Privacy
How FitLive handles your data, as the app works today.
Signing in with Google
FitLive accounts use Google sign-in. When you sign in, FitLive receives your Google account identifier, email address and name from Google, and uses them to create and recognise your account. FitLive never sees your Google password.
Your account data
Your hosted workspace saves data in your authenticated account. Workout drafts stay temporarily on this device. No advertising or automatic grocery purchases are included.
Account data includes your profile and consent choices, health summaries, check-ins, workouts, food logs, pantry, meal plans, PACE messages and recommendation history.
AI & PACE
PACE uses Hugging Face as its AI provider, with Cloudflare Workers AI as a backup when Hugging Face is unavailable. Only when you turn on AI consent in App Preferences does your question go to Hugging Face and its inference provider, or to Cloudflare Workers AI when the backup is used, together with your profile — your goals (including any goal you describe in your own words), height, weight and units, diet and dietary preferences, allergies, food dislikes, equipment, training days and favourite exercises — your targets (and whether FitLive estimated them — your year of birth and gender are not sent), a short summary of what you logged recently, and the relevant daily summary, training and nutrition context. With consent off, the rules-based coach answers and nothing is sent to an AI provider.
Revoking consent prevents new AI requests.
Meal photos
Meal-photo analysis sends the photo and your description to Hugging Face only when you tick the consent box for that photo. Hugging Face routes the photo to an inference provider such as Novita, DeepInfra, or Featherless AI. If Hugging Face is unavailable, the same photo and description go to Cloudflare Workers AI instead. If “Keep this photo with the meal” is on when you save, FitLive stores a compressed copy in your account, with location and camera details removed, so it appears in your meal history and Saved Foods on any device you sign in to. It is only accessible through your FitLive account. When no meal or Saved Food uses a stored photo, FitLive marks it for deletion after a short recovery period; Delete all my data removes all of your stored meal photos. With that switch off, the photo is discarded after analysis.
- Photos are resized and re-encoded in your browser before they are sent, which removes location and camera details; the server removes any remaining metadata as well.
- Stored photos are kept in a private Cloudflare R2 bucket (encrypted at rest), with no public access and no public link. Every read checks that the photo belongs to you.
- FitLive does not make stored meal photos public and does not use them to train its own AI models.
- A photo no meal or Saved Food uses is marked for deletion after a short recovery period (10 minutes, so Undo can restore it) and removed at the next cleanup after that.
Food data / USDA
USDA food searches send the search text, not your health history.
Kroger / retailer integration
Kroger product search sends your search words and chosen store to Kroger. Sending items to your Kroger cart sends only the product codes and quantities you approve. Your chosen store stays in this browser.
Analytics
Google Analytics runs on fitlive.net only after you choose “Allow analytics”. Until then — or if you choose “No thanks” — nothing is loaded and no analytics cookies are set. You can change this at any time in Profile › Privacy & Data › Analytics; turning it off also removes the Google Analytics cookies.
With analytics allowed, Google receives only page views (the page path, without query strings, and the title “FitLive”) and seven events with no details attached: signing in, logging a meal, logging a meal from a photo, starting a workout, completing a workout, opening PACE, and five minutes of active use. It never receives meal, food, nutrition, health, recovery, photo or PACE content, your email, account or user IDs, invite codes or tokens. Google Signals and ad personalisation are off.
Export and deletion
You can export your current account data. Delete all my data removes your records, their history and your stored meal photos. Backups held by hosting providers follow those providers’ retention policies, so removal from backups is not instantaneous. Deleting FitLive data does not delete your Google account.
Your choices
- AI consent for PACE, in App Preferences — with it off, nothing is sent to an AI provider.
- A consent box for each meal photo, and “Keep this photo with the meal” for each saved meal.
- Your analytics choice, in Profile › Privacy & Data.
- Export, and Delete all my data, in Profile › Privacy & Data.
Health information
Recovery guidance is a wellness planning aid, not a diagnosis or a validated medical score. FitLive has no advertising and makes no automatic purchases.