Celia Application Privacy Policy

Last updated: 30 July 2026

Your privacy is important to us. This policy describes what the Celia app collects, why, who processes it on our behalf, how long we keep it, and how you can have it deleted.

1. Data we collect

Your account

  • Email address and password, used to authenticate you and secure your account. Passwords are handled by Google Firebase Authentication and are never visible to us.

  • Display name, and a profile photo if you choose to add one.

Your profile, used to personalise the app

  • Age, gender, height and weight, and your fitness goal. These are used to calculate your daily calorie and macronutrient targets and to tailor the routines Celia builds for you.

What you do in the app

  • Meals you log: the name, calories, protein, carbohydrate and fat values, and when you logged them.

  • Workouts: routines you save, routines Celia creates for you, which workouts you have completed and when, and the streak and level derived from them.

  • Messages you exchange with the Celia coach, kept so your conversations are still there when you come back.

Photos

  • When you use the calorie scanner, the photo is sent to our image analysis provider to estimate the food and its nutrition. The photo is not stored on our servers and is not kept after the estimate is returned.

Technical data

  • An authentication token identifying your session, and standard server logs such as IP address and request times, which we use to keep the service secure and diagnose faults.

We do not collect contacts, precise location, or anything else that is not needed for the features described above.

2. How we use it

Your data is used only to:

  • authenticate you and secure your account;

  • calculate your calorie and macronutrient targets;

  • build and store your workout routines and track your progress;

  • let the Celia coach answer with your own plan, meals and progress in mind;

  • contact you where necessary about your use of the app;

  • keep the service secure and prevent abuse.

Health and fitness information — body measurements, meals and workouts — is used only to provide these features. The app contains no advertising, no advertising identifier, and no analytics or tracking SDKs. We do not sell or rent your personal data, and we do not share it for commercial purposes.

3. Who processes data on our behalf

We use the following providers to run the service. Each receives only the data needed for its part of it:

  • Google Firebase — authentication, your profile data, and profile photo storage.

  • Supabase — the database holding your saved routines, meal log, workout history and chat history, and hosting of the exercise media.

  • Vercel — hosting for our backend, which sits between the app and these services.

  • DeepSeek — the AI model behind the Celia coach. Your message and the relevant part of your plan, meals or progress are sent so it can answer.

  • OpenAI — image analysis for the calorie scanner, when that provider is used for the estimate.

4. How long we keep your data

  • Account and profile data (email, name, photo, age, gender, height, weight, targets): kept for as long as your account exists.

  • Meals, workout history and chat history: kept until you delete the individual entry, or until your account is deleted.

  • Photos sent to the calorie scanner: not retained. They are processed to produce the nutrition estimate and discarded.

  • Server and security logs: kept for up to 30 days, then deleted.

When you delete your account, or ask us to delete it, your data is removed from our live systems within 30 days and from our backups within 90 days. We keep data beyond these periods only where the law requires it, and only for as long as it requires.

5. Deleting your account and data

You can ask us to delete your account and everything associated with it at any time by emailing contact@the-fit.eu from the address on your account. We confirm and complete the deletion within 30 days.

You can also delete individual meals from your meal log, and remove saved routines from your library, at any time inside the app.

6. Data security

We apply technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction. Access to your data is restricted to your own account: our database enforces, per request, that a signed-in user can only read and write their own rows. Traffic between the app and our services is encrypted in transit.

7. Target audience

The app is not intended for children. You must be 16 or older to create an account and use it.

8. Your rights

Under applicable data protection law, in particular the GDPR, you have the right to:

  • access your personal data;

  • have it corrected or erased;

  • restrict or object to its processing;

  • receive it in a portable form.

To exercise any of these rights, contact us at contact@the-fit.eu. You also have the right to complain to your national data protection authority.

9. Changes to this policy

We may update this policy. If we make a material change, we will let you know by email or when you next open the app, and we will update the date at the top of this page.

10. Contact

The Fit — contact@the-fit.eu