FitKit Pro — Privacy Policy
FitKit Pro is a fitness timing-tools app — Metronome, Tempo, Tabata, Timer, EMOM, and Playlist. We designed it to need as little of your information as possible. We do not require a FitKit account, and we do not use advertising or cross-app tracking of any kind. Most app data — your timer settings, playlists, and workout history — stays on your device. If you enable Playlist iCloud Sync, Sync Videos & Photos, Playlist Goal Scheduling reminders, or Save to Health, limited data is sent or written off the app as described below.
HIPAA notice
FitKit Pro is designed to minimize collection of personal information. We do not require a FitKit account, do not collect customer names or contacts, and do not intentionally collect medical record numbers, diagnoses, or other medical information. However, FitKit Pro is not offered as a HIPAA-compliant electronic health record, care-management platform, or protected health information system, and we do not enter into Business Associate Agreements for use of the app. Do not enter patient names, medical record numbers, diagnoses, or other protected health information (PHI) into playlist names, notes, videos, photos, reminders, or other app fields if your use requires HIPAA-regulated handling.
Summary
- We don’t collect personal information such as your name, email, or contacts.
- FitKit Pro is designed to minimize personal information collection, but it is not intended for storing or transmitting HIPAA-regulated protected health information.
- Your timer settings, saved playlists, and workout history (used by the Insights tab) are stored on your device using SwiftData. If you enable Playlist iCloud Sync, synced playlist structure and settings are also stored in your own private iCloud database.
- Playlist exercise videos and photos are encrypted on your device (AES-256-GCM). They leave your device only if you turn on Sync Videos & Photos or choose to share a playlist via AirDrop, the Share Sheet, or a QR code.
- If you turn on Playlist Goal Scheduling reminders, FitKit Pro sends our AWS backend an anonymous device identifier, the playlist’s ID and name, step count, and the reminder time, so it can trigger a push notification and, if enabled, a Dynamic Island Live Activity at the right time.
- Push notifications are delivered by OneSignal. Subscription purchases are processed by Apple and validated by RevenueCat.
- If you turn on Save to Health in Settings, FitKit Pro writes a workout entry (activity type and start/end time) to Apple Health after you finish a session. It never reads any Health data, and the toggle is off by default.
- FitKit Pro declares a location (when-in-use) permission only because the OneSignal SDK requests it internally. None of FitKit Pro’s timing tools use your location for anything.
- Apple Watch sync (settings and playlists) happens directly between your iPhone and paired Watch and does not pass through our servers.
- Optional Playlist iCloud Sync and optional Videos & Photos sync use Apple CloudKit and your Apple Account’s private iCloud database; they do not use our servers.
- There are no ads and no advertising or cross-app tracking SDKs in the app.
Information the app uses
Camera & Photo Library. The camera is used to record exercise demonstration videos for a playlist step and to scan QR codes for importing a shared playlist. The photo library is used to pick an image containing a playlist QR code, or to import an existing video or photo as a playlist step attachment. These items stay on your device, encrypted, unless you turn on Sync Videos & Photos or explicitly share that playlist.
Local Network & Bluetooth. FitKit Pro uses the local network and, when Wi-Fi isn’t available, Bluetooth, to help discover nearby devices when sharing a Timing Tool Playlist. No playlist content is sent anywhere unless you initiate a share.
Calendars. With permission, FitKit Pro checks your on-device Calendar for free/busy availability so Playlist Goal Scheduling can suggest reminder times when you’re likely to be free. Event titles, notes, locations, and attendees are read on-device only to compute availability — they are never sent off your device.
Reminders. If you use Goal Scheduling, FitKit Pro can create entries in a “FitKit Pro” Reminders list so scheduled workouts show up alongside your other tasks. This uses Apple’s Reminders (EventKit) integration on your device; any iCloud sync of your Reminders is handled by Apple under your own Apple ID, not by us.
HealthKit. FitKit Pro requests HealthKit access to keep timing tools running reliably in the background while you exercise. If you separately turn on Save to Health in Settings, completed sessions are saved to Health as a workout (activity type, start time, end time, and a brand/tool name tag) using Apple’s HKWorkoutBuilder. FitKit Pro only ever requests to write workouts — it does not request or read any Health data such as heart rate, steps, or other metrics.
Location. FitKit Pro’s Info.plist declares a when-in-use location permission whose system description reads “Used by OneSignal for Push Notifications” — this exists only to satisfy the OneSignal push SDK and is not used by any timing tool, playlist, or reminder feature. You do not need to grant it for the app to work.
Workout history & Insights. Completed sessions, streaks, and frequency-goal progress shown in the Insights tab are stored locally on your device using SwiftData. This history is not uploaded to our servers.
