Committed.fit is an instrument that keeps an honest record of your training. This page is the same kind of record about the instrument itself: what we collect, where it lives, who can see it, and how you take it back. No ads. We never sell your personal data.
Everything in the app is something you put there or connect to it. We collect nothing in the background beyond what is listed here.
Your email address, used to sign you in with a magic link. No passwords are stored because none exist.
What you log: sessions and workouts, daily check-ins (sleep, recovery, HRV, resting heart rate, strain, weight, and similar), nutrition entries, races, goals, plans, and settings.
If you choose to connect a wearable such as WHOOP, the data described in section 03 — only after you explicitly authorize it.
Optional. If you enable the weather feature, your device's coordinates are used to fetch a local forecast and are cached on your device. We do not track or store your movements.
Basic first-party usage signals: that you opened the app, and which screens you visited. They are recorded in our own database under the same protections as the rest of your record, are visible only to us, and exist for exactly one purpose — understanding what to improve. Details in section 06.
No third-party analytics or trackers, no advertising identifiers, no fingerprinting, no contact lists, no data purchased from or sold to anyone.
Your record lives in two places: on your device (in your browser's local storage, so the app works offline) and, when you sign in, in your private row of our database, hosted by Supabase. Sync exists so you can move between devices without losing your history.
Database access is enforced at the row level: your account can read and write your row and no one else's. Data is encrypted in transit (HTTPS everywhere) and encrypted at rest by our hosting providers.
Committed.fit can connect to services you already use — a wearable today, potentially training or nutrition partners in the future — so their data flows into your record, or your record powers what they do for you. The standing rule for every connected service, current and future: opt-in only — nothing connects unless you authorize it on that service's own screen; you can disconnect at any time from inside Committed.fit; and the service's own privacy policy governs its side of the connection. New services only ever appear in this section alongside an in-app notice.
WHOOP is the first connected service: link your WHOOP account and your physiology data flows into your record automatically instead of being typed in each morning.
If you connect WHOOP, we retrieve on your behalf: recovery (recovery score, resting heart rate, HRV, SpO2, skin temperature), sleep (duration, stages, respiratory rate, performance metrics), daily strain and energy expenditure, workouts (sport, duration, heart rate, and related metrics), and basic profile and body measurements (name, email, height, weight, max heart rate).
This data is used for exactly one purpose: showing your own training picture to you inside Committed.fit. It is stored alongside the rest of your record under the same row-level protection.
We never sell, share, or disclose your WHOOP data to third parties, never use it for advertising, and never use it for any purpose other than operating Committed.fit for you.
Committed.fit runs on a small number of infrastructure providers. Each receives only what is technically necessary to do its job:
Hosts the app. Like any web host, it processes standard server logs (IP address, request metadata) to deliver pages.
Authentication (magic-link email) and the database that stores your synced record.
If you connect it, WHOOP's API provides your data to us under your authorization, governed also by WHOOP's privacy policy.
Weather forecasts. Receives coordinates only if you enable weather; receives no account information.
Serve the app's typefaces and one JavaScript library. Your browser requests these files directly from their servers.
That is the current complete list. If a new service or partner is ever added, it appears here alongside an in-app notice first — and connecting your record to any partner is always your choice, never a default.
De-identified statistics. We may share aggregate statistics that identify no one — for example, how many athletes completed a training program. Nothing in these statistics can be traced back to you, and this is the only form in which any partner ever sees anything derived from user records without an explicit user connection.
Beyond that, we do not share your data with anyone, except if required by law.
Export. The app includes a full export — your entire record as a single file, yours to keep, no request needed.
Delete. Email us and we will delete your account and your entire stored record. Disconnecting a wearable deletes its access credentials immediately.
Correct. Everything you log is editable in the app; your record says what you say it says.
Retention. We keep your data for as long as you keep your account, because a lifetime record is the point of the product. Delete the account and the data goes with it.
Cookies and local storage. We use browser storage to keep you signed in and to store your record on your device. There are no advertising or tracking cookies.
Usage signals. Committed.fit records for itself when the app is opened and which screens are visited, tied to your account so we can tell an active beta tester from a stalled one. This is collected by our own code into our own database — no analytics company ever sees it — is never shared or sold, never used for advertising, and is deleted with your account like everything else.
Children. Committed.fit is not directed to children under 13, and we do not knowingly collect their data.
Changes. If this policy changes, the revision date at the top changes with it, and material changes will be flagged in the app. We will never quietly weaken it.
Contact. Questions, exports, deletions: contact@committed.fit.