Privacy Policy

Last updated: May 14, 2026

1. Information We Collect

We collect information you provide directly: your username, email address, and password (stored hashed). We also collect fitness data you log including activities, routes, and distances.

2. How We Use Your Information

We use your data to provide and improve the GoFit service, power leaderboards and social features, and send relevant notifications. We do not sell your data to third parties.

3. Data Security

We protect your data using industry-standard encryption. Passwords are hashed using bcrypt. Authentication uses secure HttpOnly cookies to mitigate XSS attacks.

4. Cookies

GoFit uses HttpOnly session cookies to keep you authenticated. These cannot be accessed by JavaScript and are essential for the service to function.

5. Your Rights

You may request deletion of your account and associated data at any time by contacting us via the Support page.

6. Contact

For privacy-related questions, please visit our Support page.