← Back

Your data, your account

A short, plain-English account of what GRC Fit does and doesn't do with your data.

Isolated by user

Sign-in is handled by Firebase Authentication, scoped to your Firebase user id. You can sign in with Google, Microsoft, Apple, or an email/password — your account works across all GRC apps.

No tracking, no analytics

No third-party scripts, no behavior pixels, no marketing cookies. No Google Analytics, no Segment, no anything. The only network calls the app makes are to Firebase Authentication for sign-in and to load the app shell from the host (Azure Static Web Apps).

What's stored where

• Browser localStorage: your saved workouts, the currently in-progress draft, sound/voice preferences, and the app's UI version. Everything you build in Fit lives here, on your device.
• Firebase Authentication: your email and the OAuth identity from your chosen provider, used only to verify it's you on next launch. No workout data is sent to Firebase.
• Service worker cache: a copy of the app's HTML, CSS, JS, and icons so it works offline.

Account removal

To clear your data on this device, sign out and clear site storage in your browser settings. To delete your Firebase account entirely, ask the deployment owner.

License

The source code is licensed under the PolyForm Noncommercial 1.0.0 license. Use freely for personal, hobby, research, or nonprofit purposes. Commercial use is not permitted.