Privacy notice

Who holds your data

Harry Tritton, trading as Fitzone, is responsible for the information you put into this app and decides what is collected and why. In data protection terms he is the controller.

The app itself is built and run by Jack Robinson Software Ltd on Harry's instructions. It processes your information on his behalf and does nothing with it of its own accord.

Ask anything about your data, or make any of the requests further down this page, by emailing harry@jackrobinson.uk.

What is collected, and why

Only what the coaching actually runs on. There is no analytics, no advertising, no tracking of any kind, and nothing here is sold or shared for marketing.

Your name and email

Taken when you pay, so Harry knows who you are and the app can email you your check-in and his reply.

Your sex, age and height

Entered once at the start. Used only in the formula that works out your calories and protein.

Your weight, each week

What your targets are recalculated from, and what the trend on your history screen is drawn from.

Your check-in answers

How closely you stuck to the food, how many sessions you did, and your sleep, energy and hunger out of five. Plus anything you write about your week and any question you ask.

Your training log

Which session you did, how hard it was, and any note you add. Sets and weights are not stored here; those live in Hevy, which is a separate service with its own privacy policy.

Progress photos, if you take them

Entirely optional. You can use the whole programme without ever adding one, and you can delete any of them yourself at any time.

Payment records

That you bought a place, which programme, and when. Card details are never seen by this app or by Harry: they go straight to Stripe.

Health information and your consent

Your weight, your body measurements, your progress photos and your sleep, energy and hunger scores are health information. The law treats that as more sensitive than an ordinary name and email, and it can only be held if you explicitly agree.

That is what the tick box at the start is for. You are asked before any of it is collected, the moment you agree is recorded, and you can withdraw at any time by emailing Harry. Withdrawing means the app stops holding it, and it is deleted.

Withdrawing does not undo anything already done lawfully while consent was in place, and it will make the coaching much harder to deliver, because the numbers are what the programme is built on. It will not affect anything you have already paid for.

Who else sees it

Harry sees everything you submit, which is the point of the programme. No other client on the programme sees any of it, and your progress photos are visible only to him.

The app runs on services that necessarily handle some of it:

Amazon Web Services

Stores the database and the photos, in their Ireland region. Photos sit in private storage that is not reachable from the internet without a signed link that expires in minutes.

Clerk

Handles signing in. Holds your email address so it can send you a sign-in code.

Stripe

Takes the payment. They hold your card details; this app never receives them and stores only a reference to your Stripe customer record.

Resend

Sends the emails, so it handles your email address and the contents of a message.

Where it is held

The database and your photos are in Amazon Web Services in Ireland. Some of the services above are US companies and may handle your information outside the UK. Where they do, they are relied on to have appropriate safeguards in place for those transfers.

How long it is kept

Progress photos are deleted automatically 6 months after you finish or leave the programme. That is a real deletion by a job that runs every day, not a flag on a row.

The rest of your information is kept while you are on the programme and for a reasonable period afterwards, so that Harry can answer a question about your training and so records of payment can be kept for as long as tax rules require. Ask for it to be deleted sooner and it will be, apart from anything that has to be kept by law.

What you can ask for

You have the right to ask for a copy of everything held about you, to have anything wrong corrected, to have it deleted, to object to it being held, and to have it sent to you or someone else in a portable form. You can withdraw your consent to the health information at any time.

Email harry@jackrobinson.uk and you will get an answer within a month.

If you are unhappy with how it has been handled, you can complain to the Information Commissioner at ico.org.uk or on 0303 123 1113. Raising it with Harry first is usually quicker.

Keeping it safe

Signing in is by a code sent to your email; there is no password to be guessed or reused. Your photos are held in private storage and are only ever served through links that expire within minutes. Every request the app makes for your data checks who you are on the server, so one client cannot reach another client’s information by changing something in their browser.

The database is backed up daily.

Cookies

The only cookies set are the ones that keep you signed in. There are no analytics or advertising cookies, so there is no banner to dismiss.