GDPR & CCPA Data Privacy Policy Generator

Privacy Policy for FitTrack Pro

Effective Date: September 30, 2026

1. Introduction

Welcome to FitTrack Pro. We help you track your steps and runs, and we know that information about your body and movements is personal. This policy explains what we collect, why we collect it, who we share it with, and the choices you have.

We do not sell your personal information. We only share it with the service providers described below, so we can run the app.

2. Information We Collect

Account information

• Your name
• Your email address

Activity and fitness data

• Daily step counts

Location data

• GPS location logs recorded while you track a run. We collect this only when you start a run in the app.

Device information

• Your device type (for example, iPhone or Android model)

Payment information (Premium subscribers)

• Payments are handled by Stripe. We do not store your full card number. We receive limited details from Stripe, such as your subscription status and the last four digits of your card.

Usage information

• Data about how you use the app (screens viewed, features used), collected through our analytics provider.

3. How We Use Your Information

We use your data, and rely on the following lawful bases under the GDPR, to:

Where we rely on

consent (for example, GPS tracking), you can

withdraw it at any time in your device settings or in the app. Withdrawing consent does not affect processing done before you withdrew it.

How long we keep it: We keep your data while your account is active. If you delete your account, we delete or anonymize your personal data within

[30] days, except where the law requires us to keep certain records, such as payment records.

4. Third-Party Data Sharing

We share data with these service providers, who process it only to provide their services to us:

Google Maps API (route rendering): receives location coordinates so that your run routes can be displayed on a map.

• Stripe (premium subscriptions): receives your payment details and email to process payments and manage billing.
• Mixpanel (product analytics): receives usage data and device type to help us understand how the app is used.

We

do not sell your personal information and do not share it for cross-context behavioral advertising. We may also disclose information if required by law or to protect our rights and users' safety.

International transfers: Some of these providers are based outside your country, including in the United States. Where required, we use approved safeguards such as Standard Contractual Clauses to protect your data.

5. Cookies and Tracking Technologies

We use cookies and similar technologies (such as local storage and SDK identifiers) for:

• Essential: keeping you signed in and securing your account.
• Analytics: through Mixpanel, to understand how features are used.

Where required by law, we ask for your consent before setting non-essential cookies. You can change your choices at any time through our cookie settings or your browser settings. Blocking essential cookies may stop parts of the app from working.

6. Your Privacy Rights (GDPR & CCPA)

If you are in the EEA, UK, or Switzerland (GDPR)

You have the right to

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict or object to certain processing, including processing based on legitimate interests
• Data portability: receive your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

Our Data Protection Officer / privacy lead can be reached at privacy@fittrackpro.com.

If you are a California resident (CCPA/CPRA)

In the

past 12 months, we have collected the categories of information listed in Section 2 (identifiers, health and fitness activity, precise geolocation, device information, commercial information, and internet or app activity) and disclosed them to the service providers listed in Section 4 for business purposes.

You have the right to

• Know what personal information we collect, use, and disclose, covering the past 12 months
• Delete your personal information
• Correct inaccurate information

Opt out of the sale or sharing of your personal information.

We do not sell or share your personal information, so there is nothing to opt out of, but you can contact us to confirm.

• Limit the use of sensitive personal information, such as precise geolocation
• Not be discriminated against for exercising your rights

How to exercise your rights

Email

privacy@fittrackpro.com. We may need to verify your identity first, and we will respond within

30 days (GDPR) or

45 days (CCPA). You may use an authorized agent to make a request on your behalf.

7. Contact Us

Questions about this policy or your data? Contact us at:

FitTrack Pro
Email: privacy@fittrackpro.com
Postal address: [insert registered business address]

We may update this policy from time to time. If we make significant changes, we will notify you in the app or by email and update the effective date above.

---

Before you publish, please check these points. I'm not a lawyer, so have qualified counsel review this before use.

• Bracketed items (retention period, postal address) need your real values.

GPS and step data are sensitive. Step counts may count as health data under the GDPR, and precise geolocation is "sensitive personal information" under the CCPA. The app should collect explicit consent before it starts tracking, and it should offer a "Limit Use of My Sensitive Personal Information" link if applicable.

Verify Mixpanel's setup. If it is configured to share data for advertising or cross-context purposes, the "no sharing" statements would need to change.

• Confirm whether a DPO is required. If not, describe the contact as a "privacy contact" instead.
• Children: Add an age statement (for example, 16+ or 13+) if it applies.

If you'd like, I can put this in a file, such as a Word doc or a web page.