Privacy Policy

1. Who we are

FitHarness is operated by Gadoci Consulting (“we,” “us”). This policy applies to the FitHarness website and connector. It does not cover Anthropic’s Claude, Google, Stripe, or other third-party services, which have their own privacy policies.

2. Information we collect

• Account — your name and email address from Google sign-in. We request no other Google scopes (no Gmail, Drive, or Calendar).
• Fitness & nutrition data you log — training sessions, programs, conditioning, meals and macros, saved foods, body weigh-ins and metrics, sauna/cold recovery, goals, injuries, and related settings.
• Content you submit — for example, a photo of a meal or a machine, when you choose to send one for the app to interpret.
• Usage & diagnostic data — basic logs of feature use and AI calls, used for reliability, security, and rate limiting.
• Billing data — handled by Stripe. We store a Stripe customer ID and your subscription status and period; we do not receive or store your full card number.

3. How we use your information

• to provide and operate the Service — storing your record and computing analytics and visualizations;
• to run the features you invoke, including AI-assisted ones (see below);
• to process your subscription and payments (through Stripe);
• to maintain security, prevent abuse, and enforce usage limits;
• to send essential service communications and respond to your requests.

We do not use your data for advertising, and we do not sell it.

4. AI processing

There are two ways your data reaches Anthropic’s AI, both under Anthropic’s own terms and privacy policy:

• Your Claude connector. When you add FitHarness as a connector in Claude, Claude accesses your data to read and write it on your instruction. That is your own relationship with Anthropic.
• Server-side AI features. For certain features — such as estimating macros from a meal photo, or generating a training program — we send the relevant input to Anthropic’s API to return a result. We send only what the feature needs.

5. Service providers

We share data only with providers that help us run the Service:

• Google — sign-in;
• Anthropic — AI processing for the features above;
• Stripe — subscription billing and payment processing;
• Vercel — application hosting;
• MongoDB Atlas — database storage.

These providers process data on our behalf to deliver the Service. We may also disclose information if required by law.

6. Cookies

We use a single essential, sign-in cookie to keep you logged in (HTTP-only). We do not use advertising or cross-site tracking cookies.

7. Your controls

You can export all of your data as a single file, or permanently delete your account, at any time from Settings — no request needed. Deletion removes the records the app holds for you (canceling any active subscription); anything you already exported remains yours. You may also disconnect the connector in Claude at any time.

8. Data retention

We keep your data for as long as your account is active, and delete it when you delete your account, except where we must retain limited records to comply with law (for example, payment records held by Stripe).

9. Security

Accounts are isolated so your connector reaches only your own data. We use reasonable technical and organizational measures to protect your information. No system is perfectly secure, and we cannot guarantee absolute security.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children.

11. International processing

Our providers may process and store data in the United States and other countries. By using the Service, you understand your data may be processed in these locations.

12. Changes

We may update this policy; the “Last updated” date reflects the latest version. Material changes will be given additional notice where appropriate.

13. Contact

Questions or requests about your data? Reach us through gadociconsulting.com.