Privacy Policy

This Privacy Policy explains how SOFTPULSE SOFTWARE DESIGN L.L.C (“we”, “us”) collects, uses and protects personal information when you use the Fitmocal mobile app and the website at fitmocal.com (together, the “Service”). It also explains the choices and rights you have.

1. Who we are

SOFTPULSE SOFTWARE DESIGN L.L.C, Office No. 40E, Port Saeed, Deira, Dubai, United Arab Emirates, is responsible for the personal information described in this policy. If you have any questions, you can reach us at [email protected].

2. Information we collect

Account information. When you sign up with email, we collect your email address and a password, which we store only in hashed form. If you sign in with Apple or Google, we receive an account identifier from them and, if they have verified it, your email address. We also keep your name (up to 30 characters), your language, your time zone, when you created your account and when you last signed in. We send verification and password reset codes to your email address.

Profile and goals. Your date of birth, sex (female or male), height, weight, main goal, activity level, target weight and pace, your measurement units, the daily calorie and macro targets we calculate for you and how they change over time, and an optional profile photo.

Health and fitness information. The information you log in the app:

weight entries;
your daily mood score, the mood tags you choose and an optional note of up to 120 characters;
water, sleep, steps and meditation entries, including the daily step total your phone’s motion sensor counts;
yes or no entries for supplements, alcohol and smoking;
the meals and foods you log and the meal photos you add;
your workout sessions: when you trained, the moves, sets, reps and weights, and the estimated calories burned;
your training preferences: experience, home or gym, equipment, training days, session length and focus areas.

Health check. During setup we ask whether you are pregnant or breastfeeding, have an illness or follow a special diet, or have a history of an eating disorder. We keep only whether one of these applies to you, not which one. You can change your answer in Settings.

AI coach conversations. The messages you send to the AI coach and its replies.

Photos. Your profile photo and meal photos. We re-encode every photo when it is uploaded, which removes embedded information such as location and camera details (EXIF data).

Device and notification information. Your device platform (iOS or Android), your time zone and, if you allow notifications, your device’s push notification token. We also keep a list of the notifications we have sent you.

Subscription information. Payments are handled by Apple or Google. Through RevenueCat we receive your subscription status: the product, the store, the expiry date and whether it renews. We never receive your card details.

Security and technical information. To stop password guessing, we keep a short-lived, hashed value made from your IP address and email address after failed sign-in attempts. Our app servers record technical information about each request, such as a request identifier, the address requested and the result, together with your user identifier when you are signed in. The app’s request records don’t contain your IP address.

Messages to us. When you contact support through our website or by email, we receive your email address, your message and any details you choose to add, such as your name, the topic and your device platform.

What we don’t collect. We don’t collect your location (only your time zone), your contacts or advertising identifiers, and the app contains no analytics, advertising or crash reporting tools. We don’t connect to health platforms on your phone.

3. How we use your information

To provide the Service: we build your workout program, calculate your calorie and macro targets, record what you log and show your progress and reports.
To run your account: we manage sign-in, send verification and password reset codes and keep track of your Premium status.
To power AI features: see section 5.
To send notifications: see section 7.
To keep the Service safe: we limit repeated sign-in attempts and requests, and investigate misuse.
To help you: we answer your support messages.
To meet legal obligations: we keep records the law requires.

We don’t use your information for advertising.

4. Health and fitness information

Information about your weight, meals, mood, sleep, alcohol, smoking and health check is sensitive. We process it only to provide the features you use, and we rely on your explicit consent, which you give when you enter it. You can withdraw your consent at any time by deleting the entries or your account.

Your calorie target is a starting estimate calculated with the Mifflin-St Jeor formula from your age, sex, height, weight and activity, and adjusted for your goal and pace. Automatic weight-loss targets never go below 1,200 kcal a day for women or 1,500 kcal a day for men, and a target weight that would put you below a body mass index of 18.5 is not accepted. If you are under 18 or tell us that a health condition applies, automatic targets are switched off and workout programs are built conservatively.

Fitmocal does not give medical advice. See our Terms of Use.

5. AI features

Some features use artificial intelligence provided by OpenAI:

Workout program. We use OpenAI to build your workout program, including on the free plan. We send your goal, weight goal, sex, age band, experience, home or gym, equipment, focus areas, training days and session length, how your previous program phase went, and a note to keep the program conservative if you are under 18 or told us that a health condition applies.
AI coach (Premium). We send your first name, what you have eaten today and your targets, today’s mood score and tags, a summary of today’s workout, your recent messages and, if it applies, that you reported a health condition.
Photo meal logging (Premium). We send the meal photo, made smaller and without EXIF data.

We don’t send your email address or account identifier to OpenAI. We don’t use your information to train AI models of our own. AI output can be wrong: check meal estimates before saving them, and don’t treat the coach’s answers as medical advice. AI features have daily limits and may sometimes be unavailable.

6. Service providers

We work with providers who process personal information on our behalf and only on our instructions:

OpenAI runs the AI features described in section 5.
RevenueCat manages subscription status and receives the account identifier the app gives it.
Apple and Google provide sign-in if you choose it, in-app purchases and push notifications (Apple Push Notification service and Firebase Cloud Messaging).
Cloudflare delivers our website and the exercise videos and images in the app. It sees your device’s IP address when you visit the website or the app downloads these files, and messages you send through the website’s forms pass through it.
Hostinger hosts our servers, our database and your photos.
Email service providers send verification and password reset codes and deliver website form messages to our inbox.

Each provider may use your information only to provide its service to us and must protect it with appropriate security measures.

7. Notifications

The app has an inbox for updates about your workouts, meals, tasks and coach. If you allow push notifications, we store your device token and send reminders and updates through Apple Push Notification service or Firebase Cloud Messaging. A notification can include your progress, such as how much water you have logged or how many steps you have taken. You can turn notifications off in Settings or in your device settings.

8. How long we keep information

Your account and everything you log: until you delete it or your account.
AI coach conversations: until you delete them or your account. They stay readable if your Premium subscription ends.
Accounts that are never verified: 7 days.
Meal photos that are never added to a meal: 24 hours.
The list of notifications we sent you: 90 days. Device tokens: 180 days after your device last used the app.
Subscription event records: 365 days, without your account identifier.
Technical logs: We keep technical logs for 14 days.
Support messages: for as long as needed to answer your request, and no longer than 12 months afterwards.

9. Deleting your account and exporting your data

Delete your account in the app: open Settings, then Account and Privacy, then Delete my account. Deletion starts immediately and can’t be undone. We delete your information and photos, ask RevenueCat to delete your subscription record and, if you signed in with Apple, revoke our access to your Apple sign-in. The account record itself is removed within minutes.

Deleting your account doesn’t cancel your subscription. Cancel it in your App Store or Google Play subscription settings.

If you can’t use the app, you can ask us to delete your account on our account deletion page. We confirm by email that the account is yours and delete it within 30 days.

Export your data: open Settings, then Account and Privacy, then Export my data. You receive a file with your information. Links to your photos in the file work for one hour.

We share personal information only:

with the service providers listed in section 6;
when the law requires it or to protect the rights and safety of our users and others;
as part of a merger, acquisition or sale of assets, under this policy;
with your consent.

We don’t sell your personal information.

11. International transfers

We are based in the United Arab Emirates. Our service providers may process your information in other countries, including the United States. Where the law requires it, we use appropriate safeguards for these transfers, such as standard contractual clauses.

12. Your rights and choices

Depending on where you live, you can ask us to:

give you a copy of your personal information;
correct information that is wrong;
delete your information;
give you your information in a portable format;
restrict or object to some processing;
withdraw a consent you gave.

Many of these you can do yourself in the app: edit your profile, delete entries, export your data or delete your account. For anything else, write to [email protected]. You also have the right to complain to your data protection authority.

13. Children and teens

You must be at least 13 to use Fitmocal. If you are under 18, you need a parent or guardian’s permission to use Fitmocal. For users under 18, automatic calorie targets are switched off and workout programs are built conservatively. If we learn that someone under 13 has created an account, we delete it. If you believe a child has given us information, contact us at [email protected].

14. Security

We protect your information with encrypted connections, hashed passwords, short-lived signed links for your photos and access controls. No method of transmission or storage is completely secure, but we work to protect your information and fix problems quickly.

15. This website

Our website uses only the cookies it needs to work, and no analytics or advertising. These are a session cookie and a security cookie (XSRF-TOKEN) that protects the forms.

Our website uses your IP address to limit how many messages can be sent from one address in an hour. This count is kept for up to an hour. Our servers also record IP addresses in their logs, which we keep for 14 days.

When you use the support form or the account deletion form, we receive the details you enter: your email address, your message or deletion reason and, on the support form, your name, topic and platform if you give them. They reach our support inbox by email, and we keep them for as long as needed to answer your request and no longer than 12 months afterwards.

16. Changes to this policy

We may update this policy as the Service changes. We will change the date at the top of this page, and if the changes are significant, we will tell you in the app or by email.

17. Contact us

For questions about this policy or your information, email [email protected].

Company: SOFTPULSE SOFTWARE DESIGN L.L.C
Address: Office No. 40E, Port Saeed, Deira, Dubai, United Arab Emirates
Phone: +971 50 362 5858
Email: [email protected]