Privacy Policy

Last updated: 16 September 2026

This Policy describes what data the Fortera app (“the App”, “we”) processes and how we handle it. By using the App you agree to this Policy.

In short: we collect only what a training tracker needs to work. We do not sell your data, we use no advertising trackers, and we do not pass data to third parties for marketing.

1. What data we process

Account data — your email address and password (the password is stored only as an irreversible hash), plus your public handle and display name.
Training data — exercises, sets, weight, reps, RPE, session timelines, programs and plans.
Body metrics — body weight, measurements, and your nutrition and calorie log, if you enter them.
Menstrual cycle — the period start dates you log yourself and your cycle-length settings, if you turned that mode on. Used only to suggest training guidance. They are not shown to trainers in the App, are never used for advertising and are not shared with third parties — with one exception: if you invoke an AI feature yourself, the request includes your current cycle phase (no dates), see “AI features”.
Progress photos — if you add them; they are stored linked to your account.
Health data (Apple Health / HealthKit) — heart rate, which we read during a workout with your explicit permission in order to attach it to timeline events.
Social activity — follows, posts and likes in the friends feed, and anything you share by link.

2. Apple Health (HealthKit) data

The App may request access to heart rate data through HealthKit. That data is used solely to display and analyse your workouts inside the App. We do not use HealthKit data for advertising, marketing or sale, and we do not pass it to third parties. You can revoke access at any time in iOS system settings.

3. How we use data

to keep your training log and show progress, metrics and personal records;
to sync your data across devices through your account;
to send local workout reminders (scheduled on the device);
to run the social features that you choose to use.

4. Storage and security

Data is stored locally on your device and, if you use an account, on our server (HTTPS connection, database with restricted access). Passwords are stored only in hashed form. We take reasonable technical measures to protect data, but no method of transmission or storage can be absolutely secure.

5. Sharing with third parties

We do not sell or rent your personal data. Data may be processed by our server infrastructure provider solely to host the service. Exercise tutorial videos are embedded from YouTube — YouTube/Google's privacy policy applies while you watch them.

AI features. Program generation, working-weight advice and form check are performed by an external large language model provider — Google (Gemini API). A request is sent there only at the moment you invoke such a feature. It carries what is needed to answer: your exercise history with weights and reps, your training goal and body weight, your current cycle phase (only if you turned that mode on), and — for form check only — the video you recorded yourself. We do not send your email address, handle or progress photos. Data is sent only to process your request and is never used by us for advertising; on Google's side it is handled under the Gemini API terms of service. If you do not use these features, nothing leaves our service.

6. Your rights

request an export of your data (CSV export is available in the App);
request deletion of your account and its data — directly in the app or on request; see the account deletion page;
revoke HealthKit and notification access in your device settings.

7. Children

The App is not intended for children under 13, and we do not knowingly collect their data.

8. Changes

We may update this Policy. Material changes will be reflected in the update date at the top of this page.

9. Contact

For privacy questions and data deletion requests: [email protected].

← Back to home