Privacy Policy

Last updated: June 6, 2026

This policy applies to the FullFitness77 mobile app (account, workouts, health data, AI meal tracking, cookbook, and gym schedules). It does not replace the website privacy policy for the contact form.

1. Data controller

The data controller for personal data processed through the FullFitness77 app is FullFitness77, Av. de Ayyo, nº 10, 38670 Adeje (Santa Cruz de Tenerife), Spain.

To exercise your rights or ask privacy questions, contact reception, call +34 922 782 501, or email the support address listed at /app/support.

2. Scope of this policy

This policy applies to the FullFitness77 mobile app. It does not replace the website privacy policy for the contact form.

3. Data we collect

• Account data: email, name, optional profile photo, and in-app preferences.
• Workout and health data: logged sessions, metrics you enter manually or sync from Apple Health / Health Connect (if enabled), goals, and progress.
• Nutrition data: meal descriptions or photos, nutritional estimates, saved recipes, and related notes.
• Technical data: device identifier, operating system, app version, push notification tokens, usage logs, aggregated analytics, and crash logs.

4. Purposes and legal basis

• Providing the service and managing your account (contract / pre-contractual steps).
• Personalizing workouts, gym schedules, and saved content (legitimate interest / contract).
• Push notifications about classes, reminders, or updates (consent, revocable at any time).
• App improvement, security, fraud prevention, and legal compliance (legitimate interest / legal obligation, GDPR and Spanish LOPDGDD).

5. Health and fitness data

Workout or health data you enter or sync is used only to show your progress in the app and improve your experience.

The app is not a medical device and does not replace professional health advice. Integrations with Apple Health or Health Connect are optional; you can revoke permissions in your device settings.

6. Meal tracker and AI

Meal descriptions or photos you submit may be processed by third-party AI services to estimate nutritional information or suggestions.

Generated output is indicative and may contain errors; it is not personalized medical or nutrition advice. You can stop using the AI feature at any time.

Prompts or images sent to AI providers are processed under their privacy policies and retained only as long as needed to provide the service.

7. Push notifications

We send push notifications only if you opt in on your device and in the app. You can disable them in system Settings or in-app settings.

Typical types: workout reminders, class schedule changes, gym updates, and operational app messages.

8. Processors and third parties

We may use providers that process data on our behalf: cloud hosting, authentication, usage analytics, push messaging, AI services, and error monitoring tools.

Processors only handle data under our instructions and with appropriate contractual safeguards. You can request an updated list of provider categories via /app/support.

9. Retention and security

We keep account and usage data while your account remains active. After deletion, we erase or anonymize personal data within 30 days unless law requires longer retention.

We apply reasonable technical and organizational measures: encryption in transit (HTTPS/TLS), access controls, backups, and periodic vendor review.

10. Account deletion

You can request deletion of your account from within the app or by following the account deletion page. When you delete your account, we delete or anonymize associated personal data except where law requires retention.

11. Your rights

You may exercise rights of access, rectification, erasure, restriction, objection, and portability by contacting us via /app/support or at reception.

You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

12. International transfers

Some providers (e.g. hosting or AI) may process data outside the European Economic Area. In those cases we rely on EU Standard Contractual Clauses or other GDPR-recognized safeguards.

13. Children

The app is not directed at children under 16. We do not knowingly collect data from children. If we detect an account held by a minor without valid parental consent, we will delete it.

14. Changes to this policy

We will publish updates at this URL with a revision date. If we make material changes, we will notify you in the app or by email when appropriate.