identified to them.
• Direct messages. Users who share a crew with you can message you. Your profile identity is visible in shared spaces and DMs, but DMs do not give the other person access to your metrics or activity.
• Invite links. A crew invite link contains a token; anyone who has the link can see a preview (such as the crew name and description) and can use it to join while it remains valid. Treat invite links like invitations: share them only with people you want in the crew.

You are responsible for what you choose to share. Once another member has seen a number or a message you shared, we cannot take that knowledge back, and messages you sent remain part of the conversations they were posted in. Choose your crews, your sharing toggles and your words with the same care you would in any group chat.

11Service providers

We share Personal Information with service providers that process it on our behalf, under agreements that restrict their use of it to providing their service to us. Our current core providers are:

The specific providers may change over time; where a change materially affects how your Personal Information is handled, we will update this Policy as described in Changes to this Policy.

12Other disclosures

• With your consent or at your direction. We disclose information when you ask us to or when you consent, including the user-to-user sharing described in Sharing with other users.
• Legal requirements. We may disclose information if we believe in good faith that disclosure is required or permitted by applicable law, regulation, legal process or governmental request, or is reasonably necessary to enforce our terms and policies, to detect, prevent or address fraud, security or technical issues, or to protect the rights, property or safety of Scribeberry, our users or the public.
• Corporate transactions. If Scribeberry is involved in a merger, acquisition, financing, reorganization, sale of assets, or insolvency or bankruptcy proceeding, your information may be transferred as part of that transaction, subject to reasonable confidentiality protections. We will require any successor to honour the commitments in this Policy or give you notice and a choice.
• Affiliates. We may share information within our corporate group where needed to operate the Services, subject to this Policy.

13What we never do

• We do not sell your Personal Information, and we have not sold it in the past. We do not disclose it to third parties for monetary or other valuable consideration.
• We do not show third-party advertising in the Services and do not share your Personal Information with advertising networks or data brokers.
• We never use Health Information for advertising or marketing. Specifically, we do not use information obtained from Apple HealthKit or Android Health Connect for advertising, marketing or use-based data mining, and we do not disclose it to any third party for those purposes. HealthKit and Health Connect data is used only to provide the health and fitness features you asked for, and is shared only with your consent (for example, with your crew, per your toggles).
• We do not use your data to train AI models, and our AI infrastructure provider is contractually prohibited from doing so.
• Google user data. Fit's use and transfer of information received from Google APIs (including Google Health data and Google Sign-In profile data) adheres to the Google API Services User Data Policy, including its Limited Use requirements.

14Where information is stored and international transfers

Your account data, profile, content and Health Information are stored in our primary database hosted in Canada (the ca-central-1 region). However, the Services are operated with service providers that process data in other countries: our website, notification, analytics, email and AI providers process data in the United States and on globally distributed infrastructure.

By using the Services, you understand and consent to your Personal Information being transferred to, stored in and processed in Canada, the United States and other jurisdictions where we or our service providers operate. Privacy laws in those jurisdictions may differ from the laws of the place where you live, and in some circumstances courts, law enforcement or regulatory agencies in those jurisdictions may be entitled to access your Personal Information. Where a transfer requires a lawful mechanism (for example, under European data protection law), we rely on appropriate safeguards such as standard contractual clauses entered into by us or our providers.

15Security

We use commercially reasonable technical and organizational measures designed to protect Personal Information, including encryption in transit, encryption at rest on our primary database, row-level access controls that enforce the sharing rules described in this Policy, scoped credentials for our systems, and least-privilege access for the people who operate the Services.

No system is perfectly secure. We cannot and do not guarantee the security of any information transmitted to or stored by the Services, and any transmission is at your own risk. You are responsible for keeping your credentials confidential, for securing the devices you use, and for the security practices of the third-party platforms and trackers you connect. If you believe your account has been compromised, contact us immediately at hello@scribeberry.com.

If a breach of security safeguards involving your Personal Information creates a real risk of significant harm to you, or where notification is otherwise required by applicable law, we will notify you and the relevant authorities in accordance with that law. Where a security incident involves data received from a connected health platform, we also notify that platform as required by our agreement with it.

