Last updated: 18 August 2026.

1. Who we are

FitQuest is operated by Animal Fitness Quest (L Taylor), who is the data controller for the personal data described here and decides how and why it is processed.

2. What we collect and why

  • Account data (email, password credentials, display name) — to create and secure your account. Legal basis: performance of our contract with you.
  • Hero and body profile (age, gender, height, weight, activity level, goal pace) — to calculate your personalised calorie and macro targets. Legal basis: contract performance.
  • Activity data (food and exercise logs, barcode scans, quests, habits, treasury ledger) — to provide the tracking features and your progress history. Legal basis: contract performance.
  • Technical data (device identifiers, IP address, error and usage logs) — for security, fraud prevention and improving the app. Legal basis: our legitimate interests in running a safe, working service.
  • Support messages — to answer your questions. Legal basis: legitimate interests.

Health-related information such as weight is special category data; we process it on the basis of your explicit consent, given when you enter it, and you can withdraw it by deleting the data or your account.

3. Who we share it with

  • Hosting, database and infrastructure providers who run the app on our behalf.
  • Paddle, our Merchant of Record, for sale of the Quest Pass, subscription management, payments, tax compliance and invoicing.
  • Open Food Facts, when you look up a barcode or product (we send the barcode or search term only).
  • Professional advisers such as legal and accounting, and authorities where required by law.

We do not sell your personal data.

4. International transfers

Some providers process data outside the UK/EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards.

5. Retention

We keep your data for as long as your account is active. If you delete your account, your logs and profile are deleted or anonymised within 30 days, except records we must keep for legal, tax or accounting purposes.

6. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or port your data, to object to processing, and to withdraw consent at any time. Contact us through the app's support channel and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

7. Security

We use appropriate technical and organisational measures, including encryption in transit, hashed credentials and row-level database rules so that your logs are only readable by your own account.

8. Cookies and local storage

We use essential cookies and browser storage to keep you signed in and to remember your preferences. We do not use advertising cookies. You can clear these at any time in your browser settings, though signing in will be required again.