Privacy Policy
Last updated 2 September 2026 · Effective 2 September 2026
The short version. Body measurements never leave the device you entered them on. Your account and the sizes you record sync so you can use FitMap on more than one device. Share cards and family sharing carry sizes only. We don't sell your data, show ads, or run third-party trackers.
Who we are
FitMap ("we") provides a sizing passport at fitmap.one and app.fitmap.one. We are based in Toronto, Ontario, Canada and are the organisation accountable for the personal information described here under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). For privacy questions, to access your information, or to make a complaint, email our privacy contact at hello@fitmap.one.
What we collect
| Data | Why | Where it lives |
|---|---|---|
| Email address and a password hash (scrypt, salted) | To sign you in and sync your passport | Our database |
| Profile names, optional birth years, relationships | To label the passports you manage | Your device and our database |
| Items you record: category, brand, label size, fit note | The passport itself; powers translation and sharing | Your device and our database |
| Body measurements (foot length, height, scan results) | To sharpen size recommendations | Your device only. Never uploaded. |
| Fit Family membership, roles, and the categories you share | To show the right people the right sizes | Our database |
| Published share cards (name, chosen sizes, expiry) | To serve the link you chose to create | Our database, until you delete it or it expires |
| Waitlist entries you submit | To email you about the feature you asked for | Our database |
What we do not collect
- No advertising identifiers, no third-party analytics, no tracking pixels.
- No photographs. Camera images used for measuring are processed into a single number and are not stored or transmitted.
- No payment card details. When paid plans launch, a PCI-compliant processor will handle payments and we will update this page first.
Measurements: how the promise is kept
Sharing, and who can see what
- Fit Family. People you invite see only the passports you include and only the categories you pick. You can change or revoke this at any time, and they see the change on their next sync.
- Share cards. A card is a link you create deliberately. It shows the categories you toggled on, expires on the date shown, and never contains measurements. Anyone with the link can open it, so share it as you would a phone number.
- Retail partners. Where a retailer integration exists, it receives a size and a confidence score. Nothing else.
- We never sell personal data and do not share it for advertising.
Processors we use
| Provider | Purpose | Data seen |
|---|---|---|
| Vercel | Hosting and serverless functions | Requests, IP addresses in transient logs |
| MongoDB Atlas | Database (AWS, US East) | Accounts, passports, families, cards |
| Resend | Transactional email: verification, reset, invites | Recipient email and message content |
| Anthropic | Optional AI assistant on the website | The messages you type to it, not your passport |
Where your data is processed. Our servers and database are located in the United States. Personal information transferred outside Canada is subject to the laws of that country and may be accessible to its courts and authorities. We use contractual protections with each provider to keep your information safe and to limit them to processing it on our instructions. For users in the UK or EEA, those contracts include Standard Contractual Clauses.
Consent, and why we hold each thing
Under PIPEDA we collect, use and disclose personal information only for purposes a reasonable person would consider appropriate, and with your consent.
- Implied consent when you create a passport and add sizes: we need that information to provide the service you asked for.
- Express consent for anything optional: notifications, the AI assistant, emails about features you asked to hear about, and every act of sharing you initiate.
- Without consent only where the law permits or requires it, such as investigating a breach of an agreement or responding to a lawful order.
- You can withdraw consent at any time by turning a feature off, removing a share, or deleting your account. Some withdrawals mean we can no longer provide part of the service, and we will say so at the time.
If you are in the UK or EEA, our legal bases are contract (running your account), legitimate interests (security and fault-fixing) and consent (the optional items above).
How long we keep it
- Account and passport data: until you delete your account.
- Share cards: until they expire or you delete them.
- Invites: 14 days if unaccepted; family records until removed by either person.
- Server logs: up to 30 days.
Your rights
You can access, correct, export, or delete your information. Deleting your account inside the app (Settings → Delete my account) erases your account, the profiles you manage, your published cards, and your family links immediately. You may also email us; we respond to access requests within 30 days, as PIPEDA requires, and will tell you if we need more time and why.
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376). Residents of Quebec, the UK or the EEA may also contact their own regulator.
Security
Transport is TLS only. Passwords are scrypt-hashed with per-user salts and never stored in plain text. Sessions are random device tokens you can revoke by signing out. Access to production data is limited to those who need it.
Children
FitMap accounts are for people aged 13 or older (14 in Quebec, 16 where other local law requires). Children's passports exist only inside a guardian's account, have no login of their own, and are never shared with third parties. If you believe a child created an account, email us and we will remove it.
Accountability
We have designated a privacy contact reachable at hello@fitmap.one. We remain responsible for personal information transferred to the service providers listed above, and we require each of them to protect it to a comparable standard.
Changes
We will post changes here and, for anything material, tell you in the app before it takes effect.