Your account
We use account, profile and workout information to provide Fitandem and keep your activity in sync.
Your Tandem
An accepted Tandem can see limited shared activity, streak information, nudges and recommendations, not your private workout notes.
Your choices
You can control notifications and optional usage analytics, disconnect a Tandem and use in-app account deletion. You also have UK data-protection rights.
1. Who we are
Fitandem is operated by YouthTeamHQ Limited, trading as YTHQ Studios. YouthTeamHQ Limited is a company registered in England and Wales under company number 16673811 and is the controller of personal information described in this policy.
Questions or requests about privacy can be sent to support@fitandem.com.
2. Information we collect
Account and profile information
When you create and use a Fitandem account, we process:
- your email address, Firebase user identifier, email-verification status and authentication records;
- the display name you choose;
- a Fitandem Tandem Code used to find and connect accounts; and
- account and application timestamps needed to operate and secure the service.
Authentication credentials are handled by Firebase Authentication. Fitandem does not store your password in its own Firestore application database.
Tandem relationships
We process incoming and outgoing Tandem requests, accepted Tandem relationships, each member’s user identifier and display name, relationship status, and related timestamps. Your device may also store which accepted Tandem is currently selected.
Moves, workouts, streaks and progress
When you log a Move or workout, we process details such as workout category, duration, intensity or effort, date and timestamps. Your personal workout record may include a private note. Fitandem also creates restricted summaries used for Tandem activity views, progress and the Shared streak. These summaries do not include your private workout note.
The app may keep local cached or pending workout information on your device so it can display recent activity and complete synchronisation.
Nudges and workout recommendations
If Tandem features are used, we process the sender and recipient identifiers, display names and timestamps needed to deliver a nudge, prevent excessive sending and avoid duplicate notification handling. For a workout recommendation, we also process the selected YouTube video identifier, title, channel name, thumbnail, duration and sending time.
Workout Finder and YouTube information
When you use Workout Finder, the filters you select, such as duration, intensity, setting, equipment, focus or instructor, are sent to Fitandem’s backend to request suitable public YouTube workout results. Fitandem receives and displays public video metadata such as the video identifier, title, channel, thumbnail and duration.
You do not connect a YouTube account to Fitandem, and Fitandem does not request access to your private YouTube account information or YouTube viewing history. When the embedded YouTube player is loaded or used, Google and YouTube may receive technical information directly from your device under their own terms.
Notifications
If notifications are enabled, we process a Firebase Cloud Messaging registration token and token identifier so notifications can reach your device. We may also process notification event identifiers, delivery-related timestamps, reminder settings, time zone, and limited rate-limit information for nudges and reminders. The app stores notification permission, prompt and duplicate-handling state locally.
Fitandem Duo purchases and subscriptions
If you buy or use a Fitandem Duo subscription, Google Play handles the purchase and payment method. Fitandem receives information needed to verify and provide the subscription, which may include the Google Play purchase token or a protected representation of it, product and plan identifiers, subscription and acknowledgement status, expiry information, entitlement owner and beneficiary identifiers, Tandem binding information, and verification timestamps. Fitandem does not receive your full card or bank-account details from Google Play.
Technical, device and diagnostic information
Fitandem and its service providers may process limited technical information needed to connect, secure and troubleshoot the service, such as IP address, device or app identifiers, app version, operating-system information, request and authentication logs, error details and message-delivery information. The app does not currently include Firebase Crashlytics, advertising SDKs or third-party ad networks.
Optional usage analytics
Fitandem includes optional Firebase Analytics in the Android app. Analytics collection is off by default and starts only if you explicitly choose “Allow analytics” in the app. You can change or withdraw your choice at any time in Settings → Usage analytics. Turning it off disables Analytics collection.
If you opt in, Fitandem sends four product milestones to Firebase Analytics: creating an account, completing first-run onboarding, opening the invite sharing options, and connecting with a Tandem. These custom events have no custom parameters. Fitandem does not add names, email addresses, Firebase user identifiers, partner identities, invite links or tokens, workout details, exercise types, durations, body or health information, or free text as custom Analytics event parameters.
Separately from those Fitandem events, Firebase Analytics may automatically collect app-use and technical information when enabled, including an app-instance identifier, general device and app information, coarse location derived from a masked IP address, and automatic purchase or subscription events. Analytics data may therefore be associated with a pseudonymous identifier. Automatic screen reporting, Advertising ID collection and ad-personalisation signals are disabled.
