Privacy policy
Fit by Insurrect Rebellion ("the app") is operated by 13109267 Canada Inc., 1187 Munro St., Esquimalt, BC, V9A 5P5 ("Insurrect Rebellion", "we", "us"). This policy explains what we collect, why, who processes it for us, how long we keep it, and the choices you have. The app is for adults 18 and over in the United States and Canada.
If you live in Washington, Nevada or another state with a consumer health data law, also read our Consumer Health Data Privacy Policy.
The short version
- We collect what you tell the coach, the profile you set up, and, if you allow it, your step count.
- Your messages and the relevant parts of your records are processed by Google's Vertex AI to generate your coach's replies. Google does not use them to train its models.
- We don't show ads, we don't sell or share your data for advertising, and we don't track you across other apps.
- You can see, edit, export and delete your data from the app at any time.
What we collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, email address, sign-in provider (Apple, Google or email) | You, Apple or Google sign-in |
| Profile and goals | Goal, activity level, height, weight, age (optional), gender (optional), units, time zone, equipment, dietary preferences, allergies, limitations or injuries you mention | You |
| Coaching conversation | Messages you send and the coach's replies; meal photos you attach | You |
| Health and fitness records | Meals and estimated nutrition, workouts, recovery reports (energy, soreness, sleep, pain), body measurements, plans and goals | You, created from your conversation |
| Steps | Daily step count | Apple Health or Health Connect, only if you connect it |
| Coach memory | Preferences and facts the coach saves so it doesn't have to ask again, such as "has a 35 lb kettlebell" | Created from your conversation; you can view, edit and delete them |
| Subscription | Whether your subscription is active, the plan, renewal and expiry dates. We never receive your card details. | Apple App Store or Google Play, through RevenueCat |
| Notifications | Your notification settings, quiet hours and a device push token | You, your device |
| Consent records | Which policy versions you accepted and when | You |
| Technical and usage | Crash reports, app version, device model, and usage events such as "meal logged" (without what you ate) | Your device, through Firebase Crashlytics and Google Analytics for Firebase |
We do not collect precise location, contacts, or your advertising identifier.
How we use it
- To provide the coaching service: understand your messages, keep your log, calculate daily totals, plan your next day, and send reminders you've turned on.
- To run your account and subscription, including checking whether your subscription is active.
- To keep the service working and secure: fix crashes, prevent abuse, and enforce fair-use limits.
- To improve the app using aggregated usage statistics that do not include the content of your messages or records.
- To contact you about your account, for example password resets.
We do not use your information for advertising, and we do not sell it or share it for cross-context behavioural advertising.
AI processing
Your coach's replies, meal photo estimates, daily briefings and plans are generated by Google's Gemini models on Vertex AI. To do this, we send Google your message, any photo you attach, and the parts of your profile, records and coach memory needed for that reply. Google processes this as our service provider in the United States, and under its terms does not use it to train or improve its models.
We ask for your permission for this processing during setup. You can withdraw it in Settings; the coach then stops working, and you keep access to your records, export and account deletion.
AI-generated replies and nutrition estimates can be wrong. Check anything that matters to you, and see our health disclaimer.
Apple Health and Health Connect
If you connect Apple Health (HealthKit) or Health Connect, the app reads your daily step count only. It does not write to them. Step data is used only to show your activity and to inform your coaching. It is never used for advertising, never sold, and never shared with anyone except the service providers listed below who help us run the app.
Who processes your data
| Provider | Purpose | Location |
|---|---|---|
| Google (Firebase, Google Cloud, Vertex AI) | Sign-in, database, file storage, server functions, push notifications, AI processing, crash reports and analytics | United States |
| RevenueCat | Subscription status and receipt validation | United States |
| Apple and Google | App distribution, payments, sign-in (if you choose it), Apple Health or Health Connect (if you connect it) | United States and elsewhere |
| Amazon Web Services (Simple Email Service) | Sending account emails such as password resets | United States |
These providers may only use your information to provide their services to us. We may also disclose information if the law requires it, to protect someone's safety, or as part of a sale or merger of our business, in which case this policy continues to apply.
Where your data is stored
Your data is stored and processed in the United States (Google Cloud region us-central1). If you live in Canada, including Quebec, your information is transferred to and processed in the United States, where it may be accessible to courts and authorities under US law.
How long we keep it
| Data | Kept for |
|---|---|
| Meal photos | 30 days, then deleted automatically |
| Chat messages | 12 months, then deleted automatically (sooner if you delete your chat history) |
| Records, plans, goals and coach memory | Until you delete them or your account |
| Data exports you request | 7 days |
| Notification and usage logs | 90 days |
| Security and audit logs (no message content) | 1 year |
| Backups | 7 days, so deleted data leaves our backups within a week |
Your choices and rights
- See and correct: your records, profile and coach memory are visible and editable in the app.
- Export: Settings, then Export data, gives you a copy of your data in a portable format.
- Delete: delete individual records or memories, your chat history, or your whole account from Settings. See how to delete your account.
- Withdraw consent: turn off AI processing, sensitive memory, Apple Health or Health Connect, or notifications in Settings at any time.
- Notifications: off until you turn them on; you control categories and quiet hours.
Depending on where you live, you may also have the right to know what we hold about you, to get a copy, to correct or delete it, to opt out of certain processing, and to appeal a decision we make about your request. Email privacy@insurrectrebellion.com. We respond within 30 days in Canada and 45 days in the United States, and we won't treat you differently for exercising your rights. If we decline a request, you can appeal by replying to our decision; if you're still not satisfied you can contact your state attorney general or, in Canada, the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.
Person responsible for privacy
Our person responsible for the protection of personal information is [name], [title], reachable at privacy@insurrectrebellion.com or by mail at 1187 Munro St., Esquimalt, BC, V9A 5P5.
Security
Data is encrypted in transit and at rest. Access to your data is limited to your account and to our systems that need it to provide the service; staff access is restricted and logged. No system is perfectly secure, and if a breach affects you we will notify you and the relevant authorities as the law requires.
Children
The app is not for anyone under 18, and we do not knowingly collect information from minors. If you believe a minor has created an account, contact us and we will delete it.
Changes
If we make a material change to this policy, we'll tell you in the app and ask you to review it before the change applies to you. The date at the top shows the latest version.
Contact
13109267 Canada Inc., 1187 Munro St., Esquimalt, BC, V9A 5P5. Email privacy@insurrectrebellion.com.