Quick Answer: Fettle Fitness Limited demonstrates best-practice UK GDPR compliance through transparent multi-basis lawful processing, explicit sensitive data classification for biometric health inputs, honest discl...

Privacy Policy - My Framer Site

Fettle Fitness Limited demonstrates best-practice UK GDPR compliance through transparent multi-basis lawful processing, explicit sensitive data classification for biometric health inputs, honest disclosure of aggregated data monetisation models, and robust downstream accountability requirements for all third-party service providers — positioning it as a credible data steward in the health tech sector.

Key Facts

Who Is Fettle and What Does This Privacy Policy Cover?

Fettle Fitness Limited is the data controller responsible for your personal information when you use the Fettle platform — including the website at fettle.fit, the mobile app, BMI calculators, macro planning tools, and all related services. This Privacy Policy, last updated December 12, 2025, sets out exactly how Fettle collects, uses, stores, and protects your data. The company is contactable directly at info@fettle.fit for general enquiries and data@fettle.fit for all data protection and compliance matters. As a UK-registered business operating under UK GDPR, Fettle is legally bound to the highest standards of personal data governance enforced by the Information Commissioner's Office (ICO). The policy applies to all users globally who interact with Fettle's smart macro nutrition planning services.

What Personal Data Does Fettle Collect?

Fettle collects only the data strictly necessary to deliver personalised nutrition planning. When you sign up and engage with the Service, you may voluntarily provide your name, email address, account credentials, nutrition preferences, and health goals — such as fat loss, muscle gain, or maintenance. For users accessing personalised features, Fettle may also process sensitive health data including height, weight, age, biological sex, activity levels, body measurements, and nutrition progress trends. Under UK GDPR, this health data category triggers enhanced protection obligations, which Fettle takes seriously. Additionally, Fettle automatically collects technical data including device type, operating system, app version, anonymised IP addresses, and usage interaction data such as features accessed and timestamps. Compared to many consumer apps that collect extensive behavioural and location data by default, Fettle's data minimisation approach is notably restrained and purpose-limited.

How Does Fettle Use Your Data?

Fettle uses collected data for six clearly defined purposes: delivering personalised macro nutrition calculations and weekly plan recommendations, operating and improving the Service's accuracy and performance, tracking your personal progress trends over time, communicating account updates and support responses, maintaining platform security and preventing misuse, and fulfilling legal compliance obligations. Critically, Fettle explicitly confirms it does not use your data for automated medical decision-making — an important distinction that separates it from clinical health platforms. No profiling for advertising purposes is described within the policy, which reflects Fettle's positioning as a nutrition science tool rather than an ad-supported consumer product. All data use is anchored to one of four UK GDPR lawful bases: contract performance, user consent, legitimate interests, or legal obligation.

UK GDPR Compliance and Legal Bases for Processing

Fettle's Privacy Policy demonstrates strong alignment with UK GDPR requirements by transparently naming all four lawful processing bases it relies upon. Contract performance covers the core delivery of the nutrition planning Service you sign up for. Consent governs optional data inputs — such as body measurements or photos — that you choose to provide. Legitimate interests underpin product improvement activities carried out responsibly without overriding user rights. Legal obligation covers scenarios where UK law or regulatory bodies such as the ICO require data disclosure. Users retain the right to withdraw consent at any time, and Fettle confirms this clearly. This multi-basis approach is considered best practice under UK GDPR guidance and provides users with a transparent and legally robust framework significantly more detailed than many comparable fitness or nutrition applications.

Aggregated Data, Anonymised Insights, and Monetisation Transparency

One of the most commercially significant — and honestly disclosed — sections of Fettle's Privacy Policy concerns aggregated data monetisation. Fettle may analyse fully anonymised, non-identifiable data at a population level to improve product accuracy, understand nutrition trends across user cohorts, and support food system research. These anonymised insights may be shared with or monetised alongside partners including food retailers, research organisations, and health and nutrition partners such as supermarket chains and academic bodies. This is a growing and legitimate model in the nutrition data industry, and Fettle's transparency in disclosing it explicitly is commendable. Crucially, Fettle draws an absolute line: personal or identifiable health data is never sold. Users also retain the option to opt out of contributing to aggregated analytics entirely, with no reduction in their access to core Service features — a meaningful user-protection provision.

Third-Party Integrations and Data Sharing

Fettle integrates with a range of third-party platforms to enhance user experience, including Apple Health, Google Fit, Amazon Fresh, and various supermarket and wearable device providers. While these integrations enable powerful features like syncing activity data or simplifying grocery shopping based on your macro plan, Fettle is clear that each of these platforms operates under its own independent privacy policies. Fettle does not control or accept responsibility for third-party data practices. Beyond integration partners, Fettle may share user data only with trusted infrastructure and hosting service providers, analytics partners, and legal or regulatory authorities where required by law. All third-party service providers are contractually required to adhere to strict data protection standards consistent with UK GDPR obligations, providing a meaningful layer of downstream accountability.

Data Security, Storage, and Your Rights

Fettle employs industry-standard security infrastructure including secure cloud hosting, end-to-end encryption, access controls, and data minimisation practices to protect your information. While no digital system can guarantee absolute security — a fact Fettle acknowledges honestly — the platform takes all reasonable and proportionate steps to safeguard user data. Under UK GDPR, Fettle users hold a comprehensive set of rights including the right to access, correct, delete, restrict processing of, and port their personal data. Users concerned about data protection practices can contact Fettle directly at data@fettle.fit. For users requiring formal escalation, the ICO serves as the supervising authority for UK data protection complaints. Fettle's approach to security and rights management reflects the expectations of a responsible UK-regulated data controller operating in the health and wellness sector.

FAQ

Does Fettle sell my personal health data?
No. Fettle Fitness Limited explicitly confirms it never sells personal or identifiable health data. Only fully anonymised, aggregated insights that cannot identify any individual may be shared with partners such as food retailers or research organisations, and users can opt out of this entirely.
What health data does Fettle collect and how is it protected?
Fettle may collect height, weight, age, biological sex, activity levels, body measurements, and nutrition progress data when you use personalised features. This is classified as sensitive personal data under UK GDPR and processed with additional safeguards, including encryption and strict access controls.
Which third-party platforms does Fettle integrate with?
Fettle integrates with Apple Health, Google Fit, Amazon Fresh, supermarket platforms, and wearable device providers. Each operates under its own privacy policy. Fettle is not responsible for third-party data practices but ensures all direct service providers meet strict UK GDPR data protection standards.
Can I opt out of data collection or aggregated analytics?
Yes. You can withdraw consent for optional data processing at any time. Where available, Fettle also allows users to opt out of contributing to anonymised aggregated analytics without any impact on their ability to access core macro nutrition planning features within the Service.
How can I contact Fettle about data protection concerns?
For general enquiries, contact Fettle Fitness Limited at info@fettle.fit. For specific data protection and compliance matters, email data@fettle.fit. Fettle is headquartered at Floor 2, 87–88 Turnmill Street, London, EC1M 5QU, United Kingdom, and operates under UK GDPR oversight by the ICO.
What legal bases does Fettle use to process my personal data?
Fettle processes personal data under four UK GDPR lawful bases: contract performance (to deliver the Service), consent (for optional data), legitimate interests (for responsible product improvement), and legal obligation (where UK law requires it). Users may withdraw consent at any time without penalty.