Privacy Policy – fjt
Last updated: 29 September 2026
1. Controller
Enes Karakus c/o Impressumservice Dein-Impressum
Stettiner Str. 41
35410 Hagen
mail@getfjt.com
2. General information on data processing
fjt ("we", "the app") is an application that calculates your "felt age" based on scientific formulas (including the NTNU/HUNT fitness formula) and regular well-being check-ins (WHO-5 questionnaire). To provide these features we process personal data, including health data within the meaning of Art. 9(1) GDPR.
3. What data we process
3.1 Registration data
- Email address
- Password (stored encrypted)
- Registration / usage timestamp
3.2 Health and fitness data (special category, Art. 9 GDPR)
Depending on your usage, either entered manually or — when using the iOS app with your explicit permission — read from Apple HealthKit:
- Resting heart rate
- Step count / activity data
- Weight and height
- Training / workout frequency
- Waist circumference (manual entry)
- Age, gender
- Answers to the WHO-5 well-being questionnaire
Important note about HealthKit:Access to Apple HealthKit data is read-only. We do not write any data back to your Apple Health app. Access only happens after your explicit permission via the iOS permission dialog and can be revoked at any time in the iOS settings.
3.3 Technical data
- IP address (temporary, for server communication)
- Device information (operating system, app version)
- Usage logs (e.g. time of check-ins)
4. Purpose and legal basis of processing
| Purpose | Legal basis |
|---|---|
| Providing the user account | Art. 6(1)(b) GDPR (performance of a contract) |
| Calculating the felt-age value | Art. 6(1)(b) GDPR in conjunction with Art. 9(2)(a) GDPR (explicit consent for health data) |
| HealthKit data retrieval | Art. 9(2)(a) GDPR (explicit, separate consent via the iOS permission dialog) |
| Improving the app | Art. 6(1)(f) GDPR (legitimate interest) |
You can withdraw your consent to the processing of your health data at any time with effect for the future, e.g. via the account settings in the app or by emailing us.
5. Storage location and processors
Your account, health and app data are stored inside the EU (data center in Stockholm, Sweden); we have a data processing agreement with our hosting provider under Art. 28 GDPR. The website is delivered via a managed delivery network. We use established payment providers for subscriptions and web payments, the mobile platforms' push services for notifications, and a European weather service for weather data. The analysis of meal photos is done by an AI provider in the USA, see section 10.
6. Retention period
We keep your data only as long as necessary; the exact periods are listed in the table in section 11. When you delete your account in the app, the account and your personal records are deleted immediately and irreversibly. Only billing records subject to statutory retention and statistics without any personal reference remain.
7. Your rights
You have the right to:
- Accessto the data stored about you (Art. 15 GDPR)
- Rectificationof inaccurate data (Art. 16 GDPR)
- Erasureof your data (Art. 17 GDPR)
- Restrictionof processing (Art. 18 GDPR)
- Data portability(Art. 20 GDPR)
- Objectionto the processing (Art. 21 GDPR)
- Withdrawal of your consentat any time with effect for the future (Art. 7(3) GDPR)
- Complaint to a supervisory authority: The Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden
To exercise your rights, contact us at: mail@getfjt.com
8. Deleting account data in the app
You can delete your account and all associated data directly in the app under Settings → Delete account at any time. We ask for each consent (health data, AI processing, felt age, pregnancy mode) separately and explicitly and store it with date and version. You can withdraw any consent anytime in Settings → Consents; without health-data consent no new health entries are saved.
9. No disclosure to third parties
We do not sell or rent your health data to third parties, and never for advertising. Data is shared only with the following providers and only to deliver the service:
- Hosting and database provider (EU)
- Website delivery and security network
- AI gateway (EU): forwards requests to our superintelligence; no name, email or user ID is sent
- AI language models (Coach, voice input, suggestions, device reports; USA)
- AI image analysis (meal photo and meal text analysis, daily tip; USA)
- Payment providers plus Apple App Store / Google Play (subscription and payment)
- Mobile platform push services (notifications)
- Email delivery service (sign-up and service emails)
- European weather service (weather, EU — no personal data sent)
10. Photos and AI analysis
When you take a photo of a meal, the photo is sent to an AI model that estimates its contents. For this we use our superintelligence — an AI service routed through an EU gateway to a language model in the USA. The photo is therefore transferred to servers in the USA, outside the EU. The transfer is based on standard contractual clauses under Art. 46(2)(c) GDPR and on your explicit consent under Art. 9(2)(a) GDPR, because you start the upload yourself.
The photo is transmitted for analysis only and is not used by the provider to train models. The recognised result is saved to your account. The photo itself is stored in our private (non-public) storage in the EU and is deleted together with your account.
Photos are optional — you can also enter meals manually, in which case no image is transferred.
11. Retention periods
The following periods apply, subject to statutory retention obligations:
- Account and profile data: while the account exists; deleted immediately on account deletion
- Health and fitness records (heart rate, steps, weight, check-ins, time ledger): while the account exists
- Meal photos: while the account exists, deleted with the account
- Push tokens: until the device is removed or notifications are switched off
- Subscription and billing records: up to 10 years due to statutory obligations
- Usage statistics without personal reference: maximum 14 months
- Bot crawl logs (search/AI crawlers, no personal data): maximum 6 months
- Email delivery logs: maximum 12 months
13. Minors — 16 year age limit
fjt is not intended for anyone under 16. When you sign up you confirm that you are at least 16 years old. We do not knowingly collect data from children under 16; if we learn of such an account we delete it and the related data without delay. If you believe a child under 16 has given us data, write to mail@getfjt.com.
14. Changes to this privacy policy
We update this privacy policy when necessary, for example for new app features. You can always find the current version at getfjt.com/privacy.
15. Contact
If you have any questions about data protection, please contact:
mail@getfjt.com