DRAFT: not legal advice and not yet reviewed by a lawyer. It describes what the software does today. Fill in the [bracketed] parts and have it reviewed before the site is opened to the public.
Privacy notice
Who we are
[Company name and address] runs this Phit site. Contact: [privacy contact email].
What we store, and why
- Your account: email address and a one-way scrambled form of your password (scrypt hash). We never see or store your password itself. We also record when you joined, when you last logged in, and which version of this notice you agreed to.
- Your runs: the FIT, GPX or TCX files you upload are read and kept as data: timestamps, distance, heart rate, elevation, cadence, and the GPS track, plus results we work out from them (groups, splits, records, efficiency factor, adjusted pace). This is health and location information. We keep it only to show you your own analysis.
- Your settings: max heart rate and zones, run groupings and labels you choose, names you give groups.
Each account's runs are kept in a separate database that other accounts cannot read.
What leaves our servers
- Weather lookup (only if you switch on the weather adjustment): the run's start location rounded to about 1 km and its date and time are sent to Open-Meteo (open-meteo.com) to get the temperature and dew point. Nothing else about you or the run is sent.
- Place names never leave: a run's town (in the name Phit gives a run that has none) is looked up in a list of towns that ships with Phit, from GeoNames (geonames.org, CC BY 4.0). The run's start point is not sent to any geocoding service.
- Email: your address and the message text go to our email provider [provider name] so we can send confirmation and password-reset links.
- Hosting: our servers are provided by [hosting provider, region].
- We do not sell your data, show ads, or use it to train models, and the site uses no analytics or advertising trackers. It sets one cookie to keep you logged in.
Your choices
- Download everything we hold for you, and delete your account and all your data, from the Account menu at any time. Deletion removes your database straight away; backups containing it are overwritten within [backup retention, e.g. 30 days].
- Ask [privacy contact email] to correct or access anything else.
How long we keep it
Until you delete your account. [Inactive accounts: describe the policy, e.g. deleted after 24 months of no login.]
Security
Connections use HTTPS; passwords are hashed; sessions expire; repeated wrong passwords lock the account for a while. No system is perfectly secure; if there is a breach affecting you we will tell you as the law requires.
Not medical advice
Phit is a fitness tool. Its numbers are estimates and must not be used to diagnose, treat or decide anything about your health.
Version: draft-1. [Legal basis, international transfers, your regulator and complaint rights to be completed for your jurisdictions, e.g. GDPR / UK GDPR, CCPA/CPRA, and state health-data laws.]