Privacy · Optional analytics
What we measure. What we never touch.
Allfit One analytics is optional. It helps us find failures and understand performance without reading your content or turning your fitness activity into a profile.
Why we use it
We measure whether a screen loads, whether an operation completes, and how long it takes. We also use aggregate signals to keep the API and background processes available. We do not use this information for advertising, health decisions, or commercial profiles.
The data boundary
Every event passes through a closed allowlist. If it contains a property that is not permitted, it does not leave Allfit One.
We may measure
- The screen category and the general step in a flow.
- The technical operation name, its outcome, and its HTTP status group.
- Durations, Web Vitals, and aggregate dependency timing.
- The environment, application release, platform, and service.
- Aggregate job outcomes and operational failure signals.
We never collect
- Names, emails, phone numbers, or account, person, and organization identifiers.
- Full URLs, parameters, request or response bodies, and user-entered text.
- Passwords, tokens, cookies, IP addresses, or device identifiers.
- Health data, nutrition, body measurements, training sessions, or personal records.
- Session recordings, autocapture, heatmaps, surveys, or automatic SDK events.
A pseudonym, not your identity
When you consent, the API creates a pseudonymous identifier with a protected key. PostHog does not receive your identity-provider subject, and Allfit One does not create personal profiles in the analytics provider.
Provider and environment
Allowed events are processed in PostHog US. Analytics is disabled in development and preview. In production it requires both your consent and an active remote gate for the product you use.
Processor: PostHog US · Personal profiles: disabled
Limited retention
- Product analytics
- Up to 90 days
- Operational logs
- Up to 30 days
At the end of each period, data must be deleted or aggregated so it can no longer be used to follow an individual pseudonym.
You stay in control
Before you consent
We do not load the SDK, request the gate, or send events.
When you withdraw
Capture stops and events that occur while it is off are discarded.
Privacy signals
Global Privacy Control and Do Not Track keep analytics disabled on the web.
Withdrawal and deletion
You can change your choice from the Privacy control in Allfit Studio, Allfit Space, or the authorized Backoffice. To request deletion of information associated with your pseudonym, contact us. We will verify the request without asking you to publish sensitive data.
hello@allfit.one