Last updated: 9 August 2026
This supplement applies to people in the United Kingdom and forms part of the Global Privacy Notice. If it conflicts with the global notice, this supplement prevails for UK processing.
GRITFIT.AI LIMITED is the controller. Contact support@gritfit-ai.com. You may complain to the Information Commissioner’s Office at ico.org.uk, but we would welcome the opportunity to address your concern first.
Lawful bases
We use ordinary personal data where necessary to perform the Terms, for legitimate interests in operating, securing and improving the service where those interests are not overridden, to comply with law, and with consent where required. We process health information and other special-category data only where an Article 9 condition applies. For optional health and fitness information used to personalise training, the onboarding contract uses a separate explicit-consent event.
You may withdraw consent in Settings or by contacting support. Withdrawal does not affect earlier lawful processing. If information is necessary to provide a feature, withdrawing consent disables that feature and starts the applicable deletion or de-identification workflow.
Children’s design
The service minimum age is 16 even though UK law may permit a lower age for some online-consent purposes. Because 16- and 17-year-olds are children under UK data-protection guidance, GRITFIT applies high-privacy defaults, clearer notices and category-specific teen-and-guardian authorisation for optional health, connected-health, precise-route, private-media and future paid features. Failed-unlock security photography is adult-only.
Transfers
When personal data is sent outside the UK, GRITFIT must use a UK adequacy regulation or an appropriate safeguard such as the UK International Data Transfer Agreement or UK Addendum, together with a transfer risk assessment where required.
Rights
Subject to legal conditions, you may request access, correction, erasure, restriction, portability or objection and may withdraw consent. You may have rights relating to solely automated decisions that produce legal or similarly significant effects. GRITFIT’s training suggestions do not by themselves make such a decision, and protected changes remain subject to product controls.