Privacy Policy

1. Important Disclaimer

Fitstar AI provides educational and research-based information only. The App does not provide medical advice, diagnosis, or treatment. Any protocols or suggestions generated by the App are intended for informational purposes and should be reviewed with a qualified healthcare professional.

2. Information We Collect

a. Personal Information

We may collect:

• Email address (required)
• Date of birth (required)

b. Health & Wellness Information

We collect user-provided data, including:

• Weight
• Fitness or health goals
• Biomarkers (if provided)
• Peptide usage and tracking data

⚠️ This information may be considered sensitive under certain laws.

c. Device & Technical Data

• Device type
• Operating system
• App usage data
• IP address (via analytics tools)

d. Usage Data

• Interactions with the App
• AI chat inputs
• Feature usage patterns

3. How We Use Your Information

We use your information to:

• Provide personalized peptide protocol suggestions
• Enable tracking and scheduling features
• Improve app performance and user experience
• Analyze usage trends
• Send notifications and updates (if enabled)

4. AI Processing

Fitstar AI uses third-party AI services, including OpenAI, to generate personalized suggestions based on your inputs.

• Your data may be processed by these services
• We do not use your data to train AI models

5. Sharing of Information

We do not sell your personal data.

We may share data with service providers:

• Analytics: PostHog
• Payments: Superwall / Apple Pay
• Hosting: AWS CloudFront
• AI processing: OpenAI

These providers only process data as necessary to provide their services.

6. Payments

Subscriptions are processed through Apple Pay. We do not store your payment information.

7. Data Retention

We retain your data only as long as necessary to:

• Provide the App
• Comply with legal obligations
• Resolve disputes

8. Your Rights (U.S. Privacy Rights)

Depending on your location (e.g., California under CCPA/CPRA), you may have the right to:

• Access your personal data
• Request deletion of your data
• Correct inaccurate data
• Opt out of certain data processing

You can exercise these rights by contacting us (see Section 15).

9. Account & Data Deletion

You may:

• Delete your account within the App
• Request full data deletion

10. Data Security

We use commercially reasonable safeguards to protect your data. However, no system is completely secure.

11. Age Restrictions

Fitstar AI is intended for users 18 years or older. We do not knowingly collect data from minors.

12. Notifications & Marketing

We may send:

• Push notifications
• Service-related updates

You can:

• Disable notifications in your device settings
• Opt out at any time

13. International Data Transfers

Although operated by a Romanian company, the App is intended for U.S. users. Your data may be processed in multiple countries, including the United States.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted within the App.

15. Contact Us

For privacy-related requests, contact:

Amplified Software International S.R.L.
Bloc L2, Strada Silvestru 1
Etaj M, 700090 Iași
Email: privacy@amplified.software

16. Legal & Medical Disclaimer

• The App is for research and educational purposes only
• Many peptides discussed are not FDA-approved
• Users are responsible for their own decisions
• Always consult a licensed healthcare provider before use

17. Google Calendar Integration (Clinician Services)

When a licensed clinician or nurse connects Google Calendar to the Fitstar clinician scheduling application ("Fitstar"), Fitstar accesses certain Google user data only with that user’s consent.

a. Google user data we access

• Google account email address — to identify the connected account and display it in the Fitstar scheduling settings.
• Google Calendar list (calendar names, IDs, and display metadata) — so the clinician can choose which calendar receives synced appointments.
• Google Calendar events that Fitstar creates, updates, or deletes — only for scheduled Fitstar nurse-call appointments the clinician chooses to sync; we do not read unrelated events on your calendar for advertising or analytics.

b. How we use Google user data

We use Google user data solely to provide and improve the Google Calendar sync feature visible in the Fitstar scheduling interface: creating, updating, and removing appointment events when appointments are booked, changed, cancelled, or redistributed in Fitstar. We do not use Google user data for advertising, interest-based advertising, retargeting, creditworthiness, lending, or to build databases for unrelated purposes.

c. Storage, security, and sharing

Google OAuth tokens are stored encrypted on servers operated by our hosting providers (including Amazon Web Services). We do not sell Google user data. We do not share Google user data with third parties except: (a) as necessary for Google to provide the Calendar API; (b) our infrastructure providers that process data on our behalf under contract and only to operate Fitstar; or (c) when required by law. We do not transfer Google user data to advertising platforms, data brokers, or information resellers.

d. Retention and deletion

We retain Google OAuth tokens and sync metadata while your Google Calendar connection is active. You may disconnect Google Calendar in Fitstar scheduling settings; upon disconnect we revoke access and delete stored tokens and, if you choose, remove Fitstar-created events from your Google Calendar. You may also revoke Fitstar’s access at any time from your Google Account (myaccount.google.com/permissions). To request deletion of associated Fitstar account data, contact us (Section 15).

e. Google API Services Limited Use disclosure

Fitstar’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models. Human access to Google user data is limited to security, support, and legal compliance, and only with appropriate authorization.