Privacy Policy | FitBalkanMate

1. Introduction

FitBalkanMate (below "the app", "we" or "us") is an AI-powered mobile fitness and nutrition application available on iOS and Android. This Privacy Policy describes what personal data we collect through the app and our website (fitbalkanmate.com), why we collect it, how we process and store it, and what rights you have as a data subject under Regulation (EU) 2016/679 (GDPR) and Bulgarian personal data protection law.

By using the app you agree to the practices described in this policy. If you do not agree with it, please do not use the app.

2. Data Controller

The data controller is:

FitBalkanMate
Contact email: contact@fitbalkanmate.com
Website: fitbalkanmate.com

3. What data we collect

3.1. Account data

Email address — used for account creation and authentication (sign-in).
Name — optional; set by the user and displayed in the profile.
Profile data — gender, date of birth, weight, height, fitness goal, fitness level, available equipment and injuries. This data is used solely to personalize workouts and nutrition recommendations.

3.2. Usage data

Workout history — exercises, sets, reps, duration.
Food diaries — logged foods, calories and macronutrients (protein, carbs, fat).
Weight and body measurement entries.
Water intake.
AI coach conversation history — stored locally on your device and not automatically uploaded to our servers.

3.3. Technical device data

Device type and operating system version.
Technical diagnostics and usage statistics of app features collected via analytics tools when such tools are enabled.

3.4. Payment data

Subscriptions are managed via RevenueCat and the platform stores (Apple App Store and Google Play). We never receive or store credit or debit card data. The entire payment process is carried out by Apple or Google; we only receive the subscription status (active, cancelled, trial) needed to unlock Premium features.

4. Why we process your data (purposes and legal bases)

Purpose	Data	Legal basis (GDPR)
Account creation and maintenance, app sign-in	Email, name	Contract performance (Art. 6(1)(b))
Personalized workouts and nutrition recommendations	Profile data, diaries, workout history	Contract performance (Art. 6(1)(b))
AI features — chat, food photo analysis, workout generation	Question text, meal photos, personalization parameters	Contract performance (Art. 6(1)(b))
Subscription management	Subscription status via RevenueCat / App Store / Google Play	Contract performance (Art. 6(1)(b))
Improving the app and fixing issues	Technical data, aggregated analytics	Legitimate interest (Art. 6(1)(f))
Responding to support inquiries	Email correspondence	Legitimate interest (Art. 6(1)(f))

5. AI data processing (Google Gemini)

To provide the AI features, certain information is sent to the Google Gemini model through our own intermediary proxy server:

in AI chat — the text of your question and relevant summary information from your profile;
in food analysis — the meal photo you upload;
in workout generation — your goals, level, equipment and limitations.

We do not pass your password, full food history or payment data to the AI provider. Your AI chat history stays local on your device unless you decide otherwise.

6. Data processors (third parties)

Provider	Purpose	Data processed
Supabase	Database and authentication (backend)	Email, name, profile data, app records
Google Gemini AI (via our proxy)	AI chat, workout generation, food analysis	Questions, meal photos, personalization parameters
RevenueCat	Subscription management	User identifier, subscription status
Apple App Store / Google Play	Distribution and payments	Payment information (processed entirely by the store)

All listed providers act as data processors based on written agreements pursuant to Art. 28 GDPR. Data may be transferred outside the EEA only under adequate safeguards (e.g., EU Standard Contractual Clauses).

7. Storage and security

Your account data is stored in secure cloud infrastructure (Supabase) with encryption in transit (TLS).
There are no passwords — sign-in happens via email verification.
AI chat history and some settings are stored locally on your device.
Records are kept while your account is active. When you delete your account, personal data is permanently erased within 30 days unless the law requires longer retention.

8. Your rights (GDPR)

Under the GDPR you have the following rights:

Right of access — to obtain information about which of your data we process;
Right to rectification — to correct inaccurate or incomplete data;
Right to erasure ("right to be forgotten") — to request deletion of your data and account;
Right to restriction of processing;
Right to data portability — to receive your data in a structured, commonly used, machine-readable format;
Right to object to processing based on legitimate interest;
Right to withdraw consent at any time where processing is based on consent;
Right to lodge a complaint with the Commission for Personal Data Protection (Republic of Bulgaria, 2 Prof. Tsvetan Lazarov Blvd., Sofia, www.cpdp.bg).

To exercise any of these rights write to contact@fitbalkanmate.com. We respond within 30 days.

9. Deleting your account and data

You can delete your account at any time:

from Settings → Profile → Delete Account in the app; or
by writing to contact@fitbalkanmate.com from your registered email.

Upon deletion we remove your profile, workout and food histories, weight records and all related data from our servers. Local device data (including AI chat history) is cleared when you uninstall the app.

10. Children's personal data

The app is aimed at a general audience aged 13+ and does not knowingly collect personal data from children under 13. If we learn that we have received data from a child under 13 without parental or guardian consent, we will delete it immediately.

11. Changes to this policy

We may update this policy from time to time. For material changes we will notify you in the app and/or by email. Continued use of the app after the changes take effect means acceptance of the updated policy.

Get in touch

For questions about this policy or the protection of your data write to contact@fitbalkanmate.com