16Retention and deletion

• Account, profile and Health Information are retained while your account is active, so the Services can work.
• Content you posted to shared spaces, including your messages, reactions and contest entries, is removed when you delete your account. Crews with other members can remain with a new owner.
• Coach conversations are retained with your account until you delete them or your account.
• Analytics, session replay and crash data are retained according to each provider's retention schedule and our configuration, and are deleted or aged out on a rolling basis.
• Support correspondence and legal records are retained as long as reasonably necessary for the purpose they were collected for, and as required by law.
• Backups. Deleted data may persist in encrypted backups for a limited period (approximately 35 days) before being overwritten in the ordinary course.
• Aggregated and de-identified data may be retained indefinitely; it can no longer reasonably identify you.

Delete your account in Fit under You → Delete my account, or use our web account deletion page. After you verify your identity and confirm, we erase your account and associated data from live systems. If you cannot sign in, email hello@scribeberry.com for help verifying ownership. We retain a one-way hash of connected tracker identifiers solely to prevent late tracker deliveries from recreating deleted health data. We may retain limited information after deletion where reasonably necessary to comply with law, resolve disputes, enforce agreements, or prevent fraud and abuse. Deleting your Fit account does not delete the source data held by your tracker platforms (Apple Health, Health Connect, WHOOP, Oura, Garmin, Google Health or Fitbit); manage that data with each platform directly.

17Your choices and controls

• Stop health collection at the source. Revoke Fit's access in Apple Health (Settings, Privacy and Security, Health) or Health Connect at any time. Disconnect WHOOP, Oura, Garmin or Google Health/Fitbit from Fit's connection settings, or revoke Fit's access from your account on those platforms. Once revoked, no further data flows to us from that source.
• Control what your crew sees. Change your per-crew, per-metric sharing toggles at any time. Leave a crew at any time.
• Push notifications. Disable them in your device settings, or adjust them in the app.
• Email. Unsubscribe from the newsletter with the link in any issue or with the in-app toggle. We may still send non-promotional service messages, such as security notices.
• Profile. Edit your handle, display name, avatar, birth year and sex in the app at any time.
• Not providing information. You can decline any permission and still use what remains of the Services; features that depend on the withheld data simply stay off.
• Deletion. Request account deletion as described in Retention and deletion.

18Your privacy rights

Canada

Subject to applicable law, you have the right to request access to the Personal Information we hold about you, to request correction of inaccurate information, to withdraw consent (subject to legal or contractual restrictions and reasonable notice), and to ask questions or make complaints about our handling of your Personal Information. You also have the right to complain to the Office of the Privacy Commissioner of Canada or your provincial privacy regulator. We will respond to requests within the time required by applicable law.

United States

Depending on your state of residence, you may have rights to know or access the Personal Information we hold about you, to correct it, to delete it, to receive a portable copy, and to opt out of "sales", "sharing" for cross-context behavioural advertising, or certain profiling. As described in What we never do, we do not sell Personal Information and do not share it for cross-context behavioural advertising. We will not discriminate against you for exercising your rights. Where a request is denied, you may have the right to appeal by replying to our decision.

European Economic Area, United Kingdom and Switzerland

If European data protection law applies to our processing of your information, we process Personal Information on these legal bases: performance of our contract with you (providing the Services you signed up for); your explicit consent for health data, which is a special category of personal data (granted through the permission flows described in Your consent, and withdrawable at any time); our legitimate interests (operating, securing and improving the Services); and compliance with legal obligations. You may have rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw consent at any time without affecting prior processing, and the right to lodge a complaint with your supervisory authority.

Exercising rights

To exercise any right, email hello@scribeberry.com. We will verify your identity before acting (typically by confirming control of the email on the account) and may request additional information solely for verification. An authorized agent may submit a request on your behalf with proof of authorization.

19Children and minimum age

The Services are not directed to children under 13, and we do not knowingly collect Personal Information from children under 13. You must be at least 16 years old, or the age required for consent to data processing in your jurisdiction if higher, to create an account. If we learn that we have collected Personal Information from a child below the applicable age without the consent required by law, we will delete it promptly. If you believe a child has provided us Personal Information, contact us at hello@scribeberry.com.

