Working request routes
- Delete an accessible account: in the app, open Settings → Data controls → Delete account. Recent authentication may be required.
- Export your data: Settings → Data controls → Export my data. The prepared download is available for 24 hours.
- Reset training data: Settings → Data controls → Reset training data.
- Correct profile information: edit it in Settings, or make a request below if the field is not editable.
- Withdraw Coach or health consent: use the relevant Settings control. Also revoke health/location/device permissions in iOS or Android where applicable.
- Locked out or unable to use the app: email dpo@gritfit-ai.com with the subject “Privacy rights request”.
- Consumer health request: email dpo@gritfit-ai.com.
- Formal privacy complaint: email dpo@gritfit-ai.com.
- Appeal a rejected request where applicable: email dpo@gritfit-ai.com and identify the earlier decision.
If the primary privacy route is unavailable, use support@gritfit-ai.com as the backup.
These labelled routes are handled separately from ordinary customer support. We may ask for proportionate identity verification and will not ask for more information than reasonably needed.
Rights available
Depending on your location and the law that applies, you may request access, correction, deletion, export/portability, consent withdrawal, restriction or objection; ask what health data is collected or shared; or appeal/review certain refusals. We will explain a refusal and available complaint or appeal route where required. Exercising a right does not affect service already lawfully provided, and some data may be retained where law permits or requires it.
What account deletion does
The authenticated flow first creates a scoped, time-limited deletion operation. After Firebase authentication is removed, the backend verifies the identity is absent and deletes account-scoped live data from its Postgres application tables and known Firebase Storage paths, including profile/progress/Hidden Folder media, routes, connected-health caches, Coach conversations and application analytics linked to the account. The operation records completion only after required live storage/database cleanup succeeds and can be retried safely if interrupted. Device caches and local security state are then cleared.
Deletion does not mean every copy disappears simultaneously. GRITFIT may retain minimal legal, consent, security, deletion and store-transaction evidence where reasonably necessary. Provider logs, Brevo/email records, support correspondence, app-store records and backups follow their own deletion or retention process and are not all automatically erased by the in-app database transaction. GRITFIT will pass an applicable verified request to a provider or complete an operational deletion step where required. Data in backups is not returned to ordinary use and ages out under the relevant backup cycle.
Deleting the app from a phone is not the same as deleting the account. Cancelling a subscription is also separate; manage it with Apple or Google in addition to deleting the GRITFIT account.
Health-consent withdrawal
Withdrawal stops new optional health personalisation and removes supported active health records, including body metrics, health summaries/check-ins, health profile limitations and health context held in supported Coach/training fields. It also disables dependent cloud-health processing. Ordinary workout records, private media and store records are not deleted solely by health withdrawal. Delete those separately or delete the account. GRITFIT cannot revoke an operating-system permission for you in every case, so also use iOS/Android settings.
Response timing
We respond within the period required by applicable law. As a practical guide:
- UK rights requests are normally completed within one calendar month, subject to lawful extension and notice;
- applicable California requests are generally answered within 45 calendar days, subject to a permitted extension and notice;
- applicable Washington consumer-health requests are generally answered within 45 days, with a separate appeal response process;
- New Zealand access/correction decisions are normally made within 20 working days, subject to a permitted extension and notice; and
- Australian access/correction requests and privacy complaints are handled within the legally applicable reasonable period.
These periods may depend on verification, scope and the law that applies. A normal-support disclaimer does not remove them.
Complaints and regulators
Use the formal complaint route above first if you can. You may also contact the UK Information Commissioner's Office, Office of the Australian Information Commissioner, New Zealand Privacy Commissioner, California Privacy Protection Agency/Attorney General, Washington Attorney General or another applicable regulator. We will include an appeal or regulator route in a refusal where required.