Privacy policy

Operator identification and privacy contact

fofit is provided by jobwright, Inc., a Delaware C corporation incorporated on August 6, 2026 and registered in Delaware under file number 10726531.

The address of the Delaware registered agent is 131 Continental Dr, Suite 305, Newark, DE 19713, USA. The agent is Legalinc Corporate Services Inc.. This address is not an operating or customer service office. To contact the operator, use [email protected].

For questions or requests about your data, write to [email protected].

Who uses fofit

fofit has two account types: personal trainer and client. The trainer uses the app to follow their clients. The client uses it to follow their workouts and talk to the trainer they are connected to.

Data we collect

• Account data: name and email. You can create an account with email and password or sign in with your Google or Apple account.
• Body measurements recorded in the app.
• Body progress photos.
• Workout history and the feedback you record about your workouts.
• Messages exchanged between trainer and client.
• Session scheduling data.
• Device identifiers used to send notifications (push notification tokens).
• Payment data, described in the section on payments below.
• Data from the Google account a personal trainer connects to create Google Meet links, described in the section on Google data below.

How we use data

We use data to make the app work: to keep your account, show workouts, history and progress, deliver messages between trainer and client, organize the schedule, send notifications and process payments.

Who sees your photos and measurements

Body progress photos are visible only to the client and to the personal trainers connected to them.

Who we share data with

Artificial intelligence assistant

Where available, the artificial intelligence assistant is used by the personal trainer, for example to build and adjust programs. To do this, the assistant sends data to an artificial intelligence provider outside fofit: OpenAI, through the LiteLLM service. Each request asks the provider not to store the content (store: false). This request is not a guarantee that the provider retains nothing.

Use of the assistant requires an active Paid plan and is governed by this policy and the Terms of use. Use also depends on the service being available and on usage limits. The trainer can use the assistant with the clients they are connected to and whose records they are authorized to view, without further authorization from the client. There is no setting for a client to authorize or refuse the use of AI. The connection does not send every record automatically: only the data one of the assistant's tools requests in each lookup is sent.

Data sent about the trainer:

• every message they write to the assistant;
• the account identifier, as an opaque code, for budget and usage limit control and abuse prevention;
• the trainer's programs, when the assistant looks them up: names, goals, sessions, exercises and prescriptions (sets, repetitions, loads, rest, tempo and coaching notes).

Data that may be sent when the assistant looks up a connected client:

• name, account identifier and connection date;
• the profile the trainer keeps: goal, restrictions and notes about pain;
• the assigned training program and its status;
• the history of completed sessions: dates, exercises, sets with loads and repetitions, and skipped or substituted exercises;
• the feedback the client records after a session: effort (RPE), mood, energy and the free text;
• the reference load for each exercise.

Data not included in the results the tools send to the provider:

• the client's email, photos and body measurements, and messages between trainer and client;
• the trainer's private notes about the client;
• billing, payment, payout and scheduling data.

This exclusion does not limit the text the trainer writes to the assistant: everything they type, including names, health data or other personal information, is sent to the provider, even when it is not part of the data the tools look up.

Ending or suspending the connection prevents new tool lookups about that client. The next time the conversation is generated, the assistant's saved context is reset if the connection no longer allows access. An accepted account deletion request also ends the connections. This does not delete earlier messages the trainer can still read in the app, and it is not the same as deleting content already sent to the provider.

Payments for trainer services

When online payment is available, the providers PagBank and Pagar.me process payments for the trainer's services. They receive the payer's identification data: CPF, address and phone number. For the trainer who receives the money, they also receive the account verification data required to open the payout account. When payment happens outside the app, the trainer can record the amount received; that record does not move any money.

Platform subscription

The app has two plans for personal trainers. The Free plan allows up to five active clients. The Paid plan allows unlimited active clients and includes the artificial intelligence assistant and automatic creation of Google Meet links, when the service is available and the Google account is connected and authorized. Programs and workout tracking, the exercise catalog, history and progress, scheduling, messages and notifications, records of charges and payments made outside the app and manually added meeting links are included in both plans. Client accounts do not buy an app plan. Subscriptions are managed by RevenueCat and by the App Store or Google Play where the purchase was made. They are separate from payments for the trainer's services.

Sign in with Google or Apple

If you choose to sign in with Google or Apple, those services handle the authentication.

