FitXray ("we", "us", "our") operates the website fitxray.com (the "Service"), which provides AI-generated fitness and nutrition guidance based on a photo and information you provide.
This policy applies to all visitors and users of the Service. By using FitXray, you agree to the practices described in this policy.
If you make a purchase, payment is processed by Dodo Payments, our Merchant of Record. We do not collect, see, or store your card number, billing address, or other payment credentials. Dodo Payments may collect your email address to send a payment receipt – this is governed by their own privacy policy, available at dodopayments.com.
Like most websites, our hosting provider (Vercel) may automatically log technical information for security and performance purposes, such as IP address, browser type, device type, and timestamps of requests. This data is retained by our infrastructure providers according to their own retention policies and is not used by us to identify individual users.
We use the information described above solely to:
We do not use your photos or personal information for advertising, marketing profiling, or to train our own AI models. We do not sell, rent, or trade your information to third parties.
When you upload a photo:
Because no FitXray account exists, there is no mechanism for us to retrieve your photo or analysis later – if you want to keep your results, use the "Save Plan" feature to download them before closing the page.
We rely on the following categories of third-party providers to operate FitXray. Each processes data under their own privacy policies and security practices:
Your photo and the information you provide are sent to Anthropic (anthropic.com), our AI provider, to generate your analysis. Anthropic processes the data to return a response to our server and does not use API inputs to train their models, per their API terms. Data is processed in the United States. For more details, see Anthropic's privacy policy at anthropic.com/privacy.
Dodo Payments processes all payments and may retain transaction records (including the email used for receipts) for as long as required by financial regulation and tax law in applicable jurisdictions – typically 7 years. We do not have access to this data beyond confirmation that a payment succeeded.
Our website and serverless functions are hosted by Vercel Inc. Vercel may process technical/log data as described in Section 2.4, governed by Vercel's privacy policy.
FitXray does not use advertising cookies, cross-site tracking pixels, or third-party analytics services that build behavioural profiles. We use Vercel Analytics to collect anonymised, aggregated data on page visits and feature usage (e.g. how many people generate an analysis) to improve the Service. This does not identify individual users. Our hosting provider may also use minimal, strictly necessary technical cookies required for the site to function (e.g. load balancing).
Depending on your location, you may have rights under data protection laws such as the GDPR (EU/UK), CCPA/CPRA (California), or similar frameworks. These may include the right to:
Because FitXray does not retain photos, form inputs, or account data after your session, there is generally nothing to access or delete on our end. If you have questions about a specific interaction (e.g. a payment record held by Dodo Payments), contact us at hello@fitxray.com and we will assist or direct you to the relevant processor.
FitXray is not directed at, and is not intended for use by, individuals under the age of 16 (or the applicable minimum age in your jurisdiction, if higher – e.g. 13 in some regions under COPPA, but we apply 16 as our global minimum). We do not knowingly collect personal information from children. If you believe a child has used the Service and provided personal information, please contact us at hello@fitxray.com and we will take appropriate steps to address it.
All data transmitted between your device and our servers is encrypted using HTTPS/TLS. While we take reasonable measures to protect information in transit and during processing, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
Our service providers (AI processing, hosting, payments) may process data in countries other than your own, including the United States. Where required, these providers maintain appropriate safeguards for international data transfers (such as Standard Contractual Clauses under GDPR).
FitXray provides AI-generated fitness and nutrition information for general informational purposes only. It is not medical advice, and is not a substitute for consultation with a qualified physician, registered dietitian, or certified fitness professional. Always consult an appropriate professional before beginning any new exercise or nutrition program, particularly if you have any pre-existing health conditions, injuries, or concerns.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The "Last updated" date at the top of this page will reflect the most recent revision. Material changes will be reflected by updating this page; continued use of the Service after changes constitutes acceptance of the revised policy.
This policy and any disputes arising from it are governed by applicable law in the jurisdiction in which FitXray operates, without prejudice to any mandatory consumer protection rights you may have under the law of your country of residence.
For any questions about this Privacy Policy or our data practices, contact: