This supplement applies to people in the United Kingdom and forms part of the Global Privacy Notice. If it conflicts with the global notice, this supplement prevails for UK processing.
GRITFIT.AI LIMITED is the controller. Contact dpo@gritfit-ai.com for privacy matters; support@gritfit-ai.com is the backup route. You may complain to the Information Commissioner’s Office at ico.org.uk, but we would welcome the opportunity to address your concern first.
Lawful bases
We use ordinary personal data where necessary to perform the Terms, for legitimate interests in operating, securing and improving the service where those interests are not overridden, to comply with law, and with consent where required. We process health information and other special-category data only where an Article 9 condition applies. For optional health and fitness information used to personalise training, the onboarding contract uses a separate explicit-consent event.
You may withdraw consent in Settings or by contacting support. Withdrawal does not affect earlier lawful processing. If information is necessary to provide a feature, withdrawing consent disables that feature and starts the applicable deletion or de-identification workflow.
Children’s design
The service minimum age is 16 even though UK law may permit a lower age for some online-consent purposes. Because 16- and 17-year-olds are children under UK data-protection guidance, GRITFIT applies high-privacy defaults, clearer notices and category-specific teen-and-guardian authorisation for optional health, connected-health, precise-route, private-media and paid-subscription features. Failed-unlock security photography is adult-only.
Transfers
When personal data is sent outside the UK, GRITFIT uses an applicable UK adequacy regulation or an approved contractual safeguard such as the UK International Data Transfer Agreement or UK Addendum, together with a transfer assessment where required. Contact the privacy route for current provider-specific information.
Rights
Subject to legal conditions, you may request access, correction, erasure, restriction, portability or objection and may withdraw consent. We normally respond within one calendar month, with a lawful extension and notice where applicable. You may have rights relating to solely automated decisions that produce legal or similarly significant effects. GRITFIT's training suggestions do not by themselves make such a decision, and protected changes remain subject to product controls.