Error monitoring in the app

The fofit app on iOS, on Android and in the browser, at app.fofit.io, sends reports of errors that occur in the app to Sentry, hosted in the United States, to keep the service secure and working. These reports do not depend on a consent prompt. A report contains the error type and the code location where it happened, the error message without URL parameters, tokens or email addresses, the address path without parameters, the device, operating system and app version, and an opaque account identifier. It does not contain request bodies or headers, cookies, or workout, health or billing data.

Google data

If you are a personal trainer, you can connect a Google account to fofit so that online sessions get a Google Meet link. The connection is optional and you make it yourself, in “Scheduling rules”, in the app's schedule. Clients do not connect a Google account for this.

What we ask Google for

We ask for a single Google Calendar permission: to create and manage the events fofit creates in your calendar. We do not read your other Google Calendar events, and we do not add clients as guests to the events.

What we store

• The identifier and email of the connected Google account.
• The access credential (refresh token), stored encrypted.
• The identifiers of the events fofit created in your Google Calendar.

How we use it

We use this data only to create, update and remove the events for online sessions and their Google Meet links. We do not share or sell this data, and we do not use it for advertising or to train artificial intelligence models.

Google requires the following statement: The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.

How to disconnect

You can disconnect the Google account in the app at any time. When you disconnect, we revoke access at Google and delete the credential. Events already created stay in your own Google Calendar, and their links keep working. An account deletion request accepted in the app also revokes access and deletes the credential. The steps are in Help and support.

Advertising and tracking

The fofit app does not use advertising or cross-app tracking SDKs. On the public website, only on the allowed public pages and after your explicit consent, PostHog receives anonymous page view events. This analysis runs only in production, on the home, privacy, terms and support pages. The URL sent does not include parameters, the fragment or the referring page; the connection to the service, hosted in the United States, also transmits the technical data needed to deliver the request, such as the IP address.

Analysis does not start before you choose, and declining does not change how the site works. Your choice is saved in the browser's local storage. You can change or withdraw consent in “Privacy preferences”, in the footer. The site does not use session recording, heatmaps, surveys, automatic capture of interactions, forms or health and workout content; it also does not measure invitation pages, authentication routes or the API.

With the same consent and on the same pages, Sentry, hosted in the United States, receives reports of errors that occur in the browser while the site runs. A report contains the error message and the code location where it happened, the page address without parameters or fragment, and the browser and operating system. It does not contain cookies, form contents or the referring page, and Sentry is told not to record the IP address, although the connection to the service transmits it to deliver the request. Declining or withdrawing consent also stops these reports.

In the mobile app, when product analytics is available in the installed version, it also depends on your explicit consent and uses predefined screen names and an opaque account identifier. It does not send your email or your records to this analysis.

Account deletion and retention

To request deletion, open “Settings” in the fofit app and choose “Delete account”. The request is accepted in the app. If you cannot access the app, you can ask for help by the email described in Help and support, in the account deletion section. After the request is accepted, there is a 30-day period during which the deletion can be undone. At the end of that period, the account's name and email are anonymized, and your photos, measurements, credentials and other data described in the account deletion section are deleted.

Some records remain linked to the anonymized account: financial and session records, the workout history followed by other people, and evidence from reports. Programs created by personal trainer accounts are also kept, including drafts never assigned to a client. Programs owned by client accounts and the workouts recorded in them are deleted. The other person may keep read-only access to the conversation. The text of messages and of some history records stays as it was written and may contain personal information. Deleting the account does not delete all content stored or shared with other people.

The details are in Help and support: account deletion.

Your rights

Brazil's General Data Protection Law (Lei Geral de Proteção de Dados, Law No. 13,709/2018) gives you, as the data subject, the following rights:

• to confirm whether we process your data and to access it;
• to correct incomplete, inaccurate or outdated data;
• to request the anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
• to request data portability;
• to request deletion of data processed with your consent;
• to know who we share your data with;
• to be informed about the option of not giving consent and its consequences, and to revoke consent you have given;
• to file a complaint with the National Data Protection Authority (Autoridade Nacional de Proteção de Dados, ANPD).

Changes to this policy

The date at the top of this page identifies the revision of the text. Changes to the product or to the law may require a new revision. This policy remains a draft until the content receives legal review, including the operator's responsibilities. How future changes will be communicated also needs to be defined before final publication.

Contact

To exercise your rights or ask questions about this policy, write to [email protected].