HEDEFITTRHome

Legal

Privacy policy

In short

Last updated: 3 October 2026 · KVKK Privacy Notice

Privacy policy

In short

Hedefit processes the data it needs to help you reach your training and nutrition goals. We never sell your data, we don't use health data for ads, and you can delete your account at any time. Details are in the KVKK Privacy Notice.

What data we use

Your account details (email, username), profile (age, height, weight, goal), logs (workouts, meals, water, sleep, steps, measurements), your location when you allow it (only while recording a route), your camera (meal and equipment analysis) and Health Connect data.

Social features

You can add friends and take part in the weekly XP leaderboard, the activity feed and shared challenges. Your username can be searched by any Hedefit user who types at least 2 characters; a result shows your username, display name and profile photo. You can turn this off with the "Appear in search" setting on the Friends screen; when off, you don't show up in search, but anyone who knows your exact username can still send you a friend request, and current friends are unaffected. Friends you accept can see your username, display name, profile photo, weekly XP and activity summary (workout completed, route distance, achievement, weekly goal/challenge completion and the XP earned). In a challenge, participants see each other's progress. Your meal, measurement, weight, health and location records are not shared with your friends.

Usernames

Each username is unique and can't be taken by anyone else. It must be at least 3 characters; obscene, sexual, profane or insulting names, or names impersonating Hedefit, are not accepted.

Artificial intelligence

Fit Coach's cloud mode, meal/photo analysis and equipment recognition send the information needed to answer your request to the AI provider (OpenAI). The provider processes this data to generate the reply and does not use it to train AI models; for requests that include a photo, provider-side storage (store) is turned off. To monitor service cost and abuse, for each AI request we record only the feature, plan, model, token counts and estimated cost; request and reply text is not recorded and these records are kept for at most 180 days. AI suggestions are not medical advice; if you have a health concern, consult a professional.

Health data, cycle tracking and daily check-in

The daily check-in (energy, sleep, pain, muscle soreness) and cycle tracking are entirely optional; cycle tracking is off by default and nothing is stored unless you turn it on. This data is kept in the database linked to your account, in records only you can access. Your cycle phase and next period date are not stored; they are calculated from the dates each time. It is used to adapt your plan slightly; it is passed to the AI coach only on the Premium plan and only if you turned on "Let Fit Coach use my cycle and check-in context", otherwise it never goes to the AI provider. It is not used for advertising or analytics and is not written to request logs. In Settings → Health data and personalization you can edit your details, turn cycle tracking off, and permanently delete your cycle data or all your health data; it is also deleted when you delete your account. None of this is medical advice.

Fit Coach memory

So that Fit Coach can get to know you and answer more fittingly over time, it stores short notes inferred from your chats or that you state explicitly (exercise and food preferences, goals, constraints, habits, equipment, motivation) on our servers, linked to your account; at most 60 notes are kept per user. Constraint notes may include information about an injury or health condition. These notes are included in the context sent to the AI provider to generate replies. They are deleted when you delete your account; if you want them removed without deleting your account, write to furkaninanjob@gmail.com.

Subscriptions and payment

Plus and Premium subscriptions are purchased and renewed through Google Play. We never see your card or payment details; we only store, linked to your account, the subscription status, end date and purchase token received from Google Play so we can verify your purchase. You can cancel at any time in Google Play; deleting your account does not cancel the subscription, so cancel it in Google Play first. Your plan benefits update automatically on refunds and cancellations.

Ads

The free version may show Google AdMob ads. You can manage personalized ad preferences on the consent screen at first launch. When you earn an extra question by watching a rewarded ad, a random identifier of your account and the reward type are sent to Google to verify the reward. Your health and nutrition data is never shared for advertising.

Permissions

Location, camera, notification, physical activity and Health Connect permissions are requested only when you use the related feature and can always be revoked in device settings. Declining a permission doesn't block other features.

Security

All connections are encrypted, each user can access only their own records in the database, and passwords are stored irreversibly. No system is completely risk-free, but we take reasonable technical and organizational measures to protect your data.

You're in control

You can edit your profile and goals in settings, reset your progress, freeze your account or delete it permanently. For data requests, write to furkaninanjob@gmail.com.

Children

Hedefit is not designed for children under 16. Users under 18 should use the app with the consent of a parent or guardian.

