Privacy Policy

FITWithRCMC — for people using the FITWithRCMC app

Last updated: September 3, 2026

This policy covers the FITWithRCMC mobile app. If you're a clinic evaluating or licensing the platform, see our Privacy Policy for clinics and this website instead.

1. Who This Applies To

This applies to patients using the FITWithRCMC app through their clinic. Your clinic is the covered entity responsible for your Protected Health Information ("PHI") under HIPAA; FITWithRCMC acts as their Business Associate under a signed Business Associate Agreement, which governs how PHI is handled. See Security & Compliance for more.

2. Information We Collect

• Account information: name, email, phone, password (stored encrypted).
• Health and fitness data: weight, measurements, nutrition and macro logs, workout activity, progress photos, habit tracking, and check-in responses.
• Meal photos: images you upload for nutrition tracking.
• Messages: in-app messages with your coach or care team.
• Apple Health / Google Health Connect data: only if you choose to connect it.
• Device and usage data: app version, device type, crash logs, and general usage analytics.

3. How We Use It

• To operate the app: deliver your program, track your progress, and connect you with your coach.
• To generate AI-assisted features: check-ins, meal photo analysis, and smart meal suggestions.
• To communicate with you about your program and support.
• To maintain security and enforce our Terms of Service.

We do not sell your personal information and do not show ads.

4. Who Your Data Is Shared With

• Your clinic: your assigned coach and authorized clinic staff can see your program, logs, messages, and progress — that's the core function of the app.
• Infrastructure providers: data is hosted on Supabase (database, authentication, storage); video runs through LiveKit Cloud. These providers act as our service providers under contract.
• AI providers: used for AI check-ins, food logging, and meal photo analysis, acting as our service providers and contractually prohibited from using your data to train their own general-purpose models.
• Law enforcement or legal process: only when required by law.

5. Data Security

Data is encrypted in transit and at rest. Row-level security isolates each clinic's data. Access to patient data is role-based and logged. Our infrastructure provider maintains SOC 2 Type II audited controls. No system is 100% secure — see our Terms of Service for how liability is allocated.

6. Data Retention and Deletion

We retain your data for as long as your account is active. You can request deletion of your account and data at any time from within the App, or by contacting [email protected]. Some information may be retained briefly in backups or as required by law. Deleting your account does not delete any copy of your records your clinic keeps separately as part of their own medical recordkeeping — that copy is your clinic's responsibility, not FITWithRCMC's.

7. Your Choices

You can access and update most of your information directly in the app, and request a copy or deletion of your data by contacting us. California residents may have additional rights under the CCPA, including the right to know what personal information we collect and to request deletion — contact us to exercise these rights.

8. Children's Privacy

FITWithRCMC is not directed at children. You must be at least 18 years old to use the app. We do not knowingly collect information from anyone under 18.

9. Changes to This Policy

We may update this policy from time to time. We'll notify you of material changes via the app or email.

10. Contact

Email: [email protected]
Address: RCMC Medical Weight Loss, 800 Crystal Falls Parkway, Unit 7, Leander, Texas 78641, USA