20Beta software

Fit is currently distributed as beta software (including through TestFlight and preview Android builds). Beta software changes frequently and may contain defects. Features, data flows and providers described in this Policy may evolve between releases; material changes will be reflected in updates to this Policy. Your use of beta builds is voluntary and subject to the additional terms of the distribution platform (for example, Apple's TestFlight terms).

21Disclaimers, assumption of risk and limitation of liability

The Services and all information in them are provided "as is" and "as available", without warranties of any kind, whether express, implied, statutory or otherwise, including any implied warranties of merchantability, fitness for a particular purpose, accuracy, availability or non-infringement, all of which we disclaim to the maximum extent permitted by applicable law. Tracker data is generated by third-party devices and platforms we do not control, and scores derived from it are estimates for motivation and comparison, not measurements you should rely on for any medical, safety or professional purpose.

You use the Services at your own risk and you assume all risk arising from that use, including the risks inherent in physical exercise and training decisions, in transmitting information over the internet, in connecting third-party platforms, and in sharing information with other users. You are solely responsible for the decisions you make based on the Services, for the content you post, and for the sharing configuration you choose. Consult a physician before beginning or changing an exercise program.

To the maximum extent permitted by applicable law, Scribeberry Ltd., its directors, officers, employees, contractors and agents will not be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for any loss of data, profits, goodwill or other intangible losses, arising out of or relating to the Services or this Policy, however caused and under any theory of liability, even if advised of the possibility of such damages. To the same maximum extent, our total aggregate liability for all claims relating to the Services or this Policy will not exceed the greater of fifty Canadian dollars (CAD $50) and the amounts you paid us for the Services in the twelve months before the event giving rise to the claim. Your sole and exclusive remedy for dissatisfaction with the Services or with this Policy is to stop using the Services and request deletion of your information.

Some jurisdictions do not allow certain exclusions or limitations, including for consumers; in those jurisdictions the above exclusions and limitations apply only to the fullest extent the law allows, and nothing in this Policy excludes liability that cannot lawfully be excluded or limits rights you have as a consumer that cannot lawfully be limited.

22Third-party services and links

The Services connect to and link to third-party platforms and websites, including the health platforms listed above, sign-in providers, app stores and sites we link to from the blog. We do not control those third parties and are not responsible for their content, availability or privacy practices. Your use of a third-party service, including what it collects about you and how it uses it, is governed by that third party's own terms and privacy policy, and any visit you make to a third-party service is at your own risk. We encourage you to read the privacy policies of Apple Health, Health Connect, WHOOP, Oura, Garmin, Google (including Google Health and Fitbit) and any other platform you connect.

When you connect a platform to Fit, your use of that connection is also subject to the platform's own user terms, and our receipt and handling of its data is governed by our developer agreements with that platform in addition to this Policy. We honour platform requirements that apply to imported data, including requirements about user consent, security, advertising restrictions and deletion, and imported platform data is used only to provide the Services to you.

23Do Not Track signals

Our Services do not respond to browser "Do Not Track" signals, for which no common standard exists. Because we do not sell Personal Information or share it for cross-context behavioural advertising, there is no sale or ad-sharing to opt out of; where a law nonetheless requires us to honour an opt-out preference signal such as Global Privacy Control, we will treat it as a valid opt-out of any covered processing for that browser.

24Changes to this Policy

We may update this Policy from time to time. When we do, we will post the updated Policy on this page and revise the "Last updated" date above. If we make material changes (such as new categories of data, new purposes, or new categories of recipients), we will provide more prominent notice, such as an in-app notice or an email, before the change takes effect where required by law. Your continued use of the Services after an updated Policy takes effect constitutes your acceptance of it, to the extent permitted by applicable law. It is your responsibility to review this Policy periodically.

25How to contact us

Questions, requests and complaints about this Policy or our privacy practices can be sent to:

Scribeberry Ltd. (Fit)
Email: hello@scribeberry.com

We take every inquiry seriously and will respond as soon as reasonably practicable, and in any event within the time required by applicable law.