The Fitandem website does not include Fitandem analytics, advertising technology or a Fitandem cookie-consent system. Its hosting provider and the providers of embedded web resources may nevertheless receive ordinary request information such as IP address, browser or device information, requested pages and timestamps.
3. How and why we use information
| Purpose | Typical information | UK GDPR lawful basis |
|---|---|---|
| Create and authenticate accounts; provide profiles, Moves, progress, Tandems, Workout Finder and Duo features | Account, profile, relationship, workout, recommendation and entitlement information | Performance of our contract with you |
| Synchronise activity and show agreed information to an accepted Tandem | Relationship records and restricted workout, activity and streak summaries | Performance of our contract with you |
| Deliver requested notifications, nudges and reminders | Messaging token, notification content, event identifiers and preferences | Performance of our contract and, for optional device permissions or choices, consent |
| Verify Google Play purchases and manage Duo entitlements | Purchase token, product, subscription and entitlement records | Performance of our contract; legitimate interests in preventing fraud and protecting paid features |
| Operate, secure, prevent abuse, diagnose faults and improve reliability | Technical logs, identifiers, rate limits, errors and service events | Our legitimate interests in maintaining, securing and improving Fitandem |
| Understand general app use and improve Fitandem, if you opt in to Firebase Analytics | Parameter-free product milestones and information Firebase Analytics may collect automatically | Your consent, which you can withdraw in Settings → Usage analytics |
| Meet legal, accounting, regulatory or dispute-handling duties | Relevant account, transaction, security or correspondence records | Legal obligation or our legitimate interests in establishing, exercising or defending legal claims |
Where we rely on legitimate interests, we consider the necessity of the processing and balance those interests against your rights. Fitandem does not use your information to make solely automated decisions that produce legal or similarly significant effects.
4. How Tandem and shared data works
A Tandem connection is created only after an invitation or request is accepted. Once connected, each Tandem member can see the other member’s display name and limited information designed for the shared experience. Depending on the feature used, this can include:
- restricted workout summaries, including category, duration, intensity or effort, date and timestamps;
- recent shared activity, progress and Shared streak information derived from logged Moves;
- nudges, including who sent them; and
- workout recommendations, including the sender and selected public YouTube video details.
Your personal workout record and private workout note are not made available to your Tandem through the shared workout summary. Please do not enter medical information or other sensitive personal information in free-text notes.
If you disconnect a Tandem, the active relationship ends and Tandem-only access is removed. Each person’s own account and personal workout records remain unless separately deleted. Information already seen or independently recorded by another person cannot be recalled from that person.
5. Service providers and third-party services
We use the following providers to run Fitandem:
- Google Firebase: Firebase Authentication, Cloud Firestore, Cloud Functions and Firebase Cloud Messaging provide authentication, database, backend and notification services. Optional Firebase Analytics processes app-use information after you opt in. Google's role and terms may differ between Firebase services. See Firebase privacy and security information.
- Google Play: processes Android app purchases and subscriptions and provides Fitandem with purchase-verification and subscription-status information. See the Google Privacy Policy.
- YouTube API Services and the YouTube embedded player: provide public workout search results and video playback. Your use of those features is also subject to the YouTube Terms of Service and the Google Privacy Policy. You can review and manage relevant Google privacy controls through Google’s privacy tools.
- GitHub Pages: hosts fitandem.com and may process web-server and security logs. See the GitHub Privacy Statement.
- Google Fonts: the website requests the Nunito Sans font from Google, which means your browser connects to Google when loading the site. Google may receive ordinary web-request information. See the Google Privacy Policy.
- Google Gmail: hosts the public privacy and support mailbox and processes messages sent to that address.
These providers process information according to their roles, terms and privacy notices. We do not sell personal information and do not share it with advertisers.
6. Notifications
On supported Android versions, Fitandem asks for permission before showing notifications. You can decline that permission or change it later in Android settings. You can also turn supported reminder options on or off in the app.
Notifications may include Tandem activity, nudges, workout recommendations, reminders and service messages. Because notification content can appear on a locked screen depending on your device settings, consider adjusting Android’s lock-screen notification controls if others can access your device.
Disabling notifications stops them from being displayed but does not delete your Fitandem account or other service data.
7. Information stored on your device and Android backup
Fitandem stores limited app data on your device, including selected Tandem state, cached or pending workout information, notification state, migration state and interface preferences. Removing the app may remove local data, but it does not by itself delete information held in your Fitandem account.
