1. Data Controller
This Privacy Policy belongs to the individual developer trading as "More Fit" ("we"), based in Türkiye, who operates the More Fit app. It explains how we collect, use and protect your personal data. For any data request or question: serhatmore@gmail.com.
2. What We Collect
- Account info: first name, last name, email, profile photo, date of birth, gender (if you set it during onboarding).
- Sign-in data: when you sign in with Google or Apple, your name and email from that provider. With Sign in with Apple you may choose to hide your email.
- Body & goal info: height, weight, fitness goal, experience level, equipment preference, weekly target days.
- Training & progress: completed workouts, body measurements, and any photos you voluntarily upload.
- Messaging: messages you send to your trainer (PT) and support tickets.
- Subscription info: subscription status and period (via the payment intermediary RevenueCat). We never see your card/bank details; payment is processed entirely by Apple/Google.
- Notification data: your device's push token (Firebase Cloud Messaging) so we can send push notifications.
- Technical: device type, OS, app version, and crash/error reports (Sentry).
In guest (anonymous) mode we process only the minimal technical data needed for the app to function.
3. Why and on What Legal Basis We Process It
We process your data to build your personalised plan, match you with a trainer, show your progress, manage your premium subscription, send notifications, and keep the app secure. The legal bases are performance of our contract with you and our legitimate interests. Marketing-related processing requires your separate, explicit consent, which is optional and may be withdrawn at any time.
4. Push Notifications
With your permission we send push notifications for workout reminders and updates. You can turn notifications off at any time in your device's operating-system settings.
5. Health Data (Apple Health / Health Connect)
You can optionally connect the App to Apple Health (HealthKit) on iOS or Google Health Connect on Android. The connection is entirely optional and is only established with your explicit consent (you initiate it and approve the operating system's permission screen). Health data is a special category of personal data and is processed solely on the basis of your explicit consent.
While connected:
- What we read: your daily step count and active calories burned, used solely to show your daily calorie balance inside the App.
- What we write: workouts you complete in the App, the calories/macros of meals you log, and body-weight measurements you enter are saved to your health app.
Our servers (Supabase) store only daily summaries: date, step count and calories burned. Raw/detailed health records stay on your device. Your health data is never used for advertising or marketing and is never sold or shared with third parties.
You can disconnect at any time from Profile → Settings; OS-level permissions can be revoked in Apple Health or Health Connect settings. When you delete your account, the daily summaries on our servers are deleted automatically.
Your nutrition logs and daily activity summary are shared with your assigned coach (PT) only if you enable this in the app settings; you can turn it off at any time.
6. Third-Party Processors
We share limited data, only to the extent needed to provide the service, with these trusted processors:
- Supabase — authentication and database (EU region).
- Cloudinary — image hosting (profile photos, etc.).
- RevenueCat — subscription-status management.
- Sentry — crash and error reporting.
- Google Firebase Cloud Messaging — push-notification infrastructure.
- Apple / Google — payment processing and (if you use it) social sign-in.
We do not share or sell your data with advertising partners or data brokers.
7. Retention & Deleting Your Account
Your data is kept while your account is active. You can delete your account at any time directly within the app:
Profile → Account → Delete Account
After you request deletion, a 30-day grace period begins; if you log back in during this time, the request is cancelled. At the end of the grace period all of your personal data is permanently deleted or irreversibly anonymised. You may also request deletion by emailing serhatmore@gmail.com. See /legal/data-deletion for details.
8. Your Rights (GDPR / Türkiye KVKK art.11)
You have the right to access, rectify, erase, port, and object to processing of your personal data, and to withdraw consent you have given. To exercise these rights, write to serhatmore@gmail.com. You also have the right to lodge a complaint with your competent data-protection authority (in Türkiye, the KVKK Authority).
9. Children
We do not knowingly collect data from users under 16. If you become aware that a child has shared information with us, let us know and we will delete the record.
10. Data Security & International Transfers
Your data is encrypted in transit (HTTPS) and stored on secure infrastructure. Our processors may process your data on servers outside Türkiye (e.g. the EU); such transfers are protected by safeguards consistent with applicable law.
11. Changes
If the policy changes meaningfully, we notify you by email and/or in-app message. The current version is always at /legal/privacy-policy.
12. Contact
Data controller: More Fit (Türkiye). Contact: serhatmore@gmail.com