Last updated 11 September 2026 (advertising section added) · Fitness Moonshot is published by Money Moonshot LLC.
Your health data stays on your device. We never receive it.
Training sessions, food log, supplements, medications and journal entries are stored only in the app's local storage on your phone. They are never uploaded, synced, or transmitted to any server — ours or anyone else's.
One thing: if you choose to create an account, we store your email address and a salted hash of your password. That is the entire server-side record — an account is an identity for the future community board, password reset, and deletion, nothing more. Using the app without an account collects nothing at all. There are no analytics, no advertising, no crash reporting, and no third-party SDKs.
Gender, age, weight and height — used to estimate your resting burn — are stored on your device with the rest of your data and are not sent to us or tied to your account.
Delete account (in My Profile) permanently removes your email, password hash, and sessions from our server — a real deletion, not a flag. Password reset emails you a 6-digit code that expires in 15 minutes; codes are stored hashed and burn after 6 wrong attempts.
Everything you log — workouts, sets and weights, foods and portions, supplement and medication schedules, journal text — is written to local storage on your device and read back only by the app on that device. Deleting the app deletes this data. There is no copy anywhere else, which also means we cannot recover it for you: if you want a backup, take one yourself before switching phones.
For your health log, the app makes one kind of network request: when you search the food database, the text you typed into the search box is sent over HTTPS to fitnessmoonshot.com, which looks it up in a public USDA nutrition table and returns matches. That request carries the search text and nothing else — no user identifier, no device identifier, no health data, no location. We do not build profiles from searches. Standard web-server logs (IP address, timestamp) are retained briefly for security and capacity purposes, as on any website. Everything else in the app works fully offline.
The optional account is the other case, and it is separate from your log. Creating an account, confirming your email, signing in, resetting a password and deleting the account each talk to our server and carry only what they need: your email address, the name you chose, a password hash, and a session token. None of your workouts, food, water, weight, medication or journal entries are ever included.
Because your entries never reach us, we do not "collect" consumer health data as defined by laws such as Washington's My Health My Data Act. The app does not read from or write to Apple HealthKit. If we ever add optional sync or backup of health data, it will be introduced with explicit consent, a rewritten version of this policy, and matching App Store privacy disclosures before the feature is enabled — never as a side effect of an update.
The iOS app can show your daily step count. With your permission (iOS's "Motion & Fitness" prompt), it reads the count from your phone's motion chip and displays it alongside your training log. The count is handled like everything else you log: it stays on your device and is never transmitted. The app does not read from or write to Apple Health, and declining the permission simply hides the steps card.
Fitness Moonshot is a personal logging tool for adults managing their own training, nutrition and medication schedules. It is not directed to children and collects nothing from anyone, including children.
Fitness Moonshot shows no ads today. A future version of the free app may include ads. If it does, we will update this policy and the app's App Store and Google Play privacy details before that version is released, and say here exactly what an ad partner receives. Your health log (workouts, food, supplements, medications, weight and journal) stays on your device and is never shared with an ad network.
If this policy changes we will update the date above and post the revised version at this URL.
Questions about privacy: support@moneymoonshot.com