Fitlyze (Beta) Version: 3.0 Published: August 10, 2026 Effective date: August 10, 2026 Last reviewed: August 10, 2026 Supersedes: version 2.0 (June 26, 2026)
This Cookie Policy explains how DerMo Technologies Inc. (d/b/a Fitlyze) ("Fitlyze", "we", "us", "our") uses cookies and similar technologies in our website and Progressive Web App (the "Service"). It is a notice that supplements our Privacy Policy — it is not a contract you need to "accept." Your specific choices are made through the consent options described below. How we handle marketing communications is described in our separate Marketing Policy.
1. What these technologies are
"Cookies and similar technologies" means small files and storage mechanisms that a site or app uses on your device — including cookies, local storage and session storage, IndexedDB, service-worker cache (used to make the PWA load and work), and pixels. We use the word "cookies" below to refer to all of these.
2. We do not use a cookie banner — here's why
The Service does not run analytics or any non-essential tracking before you sign in. Before login, we use only the strictly necessary technologies needed to load the app and let you sign in. Analytics start only after you sign in, and only if you have opted in (see Section 3). Because nothing non-essential is placed before you've made a choice, we don't show a cookie banner — your choice is made through a dedicated, optional analytics consent at sign-up and can be changed anytime in your profile.
This is still true now that Fitlyze is a paid beta. The payment and fraud-prevention storage described in Section 3 is set only when you open the subscription checkout, is strictly necessary to complete a payment you have asked us to take, and is never used for advertising or analytics — so it does not change the analysis above and does not require a banner.
3. The categories we use
- Strictly necessary — required to run the Service: signing you in, keeping your session secure, and the service-worker cache that makes the PWA work. These are always active and do not require consent, because the Service cannot function without them.
- Payment and fraud prevention (Stripe) — when you subscribe, change plan, or manage your subscription, our merchant of record Stripe sets cookies and reads device and browser signals on its checkout in order to process the payment and detect payment fraud. These are strictly necessary for a transaction you have requested and do not require separate consent; they are not used for advertising, profiling, or analytics. They are set only if you open the checkout — a user who never subscribes never receives them. Stripe processes this data as an independent controller under its own privacy policy (see our Sub-processor & Service Provider List, Section 2).
- Functional — after you sign in, we remember your choices (such as language, units, or theme) to provide the experience you've asked for.
- Analytics (PostHog) — we use PostHog (hosted in the European Union, Frankfurt) to understand how the app is used so we can improve it and our communications. It collects usage and device information (such as screens viewed, interactions, and diagnostic data), primarily in aggregate, and stores a first-party identifier and session information (as a cookie and/or in local storage). Analytics run only if you opt in, and only after you sign in.
- Advertising / marketing cookies — we do not currently use advertising or third-party marketing cookies. If we add them in the future, we will update this Policy and ask for your consent where required.
4. Your choices
- EU/EEA, Switzerland, and Québec: we use non-essential technologies (analytics) only with your prior opt-in consent — given through the optional analytics checkbox at sign-up (off by default). Strictly necessary technologies do not require consent.
- United States: the same opt-in applies — analytics are off by default and run only if you opt in through the optional analytics checkbox at sign-up. We also honor the Global Privacy Control (GPC) signal, and you can turn analytics off anytime in your profile.
- Anytime: you can turn analytics on or off in your profile settings. Turning it off stops analytics collection going forward.
- Browser/device controls: you can also clear or block cookies and local storage through your browser or device settings; note that blocking strictly necessary technologies may stop parts of the Service from working.
5. Storage details (overview)
| Type | Purpose | Stored as | Retention |
|---|---|---|---|
| Strictly necessary | Sign-in, session security, PWA loading | Cookie / token / service-worker cache | Your session, or until you log out / the cache refreshes |
| Payment & fraud prevention (Stripe) | Process your subscription payment; detect payment fraud | Cookie / local storage set by Stripe at checkout | Per Stripe's own retention policy; set only when you open the checkout |
| Functional | Remember preferences (language, units, theme) | Local storage / cookie | Until you change them |
| Analytics (PostHog) | Understand and improve usage | Cookie / local storage (first-party identifier + session) | Up to approximately 12 months |
6. Changes to this Policy
We may update this Policy. If we make material changes, we will notify you by in-app notice or email and, where required, ask for your consent. The effective date above shows when the current version took effect.
7. Contact
DerMo Technologies Inc. (d/b/a Fitlyze) 2300 Yonge Street, Suite 1600, Toronto, ON M4P 1E4, Canada privacy@fitlyze.app