COOKIE POLICY

This Cookie Policy explains how FitKit ("Company," "we," "us," and "our") uses cookies and similar technologies (including browser local storage) on our website at https://fitkit.fit and our application at https://app.fitkit.fit (together, the "Services"). It explains what we actually set, why, who receives the data, what happens if you refuse, and how to change your mind.

What are cookies and similar technologies?

Cookies are small data files placed on your computer or mobile device when you visit a website. We also use browser local storage, which stores small amounts of data on your device in a similar way. Where this policy says "cookies", it covers both.

What we use, exactly

1. Strictly necessary (no consent required)

• Authentication - cookies set by our authentication provider, Clerk (e.g. __session, __client_uat), on app.fitkit.fit. Required to keep you signed in securely. Lifetime: session to a few days.
• Your consent choice - we store your cookie decision itself in local storage (fitkit:cookie-consent) for up to 12 months, so we do not ask you on every visit.
• Preferences - your language and theme choices, stored locally on your device.

2. Analytics (only with your consent)

• PostHog - product analytics that help us understand which pages and features are used. Sets a cookie named ph_* and local storage entries, valid for up to 365 days. Data is hosted on PostHog's EU cloud (Frankfurt, Germany). Until you click Accept, PostHog runs in memory-only mode: nothing is stored on your device and no events are sent. If you decline, it stays that way.

3. Error monitoring (legitimate interest)

• Sentry - if the application crashes or errors, a technical error report is sent so we can fix it. When an error occurs, a short replay of the screen may be included with all text masked and all media blocked, so personal content is not readable. This data is used only for fixing defects, never for marketing.

4. Performance (cookieless)

• Vercel Analytics & Speed Insights - aggregated, cookieless page performance measurements. No identifier is stored on your device.

We do not use advertising or marketing cookies, and we do not sell or share your data for advertising.

Your choices, and what happens if you refuse

On your first visit we show a consent banner with two equal choices: Accept All and Decline. If you decline, the Services keep working fully; the only difference is that analytics stays off. Strictly necessary items cannot be switched off because the Services cannot function without them.

You can change your decision at any time, as easily as you made it:

• On the website: the "Cookie Preferences" link in the footer.
• In the application: Profile → Cookie preferences.

We re-ask for your consent every 12 months, and again whenever this policy changes in a way that matters. You can also delete cookies through your browser settings at any time.

Who receives the data, and where

The providers above process data on our behalf under data processing agreements: PostHog (EU, Frankfurt), Sentry and Vercel (may process data in the United States under standard contractual clauses). We do not give any third party access to cookie data for their own purposes.

How often will you update this Cookie Policy?

We may update this Cookie Policy to reflect changes to the technologies we use or for operational, legal, or regulatory reasons. Material changes reset your consent, so you will see the banner again. The date at the top tells you when it was last revised.

Where can I get further information?

See our Privacy Policy for how we handle personal data generally. If you have any questions about our use of cookies, email us at support@fitkit.fit.