Privacy Policy
Last updated: September 12, 2026
1. Who processes your data
The data controller is ANALYZEE d.o.o., Ulica Augusta Šenoe 110, 31550 Valpovo, Croatia, OIB (tax number): 55910720129, company registration number: 05790042 ("we"), which provides the service under the name MyFittio. Contact for anything about your data: hello@myfittio.com.
2. What we collect
Data you give us: name, email, phone number, age, sex, height, weight and measurements, goals and experience, equipment and schedule, progress photos if you send them, and the messages you exchange with your trainer.
Health data: pregnancy and pregnancy week, birth and recovery, injuries, pain and health restrictions. These are special-category data under Article 9 of the GDPR. We process them only on your explicit consent, given at registration or in the questionnaire, and without them we cannot write a safe programme. You can withdraw that consent at any time.
Payment data: payments are processed by Stripe. We never see or store your card number.
Usage data: IP address, device and browser, pages visited, clicks and time on page, and where the visit came from (for example an ad).
3. Why, and on what legal basis
- Providing the service (contract): writing and adjusting your programme, trainer communication, billing.
- Health data (explicit consent): a safe programme adapted to pregnancy, recovery or an injury.
- Answering an enquiry and the free first plan (consent / pre-contractual steps): when you fill in the questionnaire or contact us, including on WhatsApp.
- Improving the site (legitimate interest): analytics and session recordings, see section 7.
- Advertising (cookie consent): measuring ads on Meta and Google platforms.
- Legal obligations: accounting and tax law.
4. Marketing messages
If you left your email for a free plan or an enquiry, we may send you a few follow-up messages (the plan, tips, an offer). Each has an unsubscribe link and unsubscribing takes effect immediately. After that you receive only messages needed for a service you pay for (invoices, changes to terms).
5. Site tools and AI
The free calculators on myfittio.com (for example the diastasis check, pregnancy weight gain, strength standards) run in your browser. We do not store what you enter against your name; we only record that a tool was started and completed, for statistics.
We may use artificial intelligence tools to draft programmes and replies. Your trainer always reviews and approves what we send you and is responsible for its content. We make no automated decisions that would have a legal or similarly significant effect on you.
6. Who else has access (processors)
- Google Firebase and Google Cloud (EU region): storage, sign-in, hosting, email delivery.
- Stripe: subscription billing.
- PostHog (EU hosting): analytics and session recordings.
- Google Analytics and Google Ads, Meta (Facebook and Instagram): visit and ad measurement, only with your consent. That data may be transferred to the US under EU standard contractual clauses and the EU-US Data Privacy Framework.
- WhatsApp (Meta): if you contact us there, the exchange is also subject to WhatsApp's own terms.
We do not sell your data and do not share it with third parties for their marketing.
7. Cookies, analytics and session recordings
- Necessary: sign-in and security (Firebase), remembering your language and units. No consent needed.
- Analytics: PostHog (
ph_*, up to 12 months) and Google Analytics (_ga, up to 24 months). - Marketing: Meta pixel (
_fbp, 90 days) and Google Ads (_gcl_*, 90 days), only with consent.
We use strictly necessary cookies, analytics cookies (PostHog, Google Analytics) and, with consent, marketing cookies (Meta, Google Ads). PostHog may record how you use the site (mouse movement, clicks, form input with personal fields masked) so we can fix what does not work. You can withdraw consent for analytics and marketing cookies in your browser settings or by writing to hello@myfittio.com.
8. Mobile app
The app asks for camera and photo access only when you choose to send a photo, and for notification permission only if you grant it. You can revoke both in your device settings. The app stores (Apple, Google) process download and payment data under their own policies.
9. How long we keep data
- Client data: for the life of the subscription and 12 months after it ends, unless you ask for deletion sooner.
- Enquiries and free plans without a subscription: 12 months from the last contact.
- Invoices and payment records: 11 years, under the Croatian Accounting Act.
- Analytics: PostHog up to 12 months; session recordings up to 30 days.
- Progress photos: deleted on request or with the account.
10. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent without affecting processing done before withdrawal. You can delete your account and all data yourself in the app or on the account deletion page. We answer within 30 days.
If you believe we process data unlawfully, you may complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, Zagreb, azop.hr.
11. Children
The service is for people aged 18 and over. We do not knowingly collect data from minors; if we learn we have, we delete it.
12. Security
Data travels encrypted (TLS) and is stored on Google infrastructure with access control. Health data is visible only to your trainer and to staff who need it to provide the service.
13. Data breaches
If a security breach is likely to put your rights at risk, we will notify AZOP within 72 hours and you without undue delay, describing what happened and what we are doing about it.
14. Do you have to give us data
Your name, email and basic body and health details are needed to conclude the contract and write a safe programme; without them we cannot provide the service. Progress photos, a phone number and marketing consent are optional.
15. Changes
We will tell you about material changes by email or in the app. The date of the last change is at the top.