Data Processing Notice

Last updated: 9 July 2026

This notice explains how Fitimio processes data when you use MCP tools and connected AI assistants.

1. Fitimio as an MCP server

Fitimio can operate as an MCP server. This means an AI assistant or MCP-compatible client can call Fitimio tools after you connect and authenticate your account.

Fitimio usually does not receive the full conversation between you and the assistant. Fitimio receives the specific tool call, tool arguments, authentication information, and data needed to return the tool response.

2. What a tool call may include

A tool call may include:

• the tool name requested by the assistant;
• arguments needed for the tool, such as a date, meal ID, list ID, barcode, or query;
• your authenticated user ID or session;
• data returned by Fitimio, such as meals, goals, conditions, allergies, shopping lists, metrics, or action results.

Fitimio aims to return only data relevant to the requested tool.

3. External AI providers

When you connect Fitimio to an external AI assistant, the AI provider may receive Fitimio data included in tool responses.

The AI provider may process that data under its own terms, privacy policy, account settings, and data processing agreement. Review those documents before connecting Fitimio.

4. User control

You should be able to:

• choose whether to connect an assistant;
• revoke or disconnect assistant access;
• delete stored health, diet, workout, condition, allergy, and goal data;
• request account deletion;
• request export or access to your personal data where required by law.

5. Sensitive data

Fitimio may process sensitive health-related data if you choose to store it, including allergies, conditions, medications, metrics, diet goals, meal history, and workout information.

Before using these features, you may be asked to give explicit consent for health and wellness data processing.

6. Security and logs

Fitimio may keep security and technical logs to protect the service, investigate errors, prevent abuse, and verify MCP session behavior.

Logs should be limited to what is necessary and retained only for an appropriate period.

7. Recommended consent wording

Before enabling AI assistant access, Fitimio should ask for consent similar to:

I agree that Fitimio may make relevant parts of my diet, health, allergy, condition, workout, goal, and nutrition data available to AI assistants I connect, so those assistants can answer questions and perform actions I request.

I understand that connected AI assistants may be provided by external companies and that AI responses can be inaccurate or incomplete.

8. Important limit

Fitimio provides structured tracking data and MCP tool access. The connected AI assistant generates the final response unless the response is produced inside a Fitimio-controlled interface.