Privacy Policy
Fit Void · Last updated: 15 September 2025
1. Data Controller
The Data Controller for your personal data is:
Andrew Blewett
101 High Trees Close, Redditch, Worcestershire, B98 7XL, United Kingdom
Email: andy@theandysocial.website
This policy applies to the Fit Void app on iOS and Android and is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
2. Special Category Data — Health & Fitness
Fit Void processes special category health data as defined by Article 9 UK GDPR, including:
- •Workout logs, sets, reps and weights
- •Body weight and body measurements
- •Meal plans, food logs and nutritional intake
- •Personal records and progression data
All of this data is stored exclusively on your local device in SQLite. It is never uploaded to our servers unless you explicitly link an account for cloud sync. The lawful basis for processing this special category data is your explicit consent under Article 9(2)(a) UK GDPR, given when you first set up the app. You may withdraw consent at any time by deleting your data or uninstalling the app.
Apple Health data (weight, nutrition, workouts) is read from Apple Health only if you tap Connect. We never upload HealthKit data to our servers. It remains under Apple's control via iCloud.
3. Data We Collect and Where It Is Stored
| Category | Examples | Storage | Lawful Basis |
|---|---|---|---|
| Workout & health data (special category) | Sets, reps, weights, routines, PRs, body metrics, meal logs | Local device only (SQLite) — never uploaded unless you link an account | Explicit consent (Art. 9(2)(a)) |
| App preferences | Theme, units, exercise customisations | Local device only | Consent (Art. 6(1)(a)) |
| Account data (optional) | Sign-in code, friend code, username, display name, bio, profile photo | Supabase (EU) — only if you link an account | Contract (Art. 6(1)(b)) |
| Social data (optional) | Posts, comments, friendships, trophies, blocked-user list | Supabase (EU) — only if you link an account | Contract (Art. 6(1)(b)) |
| Apple Health data | Weight, nutrition, workouts | Local device only — never uploaded | Explicit consent (Art. 9(2)(a)) |
We do not collect analytics, advertising IDs, or crash telemetry.
4. How We Use Your Data
- •To run the app (contract): logging, analytics, meal plans, body tracking
- •To provide social features (contract): feed, friends, posts, comments
- •To sync your data across devices (consent): only if you link an account
- •To meet legal obligations: tax records for Void Pro purchases
5. Who Sees Your Data
- •Your posts, profile (name, username, bio, avatar, PBs), and comments are visible to your friends only
- •Your friend code is private — only people you share it with can add you
- •Supabase (cloud host, EU region) stores linked-account data
- •Apple Health data never leaves your device except through iCloud (controlled by Apple, not us)
We do not sell your data. Ever.
6. Data Retention
| Data type | Retention period |
|---|---|
| All local health and workout data | Retained on device until you delete it or uninstall the app |
| Optional account & social data | Kept while your account exists; deleted within 30 days of account removal |
| Backups | Kept for 30 days, then purged |
7. Your Rights Under UK GDPR
- •Right of access — export your data any time from More > Export
- •Right to erasure — delete the app to wipe local data; unlink your account to remove cloud data
- •Right to rectification — edit your profile, workouts, and logs in-app
- •Right to data portability — CSV export of your full history
- •Right to object — stop social features by unlinking your account
- •Right to withdraw consent — withdraw consent for health data processing at any time
To exercise any right, email andy@theandysocial.website. We will respond within one calendar month.
8. Right to Lodge a Complaint
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
9. Age Restrictions
Fit Void is not intended for children under 16. If you believe a child under 16 has an account, contact andy@theandysocial.website.
10. Data Security
- •All health and workout data is stored only on your device and is never transmitted to our servers unless you link an account
- •Optional account data is encrypted in transit using TLS
- •Supabase enforces row-level security ensuring accounts can only access their own data
- •No analytics, no advertising IDs, no crash telemetry
11. Changes to This Policy
We will update this policy when the app changes. The "last updated" date is at the top; material changes will be announced in-app.