Privacy policy

1. Who we are

Fitxtractor is operated by Purpose Built Software. It pulls your health and fitness data out of the services that collect it and keeps it in one place that you control. This policy says what we store, where it goes, and how to get it removed.

2. What we store

• Your account: first and last name, email address, a hashed password, and, if you enter them, birth date, sex, and height. Height, sex, and age go into estimates such as VO2 max.
• Health and fitness data imported from the sources you connect: Fitbit, Oura Ring, Apple Health, Hevy, and RENPHO. Depending on the source this covers heart rate, steps, sleep, HRV, SpO2, readiness, weight and body composition, workouts and sets, and similar measurements.
• Credentials for those sources. Fitbit and Oura issue OAuth tokens. Hevy issues an API key. RENPHO has no OAuth, so connecting it stores the RENPHO email and password you type, which we use to sign in to RENPHO on your behalf.
• Files you upload, such as an Apple Health export.
• If you pair the Telegram bot: your Telegram chat ID, the photos of gym consoles you send it, and the numbers read from them.
• API tokens you create on the settings page.
• Server logs: IP address, browser, and pages requested, kept for security and debugging.

3. What we do with it

We fetch your data from the connected sources on a schedule, store it, and show it back to you in the dashboard and through the API. We do not sell it, share it with advertisers, or use it for anything other than running the service for you.

4. Who else handles it

• The sources you connect. Each sends us your data under its own terms and privacy policy, and each lets you revoke our access from your account there.
• Anthropic. A gym console photo sent through the Telegram bot goes to Anthropic's API, which reads the digits off the display. Anthropic processes it under its own API terms.
• Telegram, which carries the bot's messages and photos.
• The hosting provider for the server the application and its databases run on.

5. Where it lives and how it is protected

Everything is stored on a single server we administer: relational data in PostgreSQL and time series in InfluxDB. Access to the server is limited to the operator. Passwords for your Fitxtractor account are hashed. Source credentials are encrypted with the application key before they are written to the database, so the scheduled syncs can use them but a copy of the database alone cannot, and they are deleted when you disconnect the source. Pages are served over HTTPS. No system is immune to compromise, and if yours is affected by one we will tell you.

6. How long we keep it

As long as your account exists. Disconnecting a source on the settings page removes its credentials at once; the data already imported stays until you ask for it to go. To delete your account and everything attached to it, email the address below and it will be removed within 30 days.

7. Your choices

• Read your data in the dashboard or pull it through the API with a token you create.
• Disconnect any source, or unpair Telegram, from the settings page.
• Ask us to correct or delete anything, or to delete the account outright.

8. Cookies

We set the session cookie that keeps you signed in and the CSRF cookie that protects forms. There are no advertising or analytics cookies.

9. Changes

When this policy changes, the date at the top changes with it. A change that affects what we collect or who we share it with will also be announced in the app.

10. Contact

Questions and requests go to admin@fitxtractor.purposebuiltsoftware.com.