Privacy

Check photos vs. profile photos — the difference matters, so here it is plainly. WE NEVER SAVE YOUR CHECK PHOTOS. FitOnly never writes them to a database, file storage, or logs. To review them, we send them to our AI provider (Anthropic), which processes them to return a result and keeps them only temporarily under its own policy: by default Anthropic automatically deletes API inputs within 30 days and does not use them to train models (flagged content may be kept longer for safety). We're pursuing zero-retention processing so check photos aren't kept anywhere, even briefly. PROFILE PHOTOS ARE STORED — that's the whole point of a profile. They're kept privately in our storage (Supabase, EU West / Ireland), never in a public folder, and are shown to others only through short-lived signed links. Before a profile photo ever leaves your phone, we re-encode it, which strips all embedded metadata — including any GPS location tag — so your photos can't reveal where they were taken. LOCATION is stored approximately only. We round it to about 1 km and keep a city name, never your exact coordinates. Others only ever see a rounded distance (like "3 km away"), never your precise location. What else we store: your email, first name, date of birth, your profile details, and your check results (verified or not, and the date) — no check images, no scores. All of it lives in our EU database and storage. You can permanently delete your account, profile, photos and all of this data anytime in Settings. Full policy coming soon.