Your data.
Your choice.

Records on your device

The connected app stores your optional name, movement preferences, equipment, experience, goals and restrictions, and up to 120 session/outside-activity records. Records can include check-ins, movement IDs, effort, reflection, active duration and planner source. A saved workout checkpoint can resume paused within 24 hours; finishing or discarding removes it.

AI consent and reminder preferences are stored locally. Android account credentials and the sign-in email shown to you use SecureStore; web-preview tester access uses tab storage. Ordinary fitness records are not medical-record storage. History is not cloud-synced; uninstall, device loss or storage failure may erase it. Device backup settings may preserve copies outside our control.

Optional Google account

Google sign-in sends a temporary identity proof to our Cloudflare backend. The backend verifies it and stores a hashed Google account reference, a random Today Fit account ID, creation time, hashed service credentials and session expiry. It does not persist your Google token, name or email. Your email is kept on your device for display. Service sessions last up to 30 days; sign-out revokes that device's session.

This account lets subscriptions and claimed passes follow you across devices. Signing in does not upload your workout history. Basic public service configuration is fetched when you open connected screens; network providers process connection metadata.

Optional AI planning

After separate explicit consent, selected preferences, equipment, experience, goals, restrictions, today's check-in and a seven-day activity summary are sent through Cloudflare to OpenAI. The summary includes movement counts, minutes, recent exercise IDs and aggregate condition/effort signals. Name, raw history and exact activity timestamps are excluded. These are still wellness-related data, not anonymous data.

Pain check-ins and in-session changes are handled locally. The backend validates AI exercise selection against the app's catalogue and does not intentionally log or persist workout request/response content. OpenAI requests use store:false, which is not a zero-retention guarantee. Provider abuse-monitoring and other processing may retain data. See OpenAI data controls. Turning AI off stops future requests, not processing that has already occurred.

Plus, gifts and usage controls

RevenueCat and Google Play process the random account ID, purchase/subscription information, device/app information and connection metadata for billing, restoration, entitlement checks and operational analytics. Fitness answers are not billing attributes; we do not receive payment-card details.

Gift and judge codes are stored as hashes with eligibility, ownership, redemption deadlines and expiry. Raw codes are not persisted on the server. Gift access depends on the giver's qualifying paid membership. Anonymized purchase hashes prevent duplicate gifts. Complimentary codes are not purchases.

Cloudflare stores account-wide usage and abuse counters. Login abuse limits use a daily hash of the connection IP. Daily counters expire within two days and monthly counters early the following month; cleanup occurs on later service use, not an immediate scheduled purge. Expired sessions are rejected and cleaned on later sign-in. Account records remain until deletion; provider backups may have separate retention.

Optional reminders

After opt-in, OneSignal and Google's push service process push tokens, device/app and connection information, engagement, time zone, and your selected reminder window/cadence. Only reminder opt-in/window/cadence are application tags; name, fitness answers, history and billing identity are not sent to OneSignal.

Notification permission is requested when you enable reminders. Campaign delivery requires messaging configuration. Opting out stops future messaging subject to provider processing, but does not erase previously processed records. OneSignal privacy · RevenueCat privacy.

Choices and deletion

• Use free workouts without signing in, AI or reminders.
• Turn AI and reminders off independently under You.
• Delete local profile, workout checkpoint and history through You → Delete my local data. Account access remains separately recoverable.
• Sign out or delete your Today Fit account under Data controls. Google verification protects account deletion. All service sessions and individual quota counters are removed; passes and outgoing gifts are revoked. RevenueCat customer deletion is requested when billing is configured, with retries if unavailable.
• Use our deletion-request page without the app, or the online Google-verification page linked in connected builds. Contact support for provider-held data requests.

Account deletion does not cancel Google Play subscriptions, delete your Google account, erase independent device-local workouts or automatically remove anonymous notification-provider records. Aggregate abuse counters, non-reusable code hashes, one-way gift-purchase hashes, legally required transaction records and provider backups may remain. We explain applicable exceptions when handling requests.

Safety and age

Today Fit is for adults aged 18 and over. Content and simplified exercise sketches are AI-authored and not professionally reviewed. This is general wellness information, not a medical device, diagnosis, treatment, rehabilitation or professional exercise prescription. Stop if you feel pain or unwell; seek qualified advice when needed.

We do not sell personal information or display advertising. The app does not request Health Connect, location, advertising-ID, camera, microphone, contacts or body-sensor access. Billing and notification providers have operational analytics; this is not a claim of no third-party processing.

Questions and changes

Email krishnagaarg@gmail.com for access, correction or deletion requests. Do not email passwords, access tokens or unnecessary health details. Support email and external links follow the destination provider's practices. We update this policy before materially changing data use.