How we keep your data safe
A plain-English summary of how we look after your account, your training data and your payments. The full detail is in our Privacy Policy.
Progress photos stay on your phone
Progress photos are stored only on the device you took them on, inside your browser’s own storage. They are never uploaded to Fit Fit City: they aren’t part of syncing, the offline workout queue or the data download, and we have no copy. When you add a photo we re-save it on your device, which also strips hidden location (GPS) details from the file.
You can delete one photo, or all of them, in one tap. Deleting your account on that device also removes them. Because they live in your browser, clearing your browser data or changing phone deletes them too, so use “Save a copy” to keep any you want.
Your daily water, steps and sleep numbers, weekly check-ins, workout day swaps, set ticks, the reminders and nudges you’ve chosen, anything you tick in the plan quiz for us to work around (such as knees or lower back) and timer settings are also kept on your device only. So is the readiness check you see before starting a plan: we never save your answers, and the device only remembers the date you saw it.
Encrypted connections
The website and the member area run over HTTPS, so what you send is encrypted on the way. Our site sends an HSTS (HTTP Strict Transport Security) header, which tells your browser to use only secure HTTPS connections to fitfitcity.com and its subdomains for the next year. Your login cookie is marked Secure and HttpOnly, so it’s only ever sent over HTTPS and page scripts can’t read it.
Payments are handled by Stripe
When you pay, you enter your card on Stripe’s own secure checkout page, not on ours. We never see or store your card number. Stripe tells us whether the payment worked, the amount, and its customer and subscription references.
Passwords are never stored
We keep only a one-way hash of your password, made with PBKDF2 (SHA-256, 100,000 rounds) and a random salt that’s different for every account. Nobody at Fit Fit City can see your password. Repeated failed logins and password-reset requests are rate-limited, and password-reset links expire after 60 minutes.
Health data only with your consent
Weight and body measurements are optional. We only store them after you’ve ticked a box giving explicit consent, and the service refuses to save them without it. You can erase all your progress data and withdraw that consent from your Account page at any time.
Download or delete your data yourself
- Download: Account → “Download all my data” gives you a zip of everything we store for your account, as JSON and spreadsheet (CSV) files, plus a copy of the settings, habits and check-ins saved on the device you download from (made in your browser, not sent to us). It contains only your own data. Progress photos aren’t included.
- Erase progress data: one button on your Account page removes your measurements, workout log and personal bests and withdraws consent.
- Delete your account: confirm with your password and we switch off renewal (on the monthly plan during its 12-month minimum term, the plan instead ends when the term does, as our Terms explain), then delete your account and the data stored with it, apart from the few records the Privacy Policy explains we must keep, such as payment records for tax.
UK GDPR and the ICO
We follow UK GDPR and the Data Protection Act 2018. B L Notts Holdings Ltd, trading as Fit Fit City, is the data controller and is registered with the Information Commissioner’s Office (ICO) under number ZC275706. If you’re unhappy with how we handle your data, tell us first at hello@fitfitcity.com; you can also complain to the ICO at ico.org.uk/make-a-complaint.
Advertising scripts only with your OK
There are no adverts on our site and we don’t sell your data. The only advertising script we use is the Meta Pixel, which measures which of our adverts work, and it only loads if you choose Accept in our cookie banner. Until you choose, and if you choose Reject, it isn’t loaded at all. It never receives your name, email address or training, food or progress data, and you can change your choice at any time with Cookie settings in the footer. If you arrive from one of our adverts or tagged links, your browser notes which one for 30 days, and if you join we keep that note with your account; that note is never sent to advertising networks (see our Cookie Policy). Our security policy only lets the browser run scripts from our own site, from Cloudflare, our host, for its visitor analytics, and from Meta (connect.facebook.net) for the Meta Pixel, which only loads after you accept. We host our own fonts and images, so loading the site doesn’t send your details to Google or an image provider. We only set essential cookies unless you accept advertising cookies (see our Cookie Policy).