The current Android app permits the operating system’s automatic backup feature. Depending on your Android device, Google account and backup settings, eligible Fitandem app data may be backed up and restored by Google. Google controls that backup service under its own terms and privacy policy. You can manage Android backup through your device or Google account settings.
8. International processing
YouthTeamHQ Limited is based in the United Kingdom. Some providers, including Google/Firebase, GitHub and YouTube, operate internationally, so personal information may be processed outside the UK.
Where UK data-protection law requires a transfer safeguard, we rely on the mechanism applicable to the provider and transfer, which may include UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or contractual safeguards such as the International Data Transfer Addendum. Provider terms describe the safeguards relevant to their services. You can contact us for more information about safeguards relating to your information.
9. How long we keep information
Account and service data is generally retained while your Fitandem account remains active. We use retention criteria rather than inventing a single fixed period: how long information remains necessary to provide your account and features, maintain security and service integrity, verify transactions, handle disputes, and meet legal obligations.
When you use Fitandem’s account-deletion functionality, associated Fitandem account data is deleted as described below. Limited technical, security, transaction or legal records may be retained where necessary for security, fraud prevention, dispute handling or legal obligations. Firebase Analytics data, if you opted in, is subject to Google's applicable retention settings and is not necessarily deleted by the in-app account-deletion process. Information may also remain temporarily in service-provider logs or backups until those systems cycle or delete it under the provider’s applicable retention process.
10. Account and data deletion
You can delete your account from within the Android app. Open the account or settings area, choose the account-deletion option and follow the confirmation steps. For security, Fitandem requires a recently verified session; you may be asked to sign in again or re-verify before deletion. Step-by-step instructions are available on the Fitandem account-deletion page.
As implemented, account deletion removes your Firebase Authentication account and associated Fitandem account data, including your profile and Tandem Code, friend requests and relationship mirrors, personal workouts and shared summaries, recommendations you sent, notification tokens and reminder state, remote nudge rate-limit records, and Duo purchase or entitlement records associated with the deleted account. The deletion process also removes your connection from accepted Tandems. It does not delete another person’s independent account or personal workout records.
Deleting your Fitandem account does not cancel an active Fitandem Duo subscription or stop Google Play renewal or billing. If you subscribed to Fitandem Duo, you must cancel it separately through Google Play subscription management. We recommend cancelling before deleting your Fitandem account.
If you cannot access the in-app deletion function, email support@fitandem.com from the address associated with your Fitandem account. We may need to verify your identity before acting on the request.
11. Security
We use technical and organisational measures designed to protect personal information. These include authenticated access, verified-email requirements, Firestore access rules, restricted Tandem-visible summaries, server-side entitlement checks, encrypted network transport, rate limiting for selected messaging features and controlled account deletion.
No system is completely secure. Keep your password confidential, use a password that you do not reuse elsewhere, and contact us promptly if you believe your account has been compromised.
12. Adults only
Fitandem is intended only for people aged 18 and over and is not directed at children. The app does not currently ask for a date of birth or use age-verification technology. If we learn that a person under 18 has created an account, we will take appropriate steps to delete the account and associated information. Please contact us if you believe this has happened.
13. Your privacy rights
Under UK data-protection law, depending on the circumstances, you may have the right to:
- ask for access to your personal information and a copy of it;
- ask us to correct inaccurate or incomplete information;
- ask us to erase information;
- ask us to restrict how information is used;
- object to processing based on legitimate interests;
- receive information you provided in a portable format where the right applies;
- withdraw consent at any time where processing relies on consent, without affecting earlier lawful processing; and
- complain to the UK Information Commissioner’s Office.
Your right to object: you can object to processing based on our legitimate interests. We will stop unless we have compelling legitimate grounds to continue or the processing is needed for legal claims.
To exercise a right, email support@fitandem.com. We may ask for information needed to verify your identity and locate your account. You can also make a complaint to the Information Commissioner’s Office. We would appreciate the chance to address your concern first.
14. Changes to this policy
We may update this policy when Fitandem, its providers or legal requirements change. We will publish the updated version at this address and change the “last updated” date. If a change materially affects how we use personal information, we will take reasonable steps to bring it to your attention.
15. Contact us
YouthTeamHQ Limited, trading as YTHQ Studios
Company number: 16673811
Email: support@fitandem.com