Your data, plainly.

FitPanda (“we”) runs fitpanda.uk and app.fitpanda.uk. We are the data controller for the personal data you give us. Contact: hello@fitpanda.uk.

FitPanda is a health and fitness app, so most of what you log is health data — a special category under UK GDPR. We only process it with your explicit consent, which you give when you create an account and start logging. That data includes:

• Account basics: email address and login codes (we have no passwords to leak).
• Food diary entries, including photos you choose to upload for AI logging.
• Sleep, workouts, body metrics and daily check-ins you record or sync.
• Messages you exchange with the AI coach, and the coach’s memory notes.
• Alert preferences (e.g. your Telegram chat ID if you connect Telegram).

Meal photos are sent to an AI model solely to estimate the meal’s nutrition, then stored with your diary entry. We never use your data to train AI models and we never sell it. No advertising trackers run on either site.

Your data is stored on our server in the United Kingdom. AI features use cloud AI providers under data-processing agreements; requests are processed to answer you and are not retained by us beyond what the feature needs.

Under UK GDPR you can, at any time:

• Export everything we hold — Settings → Export data, in the app.
• Delete your account and all data — Settings → Delete account. Deletion is immediate and irreversible.
• Withdraw consent by deleting your account, or object / request correction by emailing us.
• Complain to the ICO (ico.org.uk) if you think we’ve handled your data badly.

We keep your data while your account exists and delete it when you delete the account. Transport is encrypted (HTTPS), access is restricted, and we store the minimum we need to run the features you use.

One essential session cookie to keep you signed in to the app. No analytics or third-party marketing cookies.

If this policy changes in a way that matters, we’ll tell you in the app before it takes effect.