Fit Nation← Back to home

Legal

Privacy Policy

Stefan Cekov, an individual operator of the Fit Nation Platform ("Fit Nation," "we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the Fit Nation website, mobile application, and related services ("Platform"). By using Fit Nation, you agree to the practices described in this Privacy Policy.

Last updated: August 23, 2026

1.Information We Collect

We collect only the data necessary to provide and improve our services.

a. Personal Information

Creating an account is required to access the Platform's core features. We collect:

  • Name
  • Email address
  • Password (stored as a cryptographic hash — we never store your plaintext password)
  • Partner identifier (used to apply the correct white-label branding)

b. Fitness & Training Data

Providing this data is optional but enables personalised features. Fitness and body-related data may qualify as health data (special category personal data under GDPR). We process such data only with your explicit consent and solely to provide the Platform's core functionality.

By providing such data, you explicitly consent to the processing of your health-related data for the purposes described in this Privacy Policy. This includes:

  • Fitness goal, training experience level
  • Age, gender, height, weight
  • Training days per week, preferred workout duration
  • Workout history and completed sessions
  • Exercise logs, set and rep data, performance metrics

c. Technical & Usage Data

  • Device type and model
  • Operating system and app version
  • IP address (logged by our hosting infrastructure)
  • General usage activity within the app

d. What We Do NOT Collect

  • Payment card, bank account, or other financial account details. If paid features are offered, purchases are processed by the Apple App Store or Google Play; you provide your payment details directly to Apple or Google under their own terms, and those details are never transmitted to or stored by us
  • Precise location data
  • Device contacts or calendar
  • Biometric data (fingerprint, Face ID, etc.)
  • Data from third-party analytics, advertising, or tracking SDKs

2.How We Use Your Information

We use your data to:

  • Provide and operate the Platform
  • Generate personalised workout recommendations using our algorithmic workout generator
  • Track and display your training progress and performance metrics
  • Apply the correct partner branding to your experience
  • Send service-related communications (account verification, password reset, security alerts)
  • Improve Platform features, usability, and reliability
  • Ensure platform security and detect misuse
  • Comply with legal obligations

We do not sell, rent, or trade your personal data.

4.Workout Generator & Data Processing

We do not use artificial intelligence. Workout recommendations on the Platform are produced by a deterministic algorithm that applies a set of rules and logic to the fitness profile data you provide (goal, experience, training days, workout duration).

You acknowledge that:

  • Algorithmically generated workout plans are informational and not prescriptive.
  • Outputs may not be suitable for all users or health conditions.
  • The algorithm does not account for real-time physiological conditions.

Fit Nation does not perform automated decision-making that produces legal or similarly significant effects on you.

5.Data Sharing & Third Parties

We share only the minimum necessary data with the following trusted service providers who act as data processors on our behalf:

  • Amazon Web Services (AWS) — cloud hosting, database, and media file storage located in Frankfurt, Germany
  • Cloudflare — content delivery network and DDoS protection sitting in front of our website and API; processes IP addresses and request metadata for routing and security purposes
  • Sentry — crash reporting and error diagnostics for the mobile app and backend; receives limited diagnostic data such as IP address, authenticated user ID, and request metadata when an error occurs. Sensitive fields (passwords, tokens) are scrubbed automatically
  • Resend — transactional email delivery for verification, password reset, and security notifications; processes email addresses and message content for these purposes only
  • Expo (expo.dev) — over-the-air JavaScript bundle updates for the mobile app
  • Apple App Store / Google Play — app distribution; crash reports and device diagnostics are collected by these platforms under their own privacy policies, not by us

All service providers are required to process data securely and in accordance with applicable data protection laws.

Data Sharing With Partner Gyms

When you select a partner gym during sign-up, that gym's administrators can see only your name, your email address, and the fact that you are a registered member of their gym. They cannot see your fitness profile, workout history, set logs, performance metrics, personal records, or any other training data.

Aggregate analytics — such as the gym-wide member count and percentile rankings displayed within the Platform — are computed server-side without exposing any individual user's data to gym administrators.

We do not use advertising, marketing analytics, or behavioural tracking services. We do not sell personal data.

6.International Data Transfers

Your data is primarily processed on Amazon Web Services infrastructure located in Frankfurt, Germany (AWS eu-central-1 region), which is within the European Economic Area (EEA). EU data protection standards apply to this processing.

For users located outside the EEA, your data may be transferred to and processed in the EEA. By using the Platform, you consent to this transfer. We rely on the adequacy of the EEA's data protection framework and, where required, appropriate safeguards such as Standard Contractual Clauses.

7.Browser Storage & Authentication

Fit Nation uses browser and device storage strictly to keep you signed in:

  • Web app — your authentication token is stored in your browser's localStorage. No third-party tracking cookies are set.
  • Mobile app — your authentication token is stored in expo-secure-store, a secure encrypted storage layer on your device.

We do not use cookies for advertising, analytics, or tracking purposes. No cookie consent banner is shown because no non-essential cookies are set.

8.Data Storage & Security

We implement appropriate technical and organisational measures to protect your data, including:

  • Encrypted connections (TLS/HTTPS) for all data in transit
  • Cryptographic hashing for passwords (we never store plaintext passwords)
  • Access controls limiting who can access production data
  • Secure infrastructure managed by AWS

Crash reports collected by Sentry may include limited diagnostic metadata — such as IP address, authenticated user ID, and request paths — used solely for debugging and stability improvements. Sensitive fields including passwords, authentication tokens, and authorisation headers are scrubbed automatically and never reach Sentry.

While we take reasonable steps to protect your data, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9.Data Retention

We retain personal data:

  • For as long as your account is active
  • For a limited period afterwards, to comply with legal, operational, and security requirements

When your account is deleted, your personal data and training history are permanently removed or anonymised. Certain data may be retained in anonymised, non-identifiable form for aggregate analytics. Some records may be retained where required by law.

10.Your Rights

Under the General Data Protection Regulation (GDPR) and applicable data protection laws, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request correction of inaccurate or incomplete data
  • Deletion — request erasure of your personal data ("right to be forgotten")
  • Restriction — request that we restrict processing of your data
  • Objection — object to processing based on legitimate interests
  • Portability — receive your data in a structured, machine-readable format
  • Withdraw consent — withdraw consent for health-related data processing at any time

To exercise any of these rights, contact us at support@fitnation.mk. We will respond within 30 days.

You also have the right to lodge a complaint with the data protection authority in your country of residence.

11.Account Deletion

You can delete your account at any time from your Profile screen — scroll to the bottom and tap Delete account. You will be asked to confirm your password. Upon deletion:

  • Your name and email address are permanently anonymised so they can no longer be associated with you.
  • Your account record is soft-deleted and cannot be reactivated.
  • Your training data (workout sessions, set logs, exercise history) may be retained in anonymised, non-identifiable form to power aggregate Platform analytics such as gym-wide member counts and percentile rankings.
  • Certain records may be retained for a limited period where required by law.
  • Account deletion is irreversible.

You can also request account deletion by emailing support@fitnation.mk. We will process your request within 30 days.

12.Children's Privacy

Fit Nation is not intended for users under the age of 16 without parental or guardian consent. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without appropriate consent, we will delete it promptly.

If you believe a child has provided us with personal data, please contact us at support@fitnation.mk.

13.Marketing & Communications

We currently send only the following service-related communications:

  • Account verification emails
  • Password reset emails
  • Security-related account notifications

We do not currently send marketing or promotional emails. If we introduce marketing communications in the future, we will only do so with your explicit opt-in consent. You will be able to opt out at any time.

14.Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33. We will notify affected users without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

15.Governing Law

This Privacy Policy is governed by the laws of North Macedonia. Any disputes shall be subject to the exclusive jurisdiction of the courts of North Macedonia, unless otherwise required by applicable consumer protection laws in your country of residence.

16.Data Controller & Contact

The Fit Nation Platform is operated by, and the data controller for personal data processed through it is:

  • Stefan Cekov
  • Skopje, North Macedonia

For any privacy-related questions, requests, or concerns:

17.Acceptance

By using Fit Nation, you confirm that you have read, understood, and agreed to this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Platform.