Privacy policy
Effective 23 August 2026
This policy covers the Fitness Mastery app for iPhone and Android. Our website has its own policy at fitnessmastery.com/privacy-policy.
Tomic Systems, LLC controls your personal data. We are a Wyoming limited liability company with our principal office at 7345 W Sand Lake Road, Suite 210, Office 4414, Orlando, FL 32819, United States. Write to support@fitnessmastery.com with any question, request or complaint.
1. How you get an account
Your coach creates your account and sends you a temporary password. The app has no public sign-up. To become a client, apply at fitnessmastery.com.
2. What we collect
Account. Your name, email address, and your password, which we store only as a salted hash. We never see the password itself.
Profile. Birth year, sex, height, preferred units, and the meal names you use.
Nutrition. Everything you log: foods, portions, the meals you group them into, meals you save, foods you create, which foods you log most often, and the calorie and macronutrient targets set for you.
Body measurements. Your weigh-ins and the date of each.
Habits. The daily values on your Habits tab, including steps, sleep and weight.
Training. Your programs, your workouts, and every set, weight and rep you record.
Apple Health and Health Connect, if you turn it on. We read steps, sleep and weight so those habits fill in without retyping, and we write a weigh-in you enter in the app back to Health so both hold the same number. Refuse it, or withdraw it later in your phone settings, and the rest of the app works normally.
Camera. Scanning a barcode reads the number on the barcode. The app takes no photograph and keeps none. Photographing a nutrition label sends that photo for reading, which section 4 covers. We do not store the photo.
Technical and security data. A hashed identifier for each signed-in device, when that session started, expires and was last used, the time of your last sign-in, and a count of failed sign-ins so we can lock an account someone is guessing at.
We collect no analytics, advertising or tracking data. The app holds no advertising identifier and does not track you across other apps or websites.
3. Why we use it
We use your account and profile to give you access and calculate your targets. We use your nutrition, body, habit and training data to coach you, which is the service itself. We use health data you connect to fill in your habits. We use technical data to keep you signed in and protect your account.
Where the GDPR applies, we rely on our coaching contract with you for the coaching data, on your explicit consent for health data you connect, and on our legitimate interest in account security for the security data.
4. Who we share it with
Your coach and our coaching staff, through our internal coaching dashboard. They can see everything you log. That is how the coaching works.
AI providers, for two features. Each request carries only its own content. Neither carries your name, email or account identifier.
- Photograph a nutrition label and we send the photo to Anthropic or OpenRouter, which may route it to Google's Gemini models, to read the nutrition table. You check the result before anything is saved.
- Write or dictate a meal in one line and we send that sentence to OpenRouter to split it into foods and amounts.
Search or scan a barcode instead if you would rather not use either.
OVH, who host our servers and database in Frankfurt, Germany.
Expo, whose update service receives your app version and device platform to decide which update to send you.
We do not sell your personal data and we do not share it for advertising. Data read from Apple Health or Health Connect fills in your habits and shows you your progress. We never use it for advertising or marketing, never sell it, and never share it with anyone beyond the parties named above.
5. Where it is stored
Your account and everything you log sits on servers in Frankfurt, Germany.
We are a United States company, so we reach that data from the United States, and the AI providers in section 4 process their requests there.
If you are in the UK or EEA, your data is held inside the EEA and transferred to the United States when we access it to coach you and when you use the two features in section 4. We rely on the EU Standard Contractual Clauses for those transfers.
6. How long we keep it
We keep your coaching data while you are a client, and for 24 months after your coaching ends, so you can come back to your history.
Delete your account and we erase your data from our live systems at once. We keep nightly database backups for 14 days, so a copy can survive in a backup that long. After that no copy remains.
7. Deleting your account
Open Settings, then Delete account. The app asks for your password to confirm.
Deletion happens straight away and cannot be undone. It erases your programs and workout history, your food diary, saved meals and custom foods, your weigh-ins and your habits, then signs you out on every device. Your coach cannot get it back.
Deleting your data does not cancel a paid coaching subscription. Email support@fitnessmastery.com for that.
Data already written to Apple Health or Health Connect belongs to your phone, not to us. Delete it in the Health app if you want it gone.
8. Your rights
Ask us for a copy of your data, or to correct it, delete it, or send it to someone else. Withdraw your consent for health data at any time. Email support@fitnessmastery.com and we will answer within 30 days.
In California, you can ask what we collect, and have it deleted or corrected. We do not sell or share personal information as the CCPA defines those terms, and we will not treat you differently for exercising any right.
In the UK or EEA, you can also object to processing, restrict it, and complain to your data protection authority.
In Washington State, the My Health My Data Act lets you withdraw consent to the collection of consumer health data and have it deleted. Email us and we will do it.
9. Security
We store passwords only as salted hashes, and session tokens only as hashes, so a copy of our database hands nobody a working session. Repeated failed sign-ins lock an account. Traffic between the app and our servers is encrypted.
No system is perfectly secure. If a breach affects your data we will tell you, and tell the regulator where the law requires it.
10. Children
The app is not for anyone under 16 and we do not knowingly collect data from children. Tell us if you believe a child has an account and we will delete it.
11. Changes
We will tell you in the app or by email before a material change takes effect. The date at the top shows the current version.
12. Contact
Tomic Systems, LLC
7345 W Sand Lake Road, Suite 210, Office 4414
Orlando, FL 32819, United States
support@fitnessmastery.com