Privacy Policy

Fitulse is operated by Gor Geghamyan, an individual based in Armenia ("we," "us"), who is responsible for your personal data. This Privacy Policy explains what information we collect when you use our website and dashboard, how we use it, and who we share it with. It covers our three products: the free calculators ("Tools"), the AI-generated plans ("AI Hubs"), and trainer-led groups ("Rooms").

When you create an account, we collect your email address and display name through Firebase Authentication, and we record the date and time you accepted the Terms of Service and this Privacy Policy and confirmed that you meet the minimum age for the country you chose (we keep that country with your confirmation), and we keep your answer about Google Analytics (yes or no) and when you gave it. Optional profile fields (bio, photo) are stored in our database. If you use a calculator, we store the inputs you enter (e.g. height, weight, activity level) and the result. If you use an AI Hub, we store your answers and the generated plan. If you join a Room, we store your membership status and any progress or check-in data the Room requires. If you are a trainer, we additionally store your public profile (headline, bio, photo, video and social links) and the Rooms and curriculum you create. While registration is closed you can join our waitlist: we then store your email address, whether you joined as a member or a trainer, the language of the page and the date, with your consent, and use them only to tell you when registration opens. We keep them until registration has opened and we have written to you, or until you ask us to remove them at hi@fitulse.com. You can withdraw your consent at any time.

Fitulse stores small pieces of information on your device. Some are strictly necessary and always on. Others are optional.

Strictly necessary (always on, no consent needed):

• your sign-in session (Firebase Authentication, kept in your browser's storage);
• your language choice (a cookie named fitulse-lang, kept for one year);
• your light or dark theme (fitulse-theme);
• the state of the dashboard menu (fitulse-sidebar-collapsed and fitulse-sidebar-ai-tools-open);
• your cookie choice itself (fitulse-cookie-consent) and, for one browser session, the country found by the lookup described below (fitulse-country).

They keep the site working and remember your settings. They are not used to track you.

Analytics (optional): the Google Analytics cookies named _ga and _ga_ followed by our measurement ID. See section 4.

We do not use advertising cookies and we do not build cross-site advertising profiles.

Your choice. If you are in the European Economic Area, the United Kingdom or Switzerland, we ask before any analytics runs: a banner offers Accept all, Reject all and Settings, and nothing analytics-related starts until you accept. Everywhere else we show a short notice and analytics is on, and you can turn it off at any time. In every region you can change your mind with "Cookie settings" at the bottom of the website, or with the shield button in the corner of the screen. You can also allow Google Analytics with the optional box when you create an account, or in Profile under Privacy. That is a new, specific choice, so it replaces what you chose in the banner on that device. Your choice is saved on your device and, when you are signed in, on your account, so a device where you have not answered follows it. Clearing your browser data removes the device copy, and we will ask again.

How we tell where you are. To decide whether to ask first, your browser looks up your country from your IP address using a third-party service (get.geojs.io, or ipwho.is if that fails), once per browser session. We do not receive or store the result. If the lookup fails, we use your device's time zone, and if that is also unknown we treat you as someone who must give consent first.

We use Google Analytics 4, a service of Google, to understand in aggregate how Fitulse is used: for example which pages are visited, which device and browser are used, roughly where visitors are located and how they found the site. We use it to fix problems and improve the product.

It runs only as described in section 3: after you accept if you are in the European Economic Area, the United Kingdom or Switzerland, and by default elsewhere until you turn it off. We use Google Consent Mode, so Google's tags stay switched off, and no analytics cookies are set, until you allow them.

We send page views only. We do not send the answers you enter into calculators or AI Hubs, or your account details, to analytics. We do not use Google Analytics for advertising, we do not turn on Google's advertising features, and we do not sell your data. Google processes this data on our behalf and under its own terms.

Anonymous usage counters. Separately from Google Analytics, we may keep simple counters of how often each area of the dashboard is opened, for example the Tools page or one calculator. A counter is just a number per area per day. It is not linked to your account, your device or your IP address, it uses no cookies or other storage on your device, and it contains no personal data, so it does not depend on your cookie choice. We switch these counters on and off ourselves.

Subscriptions and payments are processed by Paddle, our merchant of record. We do not store your full card number. Paddle shares payment status and subscription events with us (via webhook) so we can grant or remove access to AI Hubs, Rooms, and other paid packages. Room prices are set individually by each trainer; AI Hub and platform package prices are set by Fitulse.

AI Hubs (Diet & Nutrition, Workout Plan, Sleep Optimization, Stress & Resilience) generate your plan using Google's Gemini model. The answers you submit for an AI Hub are sent to Google to generate your plan. We do not use this data to train our own models, and Gemini plans are a starting point, not medical, nutritional, or professional advice.

• Firebase (Authentication and database) — Google
• Paddle — subscription billing and payment processing
• Google Gemini — AI Hub plan generation
• Google Analytics — website usage statistics, only as described in sections 3 and 4
• Google reCAPTCHA (through Firebase App Check) — protects sign-up and the app from automated abuse
• get.geojs.io and ipwho.is — country lookup from your IP address, run in your browser, to decide whether to ask for cookie consent first (section 3) and to pre-fill your country on the sign-up form

You can request a copy of your data, correct it, or ask us to delete your account and associated data by contacting us at hi@fitulse.com. We retain account data for as long as your account is active, and for a limited period afterward as required for legal, billing, or security purposes. Depending on where you live, you may have additional rights under applicable law (e.g. GDPR, CCPA).

Fitulse is not directed at children below the minimum age shown at sign-up (16 unless a different age applies in their country), and we do not knowingly collect personal information from them.

We rely on Firebase's access-control rules to restrict who can read or write each piece of data, and Paddle's PCI-compliant infrastructure to handle payment details. To limit automated sign-ups we keep, for up to two days, a keyed one-way hash of the IP address a sign-up came from together with the number of sign-ups from it. The address itself is not stored, and the hash is not linked to your account. No system is perfectly secure, and we can't guarantee absolute security.

We may update this policy from time to time. We'll update the date below when we do. Last updated: [EFFECTIVE_DATE].

Questions about this policy? Contact us at hi@fitulse.com.