FitRay is published and operated by Satelec LLC, a company registered in Dubai, United Arab Emirates ("we", "us"). We are responsible for your personal data (the "controller"). This policy explains what we collect, why, who receives it, how long we keep it and what you can do about it. It applies to the FitRay app, fitray.app and portal.fitray.app.
What we collect
- Account data: your email address and, if you sign in with Google or Apple, the account ID they return. FitRay has no passwords.
- Profile data you enter: name, username, gender, birth date, country, city, phone, profile photo, bio and experience level.
- Health and fitness data you enter: height, weight, goals, meals, custom foods, workouts, activities and plans. This is sensitive data and we treat it as such.
- Requests to coaches and nutritionists: the answers you give, which can include injuries, medical conditions, medications, diet and photos — only what you choose to fill in.
- Messages with coaches, nutritionists and support, with the photos and files you attach.
- Purchases: records of FitRay Pro bought through Google Play or the App Store, and of professional subscriptions bought on portal.fitray.app. We never see your card details.
- Usage and device data: the screens and features you use, app version, device type, a device ID created by the app, your IP address and the token that lets us send you push notifications.
- Approximate country, worked out from your SIM, network, time zone and language, and if those fail, from your IP address (see Service providers). We do not collect precise location.
- The country your connection comes from, as reported by Cloudflare, recorded each time you sign in or open the app, with the date, so we can see in which countries FitRay is used. If you use a VPN, this is the VPN's country.
- Visits to fitray.app: the pages you open, the site or campaign that sent you there, your browser and device type, your language and country, and clicks on the store buttons. The website sets no cookie and stores nothing on your device. Your IP address is used only for a moment, together with a secret that changes every day, to tell one visit from another; it is not stored, so we cannot recognise you on a later day. If your browser sends Global Privacy Control or Do Not Track, nothing is recorded.
- Advertising data, collected by Google AdMob rather than by us, and only if you see ads — see Advertising.
Why we use it, and on what legal basis
- To run your account and the features you use — summaries, progress, plans, messages, coaching requests (contract).
- To process your health and fitness data, which you give us by entering it (your explicit consent). You can withdraw it at any time by deleting the data, or by deleting your account (the data is then kept, hidden, for 180 days so you can restore the account, and then deleted — see How long we keep it).
- To send the notifications you turned on (consent — each kind can be turned off in the app).
- To keep the service secure, prevent abuse and fraud, fix bugs and understand which features are used (legitimate interest).
- To keep purchase records (legal obligation).
- To show ads in the free version — see Advertising.
Advertising
If you do not have FitRay Pro, the app shows ads served by Google AdMob: native ads within the app, and rewarded ads that you choose to watch in exchange for an in-app reward. To deliver, cap and measure these ads and to prevent ad fraud, AdMob may collect your device's advertising ID, your IP address and the approximate location derived from it, device and app information, and your interactions with ads. Ads are personalised only where you have allowed it; otherwise they are non-personalised. Legal basis: your consent where the law requires it, otherwise our legitimate interest in keeping a free version of FitRay available. Google explains how it uses this data at policies.google.com/technologies/partner-sites.
Your choices. Where consent is required (for example in the EEA, the UK and Switzerland), Google's consent form asks you before any personalised ads are shown, and you can change your choice at any time under Privacy settings in your account in the app. On any device, you can reset or delete your advertising ID, or opt out of personalised ads, in your device settings (on Android: Settings → Google → Ads).
Your health and fitness data — weight, meals, workouts and other logs — is never shared with ad networks and never used to select ads.
Coaches and nutritionists
Coaches and nutritionists on FitRay are independent professionals. When you send one a request or connect with them, they see:
- the answers and photos in your request;
- your messages with them;
- your name, age, height, city and phone if you entered them;
- your progress while you are connected: weight trend and workout completion.
They see nothing else, and nothing at all from professionals you have not contacted.
Coaching conversations
Messages in a conversation with a coach may be checked for three things only: proposals to pay or be paid outside FitRay, bank or card details being exchanged, and claims to cure, treat or diagnose. The check runs first as an automated pattern match. Where that is inconclusive and the message mentions payment or another messaging service, the text of that message may be sent to an AI provider we contract with for a second opinion. A person reads a message only when one of these checks flags it, and only to decide whether a rule was broken. Support conversations are not checked this way.
Why: a programme arranged outside FitRay has no delivery deadline, no held payment and no refund, and we cannot help either side when it goes wrong.
Service providers
We do not sell your personal data. We share it only with the providers that help us run FitRay, or where the law requires it:
- Hosting and infrastructure: our server host, Cloudflare (content delivery and security) and Brevo (sign-in codes and other service emails).
- Google and Apple: Google Sign-In and Sign in with Apple, Google Play Billing and Apple In-App Purchase, Google Firebase Cloud Messaging (push notifications) and Google AdMob (ads).
- Stripe, for subscriptions bought on portal.fitray.app and, where it is offered, for paying for a coaching programme. Stripe handles the card details.
- ipapi.co, which receives your IP address only when the app cannot work out your country any other way, and returns the country.
- Google Cloud Translation, which translates texts that coaches and nutritionists write for their public profiles.
- The AI provider described under Coaching conversations.
Our providers process the data only on our instructions, and our contracts forbid our hosting, email and AI providers from using it to train their own models. Google, Apple and Stripe also handle the data they receive under their own privacy policies. We disclose data to authorities only when the law requires it.
How long we keep it
We keep your data while your account exists. When you delete your account, it is hidden from everyone at once and kept for 180 days, so you can restore it by signing in again; after that your personal data is deleted — the account deletion page lists exactly what is deleted and the few records that are kept without your name (purchase records, which tax law requires; a professional's record of your request, without your answers; public reviews, under "Deleted account"; security records, without your email or IP address). Our daily backups are overwritten within 14 days of that final deletion.
Records of visits to fitray.app are deleted after 400 days.
Your rights
Depending on where you live (for example under the GDPR in the EEA and the UK), you have the right to access your data, correct it, receive a copy, delete it, restrict or object to its processing, and withdraw your consent at any time. You can delete your account yourself in the app. For anything else, email [email protected] from the address on your account; we answer within 30 days. You also have the right to complain to the data protection authority where you live.
International transfers
Our servers and some providers are outside your country. Where the law requires it, we protect transfers with safeguards such as the EU Standard Contractual Clauses.
Security
Data is encrypted in transit. Sign-in uses one-time email codes or Google or Apple, so there is no password to leak. No system is completely secure, so keep your email account and your phone's screen lock safe.
Children
FitRay is not directed to children under 13, and we do not knowingly collect data from them. Where the law of your country sets a higher age for consenting to data processing (up to 16 in some EU countries), we process the data of users below that age only with the consent of a parent or legal guardian.
Changes
We may update this policy. The date at the top shows the latest version; for changes that affect your rights we will also tell you in the app or by email.
Contact
Questions or requests: [email protected], or write to Satelec LLC, 610 Clover Bay Tower, Business Bay, Dubai, United Arab Emirates.
Last updated: 2026-10-25