FemFit

FemFit Privacy Policy

Effective Date: September 7, 2026 • Application: FemFit (com.jarrodfranz.femfit) • Developer: Jarrod Franz

Core Privacy Commitment

FemFit is designed from the ground up as an offline-first, privacy-by-design application. Your health, menstrual cycle, fitness, GPS route, and nutrition data belong strictly to you and remain stored locally on your device. We do not sell, rent, monetize, or disclose your personal information or health metrics to any third parties or advertising networks.

1. Information We Collect and Process

FemFit processes data locally on your device to deliver cycle-aware training intelligence, workout tracking, nutrition planning, and personal safety features. The data categories processed include:

A. Menstrual Cycle & Reproductive Health Data (Sensitive Tier)

  • Data Processed: Menstrual period start and end dates, cycle duration, follicular/ovulatory/luteal cycle phases, physical symptoms (cramps, bloating, fatigue), and daily wellbeing check-ins.
  • Purpose: To adapt fitness training recommendations, celebrate cycle-phase personal bests, and provide non-contraceptive biological rhythm insights.
  • Storage & Privacy: Stored strictly on-device in your local encrypted database. It is never uploaded to any remote server or cloud service.

B. Activity, GPS & Fitness Data

  • Data Processed: Workout logs (running, walking, strength training, HIIT, yoga, pilates, swimming), duration, distance, pace, elevation climb, heart rate, and GPS breadcrumb coordinates.
  • Purpose: To record your exercise sessions, calculate pace and split milestones, visualize route maps, and evaluate personal records.

C. Nutrition & Hydration Logs

  • Data Processed: Logged meals, food catalogue entries, calorie and macronutrient targets (protein, carbs, fat), micronutrient adequacy estimates (iron, calcium, vitamin D), and daily water intake.
  • Purpose: To support adequate fueling and hydration for female athletes without caloric shaming or moralizing vocabulary.

2. Google Play Health Connect Policy Disclosure

When you explicitly grant permission to sync with Google Health Connect (or Apple HealthKit on iOS), FemFit requests access to the following health data permissions:

Permission Data Type Purpose of Use
READ_STEPS Daily Step Counts To display your historical daily steps on your Activity dashboard and Progress screens.
READ_ACTIVE_ENERGY_BURNED Active Energy Burned (Calories) To summarize active calories burned during your day and logged workouts.
READ_TOTAL_CALORIES_BURNED Total Calories To calculate resting vs. active metabolic expenditure when active energy is unavailable.
READ_EXERCISE Exercise Workouts / Sessions To import completed Garmin or third-party workouts into your local activity diary.

Health Connect Data Protections

  • No Third-Party Transfer: Data retrieved from Health Connect is never transferred, shared, or disclosed to third parties, advertising platforms, data brokers, or information resellers.
  • No Advertising Use: Health Connect data is never used to serve, personalize, or target advertisements.
  • No Credit or Lending Use: Health Connect data is never used for creditworthiness assessments or insurance underwriting.
  • Pure Local Utility: All synced health data is stored locally in the application's isolated database solely to fulfill user-facing fitness analytics.

3. Location Tracking & Foreground Service (FGS)

FemFit uses GPS location services to record outdoor workouts (runs, walks, hikes, cycling).

  • Foreground Service (Location): When you tap "Start Run" or "Start Activity", FemFit activates an Android Foreground Service (android:foregroundServiceType="location") to continue recording your GPS path, pace, distance, and safety metrics even when your phone's screen is locked or the app is minimized.
  • Persistent System Notification: While an active workout is in progress, an ongoing, non-dismissible system notification is displayed showing your current duration, distance, and a prominent "Stop" / "Pause" action.
  • No Background Location: FemFit does not request or use ACCESS_BACKGROUND_LOCATION. Location recording begins solely when you initiate a workout and terminates immediately when you finish or discard the activity.
  • Privacy Zones: Shared workout summary cards allow you to obfuscate or exclude geographic start/finish locations to protect your home or work address.

4. Camera & Optical Character Recognition (OCR)

FemFit requests camera access (android.permission.CAMERA) solely for two opt-in features:

  • Barcode Scanning: To scan retail product barcodes (UPC/EAN) for instant nutritional lookups.
  • Nutrition Label OCR: To capture printed nutrition fact panels on packaged foods and parse macronutrients directly into the food creator form.

Photo Disposal Guarantee: Photos taken during nutrition label scanning are processed entirely on-device via Google ML Kit. Images are temporary, held only in private application cache, and are immediately deleted from disk upon processing. They are never saved to your photo gallery, never uploaded to a cloud server, and never retained.

5. Safety Check-In & Live Tracking Link Generator

FemFit includes optional safety tools designed for outdoor runner security:

  • Safety Check-in & SOS: If you become stationary unexpectedly during an outdoor run, FemFit alerts you and can dispatch an emergency SMS with your coordinates to your designated trusted contacts.
  • Live Tracking Links: You can generate a time-limited, tokenized live-tracking link to share with a trusted contact. These links utilize unguessable, cryptographically secure random tokens (128-bit CSPRNG), expire automatically after your workout ends (with a 2-hour maximum grace window), and can be revoked by you at any time.

6. Online Food Database Providers

When you search for foods online or scan a barcode, the search query or barcode number is sent to our integrated food data providers (FatSecret and Open Food Facts) to retrieve nutritional details. No personal user identifiers, location coordinates, or reproductive health data are ever transmitted with food searches.

7. Data Ownership, Export & Deletion

You maintain absolute ownership and sovereignty over all data entered into FemFit:

  • Data Export ("Save a copy of your data"): You can export your entire local database at any time from Settings → Data & Privacy → Export my data. This generates a portable, standardized JSON file saved directly to your chosen device storage. You may optionally include or exclude sensitive cycle and wellbeing data.
  • Data Deletion ("Delete my data"): You can permanently wipe all data from your device at any time via Settings → Data & Privacy → Delete my data. This executes a complete, irreversible deletion of all local database tables, preferences, and cached files. Because we do not store your data on remote servers, no residual data remains.

8. Children's Privacy

FemFit is not intended for use by children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect or solicit personal information from children.

9. Changes to this Policy

If we update this Privacy Policy, the revised version will be published here with an updated effective date. If material changes occur affecting how health data is handled, we will provide prominent in-app notification before changes take effect.

10. Contact Us

If you have any questions, concerns, or feedback regarding this Privacy Policy or your data privacy, please contact us:

© 2026 FemFit. All rights reserved. Built with privacy, dignity, and scientific integrity.