Privacy Policy

1. Who we are

FastTrack ("we", "us", "the app") is operated by Emanuel André Oliveira Felisberto, an independent developer based in Porto, Portugal, registered as a sole proprietor (Empresário em Nome Individual) under Portuguese law.

Contact: aureliusapps.dev@gmail.com

2. What data we collect

2.1 Health & Fitness data (HealthKit)

If you grant permission, FastTrack reads weight history from Apple Health and writes fasting sessions back to Apple Health as workout entries. This data:

• Stays on your device, encrypted by Apple
• Is never transmitted to our servers
• Is never shared with third parties
• Is never used for advertising
• Is governed by Apple's HealthKit privacy framework

You can revoke HealthKit permission at any time via iOS Settings → Health → Data Access & Devices → FastTrack.

2.2 Fasting data (local)

Your fasting sessions, durations, and history are stored locally on your device using Apple's SwiftData framework. This data is included in your iCloud Backup if enabled, but never transmitted to our servers.

2.3 Subscription data (RevenueCat)

When you subscribe to FastTrack Pro, the following data is processed by our subscription provider, RevenueCat:

• Anonymous device identifier (App-Specific Identifier provided by Apple)
• Apple App Store receipt
• Subscription status and entitlements
• IP address (transient, used only for fraud prevention)

RevenueCat acts as our data processor under GDPR. Their privacy policy applies to this processing. We do not receive personally identifiable information through this flow.

2.4 Data we do not collect

• No name, email, phone, or address
• No location data
• No contacts, photos, or files
• No analytics or behavioural tracking
• No advertising identifiers (IDFA)
• No crash reporting that includes personal data

3. Why we use your data

The minimal data described above is used exclusively to:

• Provide the fasting tracking functionality you requested
• Verify your subscription entitlements
• Sync data with Apple Health when you grant permission

We do not use your data for marketing, profiling, or any purpose unrelated to delivering the app.

4. Legal basis (GDPR — EU users)

Under the General Data Protection Regulation, our legal bases are:

• Performance of a contract — for subscription processing (Article 6(1)(b))
• Consent — for HealthKit access (Article 6(1)(a) and Article 9(2)(a) for special category health data)
• Legitimate interest — for fraud prevention via IP address (Article 6(1)(f))

5. Your rights

5.1 GDPR rights (EU/EEA users)

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with your national data protection authority

5.2 CCPA rights (California users)

You have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell your data.

5.3 How to exercise your rights

Contact us at aureliusapps.dev@gmail.com. We respond within 30 days.

To delete fasting data stored locally, simply delete the FastTrack app from your device. To revoke subscription, manage it via iOS Settings → Apple ID → Subscriptions.

6. Data retention

• Local data (fasting sessions, settings): kept on your device until you delete the app
• HealthKit data: governed by Apple Health, never stored by us
• Subscription data: retained by RevenueCat for the duration of your subscription plus 90 days for refund handling, then anonymised

7. Children's privacy (COPPA)

FastTrack is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will delete it promptly.

8. International data transfers

RevenueCat processes data in the United States. Transfers from the EU are covered by Standard Contractual Clauses approved by the European Commission. See RevenueCat's privacy policy for details.

9. Security

We use industry-standard security practices:

• All network traffic uses HTTPS (App Transport Security enforced)
• Local data encrypted at rest by iOS
• HealthKit data encrypted by Apple's framework
• No backend servers operated by us — we have no database to breach

10. Changes to this policy

We may update this Privacy Policy. Material changes will be communicated via in-app notice or App Store update notes. The "Last updated" date at the top reflects the current version.

11. Contact

Questions, requests, or complaints:

Emanuel André Oliveira Felisberto
Email: aureliusapps.dev@gmail.com
Location: Porto, Portugal