Privacy notice

Who runs fitMe

fitMe is a small, invite-only app run privately by Laurent Ameti. Questions about your data go to the person who invited you, or reply to any fitMe email.

What fitMe stores

For an access request: your name, email, optional note, when you agreed to this notice, and a one-way hash of your IP address used only to stop spam.

For an account: your name, email, password (stored as a hash), the profile details you enter, and the health and workout data Garmin sends for you: sleep, heart rate, HRV, Body Battery, stress, steps, blood oxygen and recorded workouts.

Your Garmin API key is stored encrypted and is never shown again after you save it.

Why

To decide on your request, run your account, show your health overview, build training plans and daily reports, and, if you connect one, let your own AI assistant read and write your plan.

The legal basis is your consent (GDPR Art. 6(1)(a) and, for health data, Art. 9(2)(a)). You can withdraw it at any time by deleting your account.

Who else sees it

Nobody, except the services that run fitMe: hosting and database (Vercel), email delivery (Resend), and Garmin, which fitMe reads from with your own key. Your data is never sold or used for advertising.

How long

Declined access requests are deleted after 90 days. Account data is kept until you delete your account, which removes everything immediately.

Your rights

You can see, correct, download (Settings → Download my data) and delete (Settings → Delete account) your data, object to its use, and complain to a data protection authority.