PRIVACY.md

# Privacy policy

Last updated: August 30, 2026

Fitness Ledger is a skills-only plugin. Its publisher does not operate a Fitness Ledger server, receive user ledger contents, collect telemetry, sell personal data, or retain user data.

## Data processed

At the user's direction, Fitness Ledger may process nutrition and fitness information inside ChatGPT, including food and drink entries, nutrient values, hydration, body weight, goals, timezone, workout records, activity snapshots, corrections, and source provenance. This information may be sensitive personal data. Users should provide only information needed for their requested tracking workflow.

Fitness Ledger is not intended to collect or process protected health information from medical providers or health plans, medical records, diagnoses, prescriptions, government identifiers, payment-card data, passwords, authentication secrets, or other restricted data. Do not place those materials in a Fitness Ledger file.

## Purpose and storage

The plugin processes data only to perform user-requested logging, validation, reporting, correction, and fitness-source reconciliation. Canonical files are stored in the user's ChatGPT Library and remain subject to the user's ChatGPT account, workspace, retention, and file controls. The publisher does not receive a copy and has no independent retention period because it retains no user data.

Bundled Python scripts are offline developer and test references. ChatGPT runtime use does not require launching them, and they do not transmit telemetry or ledger contents.

## Recipients and connected sources

Fitness Ledger does not disclose ledger contents to the publisher or unrelated third parties. A user may separately choose to use a connected fitness source or provide an exported snapshot. Those services and connections are outside this skills-only plugin and are governed by their own permissions and privacy terms. The plugin must not transmit ledger contents to another service unless the user explicitly requests that action.

## User controls

Users control what they enter and may inspect, correct, export, replace, or delete their Fitness Ledger Library files using ChatGPT's available Library controls. They may stop processing by disabling or uninstalling the plugin and may disconnect optional external sources separately. Corrections preserve an audit trail inside the user's own ledger unless the user deletes or replaces that file.

## Repository privacy

Do not commit real personal health data, food logs, account exports, API tokens, credentials, or personal images to the public repository or an issue. Public bug reports should use synthetic examples only.

## Changes

Material changes to this policy will be published in this repository and identified by an updated date.