Fitpocket is built with privacy-first controls to help protect sensitive wellness information.
Fitpocket is a consumer wellness platform that helps users manage wellness-related information. We take a security- and privacy-conscious approach to how data is collected, stored, accessed, and governed.
Fitpocket uses cautious, transparent language about readiness, privacy principles, and current product boundaries.
We are implementing security controls aligned with SOC 2 principles, including access control, change management, incident response, vendor governance, and monitoring. We do not currently claim SOC 2 certification unless and until an independent audit has been completed.
Fitpocket is designed to support GDPR and POPIA privacy principles, including privacy rights such as access, correction, deletion, and data portability where applicable. We aim to collect only the data needed to provide and improve the product.
Fitpocket is designed to support GDPR and POPIA privacy principles with safeguards for personal information, including reasonable technical and organisational controls, data subject request handling, and vendor governance.
Fitpocket is a consumer wellness platform. HIPAA-regulated workflows require a separate Business Associate Agreement. Fitpocket is not intended to be used by covered entities or business associates to create, receive, maintain, or transmit HIPAA-regulated protected health information unless a separate Business Associate Agreement has been executed by Fitpocket.
We use layered technical and organisational safeguards to reduce risk and protect user information.
Network connections are protected with transport-layer encryption where supported.
Stored data uses infrastructure-supported encryption controls where available.
Administrative capabilities are limited according to role and responsibility.
Access is scoped to the minimum level needed for operational work.
Administrative accounts use stronger authentication controls where supported.
Separate environments help reduce accidental production impact.
Sensitive administrative actions are logged where the platform supports it.
Secrets are managed outside source code and scoped to operational need.
Dependencies are reviewed and monitored to reduce known vulnerability exposure.
Changes are reviewed and released through controlled development workflows.
Backup and recovery practices are maintained to support continuity.
Response procedures guide investigation, containment, communication, and follow-up.
Privacy is handled as a product and operational responsibility, not just a legal document.
We aim to collect the information needed to provide, secure, and improve Fitpocket.
Where applicable, users can request access, correction, export, or deletion of their personal information.
We aim to retain personal information only for as long as needed for legitimate product, legal, security, and operational purposes.
We review vendors and subprocessors that may process personal information on Fitpocket’s behalf.
Wellness-related information is treated as sensitive and is protected with additional care in product and operational workflows.
Data use is tied to product delivery, account security, support, and operational improvement.
Used to create, secure, and manage user accounts.
Used to provide the Fitpocket product experience.
Used to maintain security, debug issues, and improve product performance.
Used to respond to user questions and resolve issues.
Payments may be processed through Apple App Store or Google Play depending on the platform used. Fitpocket may receive limited payment or subscription status information needed to manage paid access and does not intentionally collect or store raw card details for mobile app-store purchases.
If you believe you have found a security issue, contact us through the security contact below or email our support inbox with the subject ‘Security issue’ so we can investigate.
Security issues can be sent to our support inbox with the subject ‘Security issue’.
Report a security issueThis page is provided for transparency and general informational purposes. It does not create contractual commitments, legal representations, or compliance certifications. Specific obligations may be governed by written agreements between Fitpocket and its customers or partners.
Subscribe in the FitPocket mobile app to unlock this feature on both mobile and web.