Privacy Policy
Summary: Ristamo (formerly FitLog) stores your workout, meal and weight logs only on your iPhone and in your own iCloud, and the Ristamo developer can’t see them. Only when you use an AI feature is the content it needs sent through the Ristamo server to our AI provider (Anthropic), and the Ristamo server doesn’t store that content.
This is a translation of the Korean original. If the two differ, the Korean version applies.
1. What we process and why
| Information | Where | Purpose |
|---|---|---|
| Workout logs, routines, meal logs, morning (fasted) weight, profile (sex, birth year, height, weight, goal, training experience, injury notes) | Your device and your iCloud (Apple CloudKit private database) | To provide the app’s features and to sync and back up across your devices. The developer can’t access it |
| Health app data (workouts, weight, heart rate, resting and active energy, nutrition) | The Health app on your device | Read and written only if you allow it. Never sent off your device |
| AI request content: a summary of your last 4 weeks of workouts (best set per exercise, volume per muscle group, rest times), notes you wrote on your workouts, routines, profile (age, sex, height, weight, training experience, goal, equipment, injury notes), meal text and food photos, today’s meals and your saved foods, items you edited and your notes | Sent through the Ristamo server to Anthropic (not stored on the server). The app asks for your consent before you first use an AI feature | Photo and text meal analysis, workout recommendations, weekly reviews, meal recommendations |
| Subscription information: Apple original transaction ID, product (plan), expiration date, refund and cancellation status. We receive it from the Apple-signed transaction the app sends, and from App Store server notifications and subscription status lookups from Apple | Ristamo server (Amazon Web Services, Seoul region) | To verify your subscription and manage usage counts per plan. Devices on the same Apple Account share the counts |
| Usage: number of uses per feature (daily, weekly, monthly), tokens processed and estimated cost | Ristamo server | To manage usage limits and costs. Logs record user identifiers only in transformed (hashed) form |
| Device verification information: Apple App Attest public key and signature count, and the subscription linked to that device | Ristamo server | To confirm that requests come from the genuine Ristamo app (fraud prevention) |
Ristamo doesn’t collect your name, email address or phone number, and doesn’t use personal information for advertising or marketing. Health and workout information is used only for your own records and health management.
2. How long we keep it
- Logs on your device and in iCloud: until you delete them or the app (you can delete iCloud data in iCloud settings)
- AI request and response content: not stored on the Ristamo server. Anthropic’s retention follows the policy described in section 3
- Number of uses per feature (daily, weekly, monthly): automatically deleted after about 40 days
- Monthly usage (tokens and estimated cost): automatically deleted after about 13 months
- Device verification information: until you ask us to delete it (reinstalling the app uses a new device key)
- Server operation logs: up to 3 months
- Subscription information: after the subscription ends, for as long as needed to confirm settlements and refunds
3. Service providers and international transfers
| Recipient | What they do | Country | Data and timing |
|---|---|---|---|
| Anthropic, PBC | Generates AI analysis and recommendations | United States | When you tap an AI feature, the AI request content in section 1 is sent over an encrypted connection. Anthropic doesn’t use content received through its API to train models, and its retention follows Anthropic’s commercial service policy |
| Amazon Web Services | Runs the Ristamo server | Republic of Korea (Seoul region) | Stores subscription, usage and device verification information |
| Apple | Payments, subscription status (App Store server notifications and lookups), device verification (App Attest), iCloud sync, Health app | As set out in Apple’s policies | When you use Apple services. Apple’s privacy policy applies |
If you don’t want your information transferred to another country, simply don’t use the AI features. Every logging feature works without AI.
4. Your rights
- You can view, edit and delete your logs in the app. You can get all of your logs with Settings > Export data
- You can turn off Health access anytime in iPhone Settings > Health
- You can withdraw your consent to sending information to AI anytime in the app under Settings > AI > What’s sent to AI. If you withdraw it, you can’t use AI features, but logging keeps working
- To see or delete your subscription and usage information on the Ristamo server, email jihaapp1010@gmail.com (please include the Support ID shown in the app under Settings > AI)
5. Security measures
- All communication is encrypted (HTTPS)
- Secrets such as AI keys are kept only in the server’s secure storage and are never put in the app
- Apple App Attest confirms that requests come from the genuine app, and each user has usage limits
6. Children under 14
Ristamo isn’t intended for children under 14 and doesn’t knowingly collect information from children under 14.
7. Privacy officer and contact
Privacy officer: Jiha Yoon (윤지하) · Contact: jihaapp1010@gmail.com (Support page)
If you’re in Korea, you can also report or get advice on a privacy violation from the Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118). Elsewhere, you can contact the data protection authority where you live.
8. Changes
If this policy changes, we’ll announce it on this page and in the app 7 days before it takes effect.