Privacy policy
Last updated 6 November 2026
In short: your training is stored on your phone. PrettyFit sends nothing to us or anyone else until you share with friends, ask an AI, use the Garmin watch or ask for a running route. The exception is Android's own backup, which you control in the phone's settings.
Who is responsible
PrettyFit is made by Frode, who is the controller for the data that passes through the services the app uses. A contact address will be added to this page soon.
What stays on your phone
Workouts, sets, weights, runs with heart rate, programs, body weight, notes and settings are stored in a database on your phone. PrettyFit has no account, no analytics, no ads and no tracking.
Backup: If Android backup is turned on, Android includes the app data in the backup to your Google account, as for other apps. The AI connection key is left out. You can turn backup off in the phone's settings.
Friends and sharing (Google Firebase)
Only when you open Venner (Friends) does the app sign in anonymously with Google Firebase. Before that it has no contact with Firebase. The following is stored in Firestore:
| What | Who can see it |
|---|---|
| An anonymous user ID | No one else. No email or phone number. |
| The name you enter and your friend code | Anyone who has your friend code, and your friends. |
| Friend requests and your friends list, with names and times | You and the other person. Declined requests are kept. |
| Programs you send: name, exercises, sets, reps, rest, progression rules, run plans, and your working weights if you include them, plus your name, the time and who you sent it to | The friends you send it to. Revoking hides the program from those who have not added it. Programs already added stay with them. Deleted from Firebase after a week. |
| New records, only if you turn on «Fortell vennene mine om nye rekorder» (Tell my friends about new records, off by default): the exercise name and estimated 1RM, plus your name and the time | Your friends, as a notification when you finish a workout with a new record. Deleted from Firebase once the notification is sent. Bodyweight exercises are not sent. |
| Notification token (Firebase Cloud Messaging) | No one else. Used to notify you. The notification shows the sender's name and the program name, or the name and the record. |
Your training history is never shared with friends, only your records if you turn that on. The Firestore data is stored in the EU. Sign-in and notifications go through Google's global services, which may involve transfers to countries outside the EEA, such as the United States.
AI
Through the share sheet: PrettyFit builds a message with your training, and you choose which AI app to share it with (for example ChatGPT, Claude or Gemini). That app's privacy policy applies.
With a connected account (OpenRouter): When you tap «Spør» (Ask) or send a follow-up, the message goes straight from your phone to OpenRouter, which passes it to the model you picked. That model may run at Anthropic, OpenAI, Google or a cloud provider they use, often in the United States. PrettyFit runs no server of its own for this.
You choose what the message contains: programs, strength workouts, records, runs with average heart rate, body weight and notes. Heart rate is health data, and it is only included if «Løpeturer» (Runs) is on. Your name, friend code, GPS tracks and watch ID are never sent. The OpenRouter key is stored encrypted on your phone and is left out of backups. See also OpenRouter's privacy policy.
Garmin watch
The phone and the watch talk through the Garmin Connect app. Workouts you record on the watch, both strength and runs, are saved to your Garmin Connect account with heart rate, and with GPS for runs. Garmin's privacy policy applies there.
When you run with Garmin's own run app, the watch app reads the run's start, duration, distance and the heart rate and altitude history for it on the watch, and sends that to PrettyFit on your phone. It goes to nobody else.
Health Connect
If you turn on «Løp fra Health Connect» in Settings, the app reads runs that Garmin Connect and other apps have stored in Health Connect: time, distance, heart rate, speed, cadence, elevation gain, calories and the route when Health Connect provides it. The data is stored only on the phone, like other training in the app. The app writes nothing to Health Connect and shares the data with nobody. You can turn it off at any time and revoke access in Health Connect.
Exercise photos
The photos in the exercise library are fetched from this website (Cloudflare) the first time they appear in the app, then kept on the phone. The request only says which photo is needed. As with any website, Cloudflare sees your IP address. We keep no log of who fetches what. The photos come from free-exercise-db and are released for free use.
Permissions
The phone uses notifications, vibration, internet and a foreground service that keeps the rest timer and the watch link running during a workout. With «Løp fra Health Connect» on, it reads runs from Health Connect. The watch app uses GPS, heart rate, activity recording, communication with the phone, the activity history and the heart rate and altitude history on the watch, and a background task that looks for new runs.
Running routes
When you ask for a running route, the phone reads your position and works out the routes itself. The position is not sent anywhere and is not stored. The first time in an area the app fetches a map file from brouter.de, which sees your IP address and which 5 by 5 degree squares are fetched. Near an edge two or four are fetched, which says a little more about where you are. If you tap «Open in Google Maps», points along the route are sent to Google. The map in the app comes from Google, which sees the area the map shows.
Sights: When you are far from where you usually run, the app offers a switch for sights. It is off by default, and nothing is sent until you turn it on. The phone then asks Wikipedia (Wikimedia Foundation, with servers in the USA among other places) for sights in the area. Wikipedia sees your IP address and an area around you, with its centre rounded to about 2 km and a radius of 5 to 10 km, but not your exact position. The answer is kept on the phone for 30 days, so the same area is not sent again. Tapping a sight opens its page on Wikipedia in the browser. See Wikimedia's privacy policy. To tell whether you are far away, the app compares on the phone with the GPS points from your runs. That is not sent anywhere.
Route from an address: If you search for an address, what you typed goes to the phone's address service, which on most Android phones is Google, when you press Search. The address is kept only on the phone, with the route if you save it. Routes you save stay on the phone until you delete them.
Sharing routes: If you send a route to a friend, the route, the sights and the name are stored in Firebase in the same way as a shared program, and deleted after a week. The address you searched for is not included, but the route shows where it starts. If it starts at your home, your friend can see where you live. With a link or QR code the route goes straight to the person you give it to, not through us.
Legal basis and retention
We process the data to provide the features you choose to use (sharing, notifications and AI). The legal basis is our agreement with you as a user, and consent where you turn something on, such as heart rate for the AI. Records are deleted from Firebase once the notification is sent, and shared programs after a week. Your name, friend code and friends list are kept until you ask for them to be deleted. Data on the phone is kept until you delete it.
Your rights
You can ask for access to, correction of and deletion of your data in Firebase, and object to the processing. Give us your friend code so we find the right user. You can also complain to the Norwegian Data Protection Authority, Datatilsynet.
Deletion
«Slett alle data» (Delete all data) in Settings deletes workouts, history, programs, body measurements, settings and the AI connection on the phone. So does uninstalling. Friends and shares in Firebase are not deleted by the button. Contact us and we will delete them.
Children
PrettyFit is not made for children under 13.
Changes
If we change this policy, we update the date at the top.