How SolidFitTrack handles your personal data—clearly and in one place.
For privacy questions, data subject requests, or concerns about how we process information, reach out anytime.
SolidFitTrack is a personal workout and running tracker. This policy covers our Android and iOS mobile apps and our website at solidfittrack.com.
The mobile apps are local-first: they do not require an account and do not call the SolidFitTrack API. A small number of legacy website accounts may still exist; deletion for those is described below. The website itself is a marketing and legal surface (no web training product).
On Android and iOS, workouts, training sessions, runs (including GPS routes), body measurements, progress photos, health metrics, and related history are stored on your device. We do not receive that training data on our servers, and the apps do not create SolidFitTrack accounts.
You can remove on-device app data by clearing the app’s storage or uninstalling the app. Optional encrypted backup files you create are under your control (see below).
The mobile apps let you optionally export an encrypted backup file protected by a passphrase you choose. Encryption uses client-side AES-GCM; the plaintext never leaves your device as part of that export.
We do not store a copy of that backup on SolidFitTrack servers. Only someone with the file and your passphrase can restore it. Keep the file and passphrase safe; if you lose either, we cannot recover your data.
When you record a run, the apps may collect precise GPS location to build your route and metrics. On Android this can use a foreground service so tracking continues while the screen is off. Location is used only for the run you are recording and is stored on the device with that run.
We do not collect your location in the background at other times. We do not sell location data.
If you choose to connect them, the apps may read sleep, heart rate, and steps from Health Connect (Android) or HealthKit (iOS) to fill daily health metrics. They may also read heart-rate samples that overlap a workout or run so the summary can show average and maximum heart rate. Reading starts only when you sync, or when that read permission is already allowed.
If you turn on Save workouts to Health Connect or Save workouts to Apple Health in Settings (off by default), the apps may write the finished workout or run — activity type, start and end, title, distance, estimated calories, and GPS route — to Health Connect or Apple Health. The permission prompt appears only when you turn that setting on. Turning it off stops further writes. These writes stay on this device. SolidFitTrack servers do not receive them.
Health data from Health Connect / HealthKit is never used for advertising and is never shared with third parties for advertising or analytics. We do not sell health data. Use of HealthKit / Health Connect data complies with Apple’s and Google’s health data policies.
The free mobile apps are supported by Google AdMob app-open ads (typically at most one short ad per day). AdMob may use your advertising ID and related signals to serve and measure ads.
Consent is collected through Google’s User Messaging Platform (UMP), covering GDPR consent and applicable U.S. state privacy opt-outs. You can change or withdraw consent later via the in-app privacy options (UMP privacy options form).
Google and its advertising partners may process data for ads as described in Google’s policies. See Google’s list of advertising partners: AdMob & advertising partners.
With your consent (via the same UMP consent flow where required), we use Firebase Analytics and Firebase Crashlytics to understand feature usage and fix crashes. Typical data includes app events, device model and OS version, and crash stack traces. Collection is consent-gated: if you decline, analytics and crash reporting are disabled.
You can opt out by declining consent in the UMP form or by changing your choice later through the in-app privacy options. Clearing app data or reinstalling may also reset consent prompts where the platform allows.
The website no longer offers account registration or a web training product. This section applies only if you still have a legacy SolidFitTrack website account. The mobile apps do not create website accounts.
Account deletion: request deletion at https://solidfittrack.com/excluir-conta. After email confirmation (link valid 24 hours), we permanently remove personal identifiers (name, email, and similar) by anonymising the account, and delete any optional encrypted cloud-backup snapshot stored for that account. Personal account data is not retained for a fixed marketing period after deletion.
For site visitors and any remaining legacy website accounts, we process personal data to:
Where local law requires a specific basis (for example consent), we rely on the basis that applies in your jurisdiction.
We may share data in situations such as:
We do not sell your personal information.
Legacy website account data is protected with reasonable technical and organizational measures, including access controls, password hashing, and secure development practices. Mobile training data stays on your device (and in any encrypted backup file you create). No service or device is completely risk-free; use a strong passphrase for backups and keep your device secure.
Legacy website account data is kept while the account remains and as needed for legal obligations. After account deletion, personal identifiers are removed as described in section 8. Mobile app data remains on your device until you delete it, clear app storage, or uninstall. Server logs for the website are kept for a limited period for security and operations.
Depending on where you live, you may have rights to access, correct, delete, or export personal data we hold about you (for example website account data), to object to or restrict certain processing, or to withdraw consent where processing is consent-based. For mobile apps, most training and health data never leaves your device; use in-app controls, privacy options, or uninstall to manage it. Legal deadlines and exceptions may apply.
SolidFitTrack is not directed at children under 13. Our Google Play target audience is 18+. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data through the website, contact us and we will take appropriate steps.
Website hosting and providers such as Google (AdMob, Firebase) may process data outside your country. Where required, transfers rely on appropriate safeguards (such as Standard Contractual Clauses or equivalent).
On the website we use cookies and session mechanisms needed for sign-in, security (including CSRF protection), and core functionality. You can control cookies through your browser; disabling essential cookies may prevent normal use of the site. For more detail, see our Cookie Policy if linked from the site footer.
We may update this Privacy Policy to reflect product or legal changes. We will post the revised version on this page with an updated “Last updated” date. Continued use after material changes may indicate that you acknowledge the update, as permitted by applicable law.
