Patient Privacy Policy — FITWithRCMC
Privacy Policy
FITWithRCMC — for people using the FITWithRCMC app
Last updated: September 24, 2026
This policy covers the FITWithRCMC mobile app. If you're a clinic evaluating or licensing the platform, see our Privacy Policy for clinics and this website instead.
1. Who This Applies To
This applies to patients using the FITWithRCMC app through their clinic. Your clinic is the covered entity responsible for your Protected Health Information ("PHI") under HIPAA; FITWithRCMC acts as their Business Associate under a signed Business Associate Agreement, which governs how PHI is handled. See Security & Compliance for more.
2. Information We Collect
- Account information: name, email, phone, password (stored encrypted).
- Health and fitness data: weight, measurements, nutrition and macro logs, workout activity, progress photos, habit tracking, and check-in responses.
- Meal photos: images you upload for nutrition tracking.
- Messages: in-app messages with your coach or care team.
- Location (GPS): collected only while you are actively tracking a walk or run in the app. We use it to map your route and calculate your distance and pace, and to keep tracking accurately if your screen locks or the app is in the background during that session. Tracking stops when you finish or discard the session. We never track your location at any other time, and we never use it for advertising. If you deny location access, the app still works — walk/run sessions record time instead of route and distance.
- Apple Health / Google Health Connect data: only if you choose to connect it.
- Device and usage data: app version, device type, crash logs, and general usage analytics.
3. How We Use It
- To operate the app: deliver your program, track your progress, and connect you with your coach.
- To generate AI-assisted features: check-ins, meal photo analysis, and smart meal suggestions.
- To communicate with you about your program and support.
- To maintain security and enforce our Terms of Service.
We do not sell your personal information and do not show ads.
4. Who Your Data Is Shared With
- Your clinic: your assigned coach and authorized clinic staff can see your program, logs, messages, and progress — that's the core function of the app.
- Infrastructure providers: data is hosted on Supabase (database, authentication, storage); video runs through LiveKit Cloud. These providers act as our service providers under contract.
- AI providers: used for AI check-ins, food logging, and meal photo analysis, acting as our service providers and contractually prohibited from using your data to train their own general-purpose models.
- Law enforcement or legal process: only when required by law.
5. Data Security
Data is encrypted in transit and at rest. Row-level security isolates each clinic's data. Access to patient data is role-based and logged. Our infrastructure provider maintains SOC 2 Type II audited controls. No system is 100% secure — see our Terms of Service for how liability is allocated.
6. Data Retention and Deletion
We retain your data for as long as your account is active. You can request deletion of your account and data at any time from within the App, or by contacting [email protected]. Some information may be retained briefly in backups or as required by law. Deleting your account does not delete any copy of your records your clinic keeps separately as part of their own medical recordkeeping — that copy is your clinic's responsibility, not FITWithRCMC's.
7. Your Choices
You can access and update most of your information directly in the app, and request a copy or deletion of your data by contacting us. California residents may have additional rights under the CCPA, including the right to know what personal information we collect and to request deletion — contact us to exercise these rights.
8. Children's Privacy
FITWithRCMC is not directed at children. You must be at least 18 years old to use the app. We do not knowingly collect information from anyone under 18.
9. Changes to This Policy
We may update this policy from time to time. We'll notify you of material changes via the app or email.
10. Contact
Email: [email protected]
Address: RCMC Medical Weight Loss, 800 Crystal Falls Parkway, Unit 7, Leander, Texas 78641, USA