Privacy Policy

Effective from 9 October 2026 · Česky

In short: we only store what you enter into Fitko or send from the app yourself. We don’t sell data, we don’t use advertising or analytics tracking, and you can download or delete your data at any time. This is a translation; if the versions differ, the Czech version prevails.

Controller

Lukáš Ochrana, self-employed individual, company ID (IČO) 76420515, contact info@luksafoto.cz.

What data we process

Account: e-mail, name (optional), role, password (only as a secure scrypt hash – we don’t know the password itself), Apple identifier when you sign in with Apple.
What you log: workouts (exercises, sets, reps, weights, RIR, notes), food and macros, drinks and caffeine, body weight, goals, templates and plan.
From the Fitko app (only if you turn on Fitko on the web or sharing with a coach): daily summaries from Health (e.g. steps, sleep, resting heart rate, readiness) and completed workouts. Raw Health data stays on your phone.
Technical: sign-in session (the fitko_session cookie, required for signing in), time of last activity, IP address briefly in memory to protect against password guessing.

Health data (workouts, weight, sleep…) is a special category of personal data. We process it based on your explicit consent, which you give by entering or sending it to Fitko, and you can withdraw it at any time by deleting the data or your account.

Why and on what basis

Providing Fitko – performance of a contract (the terms of use).
Health data – your explicit consent.
Security (attempt limits, sessions) – legitimate interest.
System e-mails (address confirmation, new password) – performance of a contract. We don’t send marketing e-mails.

Who sees the data

Your coach – only if you confirm sharing yourself, and only data from the last 90 days.
Processors: Fly.io (server hosting, data centre in Frankfurt), Anthropic (only when you use AI – the request text, e.g. goals, tastes, planned workouts and ingredients for a recipe). With your own key the request goes from your browser directly to Anthropic and Fitko doesn’t see it; with “AI via Fitko” it goes through our server. E-mails are sent by the operator’s own mail server from info@luksafoto.cz.
EasyForLife apps: the Fitko app downloads the public list of EasyForLife apps from easyforlife.cz (nothing is sent). It passes data to other apps (Nákupy, Jídelník, Kuchařka, Lékárnička, Kartičky…) only when you tap to do so – it opens them with a link and you confirm the data (e.g. the shopping list) there.
We don’t share or sell data to anyone else.

How long

As long as you have an account. When you delete your account, data in Fitko Cloud is deleted immediately; it disappears from backups within 30 days at the latest. You manage the data in the app on your iPhone and in your iCloud.

Your rights

Access and portability: Settings → Download my data (a JSON file with everything Fitko Cloud has about you).
Erasure: Settings → Delete account.
Rectification, restriction, objection, withdrawal of consent: in the app or by e-mail to info@luksafoto.cz.
Complaints can be filed with the Czech Office for Personal Data Protection (uoou.gov.cz).

Cookies

We use only one essential cookie for signing in. Your browser also remembers the last open tab and your language in local storage. No advertising or analytics cookies.