Playlist iCloud Sync. If you turn on Playlist iCloud Sync, FitKit Pro stores synced playlist structure and settings in your private iCloud database using Apple CloudKit. This includes playlist IDs, names, step order, timing settings, circuit structure, sync status, modification dates, and delete markers needed to keep devices consistent. If you also turn on Sync Videos & Photos, encrypted playlist step videos and photos are stored in your private iCloud database as CloudKit assets so they can sync to your other devices. Workout history, schedules, reminder identifiers, and Insights data are not included in Playlist iCloud Sync.
Apple Watch sync. If you use the FitKit Watch app, your settings and saved playlists are synced between your iPhone and paired Apple Watch directly over Apple’s WatchConnectivity framework. This sync happens device-to-device and is not routed through our backend.
Playlist Goal Scheduling reminders
Playlists can carry a frequency goal (times per day, times per week, or every few days). If you enable backend-assisted reminders for a goal, FitKit Pro sends our AWS backend the data needed to schedule a push notification and, if enabled, a Dynamic Island Live Activity countdown: an anonymous device identifier (a random ID such as fitkit-<UUID> generated on your device, used to log in to OneSignal and never tied to your name or Apple ID), the playlist’s internal ID, its user-visible name and step count, the scheduled reminder time, and the pre-built notification text. Canceling a reminder sends the same schedule and device identifiers so the backend can remove it. This data is used only to schedule, update, and cancel your own reminders, and is retained only while a reminder is pending or its Live Activity is active.
Push notification delivery (OneSignal)
Push notifications — including Goal Scheduling reminders — are delivered through OneSignal, a third-party push service. OneSignal receives a push token, standard delivery metadata, the notification payload, and basic tags such as platform. It does not receive your playlist videos, workout history, or Calendar data. See the OneSignal privacy policy.
Subscriptions (RevenueCat)
FitKit Pro purchases (monthly, annual, or lifetime) are handled by Apple’s in-app purchase system. The app uses RevenueCat to validate receipts, restore purchases, and check whether your subscription entitlement is active. RevenueCat receives the purchase and entitlement data needed to provide that service. See the RevenueCat privacy policy.
Information sent off device
- OneSignal — delivers push notifications and, for Goal Scheduling, Dynamic Island Live Activity updates. Receives a push token, the anonymous device identifier, delivery metadata, and notification content as described above.
- RevenueCat — validates in-app purchases and subscription entitlements. See the RevenueCat privacy policy.
- Our AWS backend — schedules and cancels opted-in Playlist Goal Scheduling reminders using the limited data described above. It is operated by Schumacher PT & Performance LLC and is separate from OneSignal and RevenueCat.
- Apple — processes in-app purchases (StoreKit), stores optional Playlist iCloud Sync data and optional encrypted playlist media sync data in your private iCloud database, and syncs any Reminders you create through your own iCloud account. Governed by Apple’s Privacy Policy.
We do not control, and are not responsible for, the independent data practices of these third-party services; please review their policies.
What we do not do
- We do not require an account or collect your name, email, contacts, or address book.
- We do not read any data from Apple Health — only write a workout entry when you enable Save to Health.
- We do not store your playlist videos, photos, Calendar data, or workout history on our servers.
- We do not sell or share your information.
- We do not use advertising, ad networks, or cross-app/cross-site tracking technologies. Aside from OneSignal’s standard push-delivery data and RevenueCat’s purchase validation, we do not use analytics or crash-tracking SDKs.
- We do not track you across apps or websites.
Data retention and your choices
- On-device data: Your playlists, timer settings, encrypted exercise videos/photos, and workout history remain on your device until you change or delete them within the app, or delete the app.
- Playlist iCloud Sync data: If enabled, synced playlist structure, settings, and any opted-in encrypted video/photo media remain in your private iCloud database until you delete them from the app, disable sync for individual playlists, or turn off media sync for future media changes. Deleting a synced playlist on one device deletes it from other synced devices.
- Backend reminder data: If you enable Playlist Goal Scheduling reminders, limited schedule data remains on our backend only while that reminder is pending or its Live Activity is active. Turning off a goal’s reminders, deleting the playlist, or losing network connectivity before the reminder fires causes the app to cancel that backend record.
- Health data: Workout entries written to Apple Health are stored by Apple and managed the same way as any other Health data — you can review or delete them in the Health app at any time.
- Permissions: You can grant or revoke camera, photo library, Calendar, Reminders, Health, and notification access at any time in iOS Settings.
- Deletion: Deleting FitKit Pro removes all locally stored data associated with the app.
Children’s privacy
FitKit Pro is a general-audience app and is not directed to children under 13. We do not knowingly collect personal information from children.
International users
Our AWS backend, OneSignal, RevenueCat, and Apple’s services may process requests on servers located in the United States or elsewhere. By using features that rely on these services, you understand that the limited data described above is transmitted to them to fulfill your request.
Changes to this policy
We may update this policy from time to time. Material changes will be posted here with an updated effective date.
Contact
Questions about this policy? Contact Schumacher PT & Performance LLC at support@SchumacherPT.com.