Changes

When this policy is updated, the new version date is shown; significant changes are announced in the app and, where required, your consent is requested again.

KVKK Privacy Notice

1. Data controller

This privacy notice is issued under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK") by Furkan İNAN (furkaninanjob@gmail.com), the data controller of the Hedefit mobile app. You can send questions and requests to furkaninanjob@gmail.com.

2. Personal data we process

3. Purposes of processing

Creating and securing your account; building your personal training program and calorie and macro targets; tracking your workout, nutrition, step, sleep and weight progress; providing Fit Coach suggestions and meal/photo analysis; keeping memory notes so Fit Coach can remember your preferences and constraints and answer more fittingly over time; recording routes; verifying your subscription and unlocking plan benefits, updating access on refunds and cancellations; monitoring AI cost and abuse; running friendships, the weekly leaderboard, the activity feed and shared challenges; sending reminder notifications; running the rewards and level system; checking that usernames are unique and appropriate; fixing errors and improving the service; meeting legal obligations and protecting our rights in potential disputes.

4. Legal grounds

General personal data is processed on the grounds of entering into and performing a contract (KVKK Art. 5/2-c), legal obligation (Art. 5/2-ç), establishing and protecting a right (Art. 5/2-e) and legitimate interest (Art. 5/2-f). Special-category health data (including health information that may appear in Fit Coach memory) and processing that requires transfer abroad additionally rely on your explicit consent (Art. 6/2 and Art. 9). Use of the advertising ID for personalized ads depends on the choice you make on the in-app consent screen.

5. Recipients and transfers abroad

Your data is never sold. It is shared with the following service providers only as far as needed to run the service:

These providers' servers may be located outside Türkiye. Transfers abroad are made under KVKK Art. 9 on the basis of appropriate safeguards (standard contracts) or your explicit consent. Data may also be shared in response to lawful requests from competent public authorities.

When you use social features, some data is also shared with other Hedefit users: your username can be searched by any user who types at least 2 characters, and a search result shows your username, display name and profile photo (you can turn this off with the "Appear in search" setting on the Friends screen; when off, you don't show up in search, but anyone who knows your exact username can still send you a friend request). Friends you accept can see your username, display name, profile photo, weekly XP and the events in the activity feed (workout completed, route distance, achievement, weekly goal completion and the XP earned). In a shared challenge, participants see each other's progress (XP, workout count or kilometres). Your meal, measurement, weight, health and location records are not shared with your friends.

6. Collection method

Data is collected electronically, by automatic and partly automatic means, through the information you enter in the app, device sensors (step counter, GPS, camera), the Health Connect connection you allow and Google sign-in.

7. Retention and deletion

Data is kept while your account is open. "Delete account permanently" deletes your account and related data; records subject to legal retention are kept only for that period. "Reset progress" deletes your logs, and "Freeze account" stops access while keeping your data. Photo analyses are not stored; Fit Coach chats live only on your device and can be cleared in the app. Fit Coach memory notes, subscription records and your friendship and challenge records are deleted when you delete your account. AI usage records are also deleted after 180 days at the latest. Deleting your account does not cancel your Google Play subscription; you must cancel it separately in Google Play. If you want memory notes removed without deleting your account, write to furkaninanjob@gmail.com.

8. Your rights (KVKK Art. 11)

You have the right to learn whether your data is processed, request information, learn the purpose of processing and whether data is used accordingly, know the third parties it is transferred to, ask for incomplete or incorrect data to be corrected, deleted or destroyed, ask for these actions to be notified to recipients, object to an outcome against you arising from analysis by automated systems, and claim compensation for damage caused by unlawful processing. You can withdraw your explicit consent at any time.

9. How to apply

Send your requests to furkaninanjob@gmail.com from the email address registered to your account. Requests are resolved free of charge within 30 days at the latest. If you find the reply insufficient, you can file a complaint with the Turkish Personal Data Protection Board.

Website: launch notification list

If you submit the “Notify me at launch” form on the website, only your email address, the time of signup and a random unsubscribe code are stored, to email you once when Hedefit is published on the app stores. Legal basis: your explicit consent. The data is kept on Cloudflare (Workers KV), is not shared and is not used for anything else. To limit abuse, only a hash of your IP address is used, for 60 seconds. We keep it until the notification is sent or you opt out, via the link in the email or by writing to furkaninanjob@gmail.com.