FITgap

Back up and share FIT files from Wahoo, Zwift and MyWhoosh.

Support

If you have questions or problems, contact fitgap@florianwildt.de.

Please do not send passwords, access tokens or complete workout files without agreeing this beforehand.

Privacy Policy

Last updated: 24 October 2026

This is a translation of the German original. In case of doubt, the German version prevails.

1. Controller

Florian Wildt
Freiweidacher Str. 32
83250 Marquartstein
Germany

Email: fitgap@florianwildt.de

This policy describes how personal data is processed when you use the iOS app FITgap and this information website.

2. Basic principle of the app

At your request, FITgap connects to your own Wahoo, Zwift and MyWhoosh accounts, downloads activity information and original FIT files, and stores them on your iPhone.

FITgap does not operate its own server for storing your accounts or workout data. The developer does not gain access to this data through normal use of the app.

The app contains no advertising, tracking or analytics services.

3. Data processed

FITgap processes the data required for signing in, retrieving, storing and sharing:

Access tokens and, where applicable, tokens used to renew the sign-in.
Provider and activity identifiers, as well as the names and times of your activities.
Workout metrics such as duration, distance, elevation gain and average speed.
Original FIT files. Depending on the recording, these may contain further personal data such as location, heart rate or power data.
Local download, synchronisation and sharing status information, and the Apple Health export status.

The stored data is used to provide the app functions you use.

For Wahoo, you sign in through a system web sign-in at the provider. After you grant permission, FITgap receives access tokens for read-only access to your profile and workout data.

For Zwift, you enter your credentials in the app. FITgap transmits them to Zwift in encrypted form to sign you in. Your password is not stored permanently. Zwift is accessed through an unofficial interface.

For MyWhoosh, you also enter your credentials in the app. FITgap transmits them to MyWhoosh in encrypted form to sign you in and then stores only the access token and your MyWhoosh account identifier, which is required for downloads. Your password is not stored permanently. MyWhoosh is accessed through an unofficial interface. FITgap downloads FIT files through time-limited download links from the storage servers that MyWhoosh specifies.

Access tokens are stored in this iPhone’s keychain and are not synchronised by FITgap through iCloud Keychain.

When connecting to the providers and their download servers, technically necessary information such as your IP address and request data is transmitted. Processing by the providers is governed by their privacy policies:

Activity information, FIT files and calculated metrics are stored in the app’s local storage. FITgap does not offer its own cloud synchronisation. Depending on your Apple and device settings, device backups may contain app data.

When you share via the iOS share sheet, the selected original file is handed to the app or destination you choose, for example HealthFit. A FIT file may also contain sensitive workout and location data. The recipient’s privacy policy applies to any further processing by the recipient.

6. Apple Health

Saving to Apple Health is optional and only happens when you trigger it for an activity, a selection or automatically for new activities, and allow access in iOS.

Writing: FITgap creates a workout in Apple Health from a downloaded FIT file. Depending on the recording, this includes heart rate, respiratory rate, power, cadence, speed, running dynamics, distance, steps, swimming strokes, energy burned, laps, pauses, device name and the recorded route, including virtual coordinates such as those from Zwift.
Reading: FITgap only reads workouts (time span and source app) to check before writing whether the activity is already present. This prevents duplicates. No other health data is read.
Data from Apple Health is not transmitted to the developer or third parties, not used for advertising, marketing or profiling, and not stored in iCloud or other cloud services. FITgap only stores locally when an activity was saved or which app already contained it.
Storage in Apple Health is subject to Apple’s terms and your Health settings, including any iCloud synchronisation of Health by Apple.

You can change or revoke access at any time in Settings › Apps › Health › Data Access & Devices › FITgap. You manage and delete workouts already saved in the Health app.

7. Retention and deletion

The data remains stored locally until you remove it.

“Disconnect” removes the access tokens stored in FITgap for the respective provider. Files already downloaded and activity information are kept.
“Disconnect” does not revoke permission granted at the provider. Please also manage it with the provider.
Turning off automatic saving or deleting FITgap does not remove workouts already saved to Apple Health.
Deleting a FIT file removes the local file. The activity entry and metrics already saved may remain.
To remove all local app storage, delete the app through iOS. “Offload App”, by contrast, keeps documents and data. Disconnect your accounts beforehand, as keychain data can survive an app deletion.

Copies in other apps, at the provider or in device backups are not deleted by this. They must be managed separately there.

8. Contact and support

If you send an email, your email address, the content of your message and any attachments you choose to send are processed in order to handle your request. The email service in use is also involved in this.

Support messages are deleted as soon as they are no longer needed to handle your request and no statutory retention obligations apply.

9. This website

This information page is provided through GitHub Pages. When you visit the page, GitHub processes technical connection data and, in particular, stores IP addresses for security purposes.

No additional analytics tools, advertising services or contact forms are used on this page.

GitHub and the connected providers may also process data outside the EU or the EEA. Details on recipients, retention periods and safeguards can be found in their privacy notices:

GitHub privacy statement

10. Legal bases and rights

Where the processing is attributable to the controller, it takes place to provide the functions you request and to handle related enquiries, on the basis of Art. 6(1)(b) GDPR. The secure operation of this information page and the handling of general enquiries are based on Art. 6(1)(f) GDPR.

Subject to the statutory requirements, you have the rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw any consent you have given with effect for the future.

To exercise these rights, contact fitgap@florianwildt.de. The developer has no access to data stored solely on your device.

You may also lodge a complaint with a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht).

FITgap does not carry out automated decision-making or profiling. Connecting your provider accounts is voluntary; without it, no new downloads from these accounts are possible.