Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Apr 19, 2026; our capture on Oct 17, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“In certain circumstances, the DPF provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the DPF Principles.”
“Persons under the age of 13, or any higher minimum age in the jurisdiction where that person resides, are not permitted to create accounts unless their parent has consented in accordance with applicable law.”
“we use the information to troubleshoot and protect against errors; perform data analysis and testing; conduct research and surveys; and develop new features and Services, which may include generative artificial intelligence models.”
“We may preserve or disclose information about you to comply with a law, regulation, legal process, or governmental request; to assert legal rights or defend against legal claims; or to prevent, detect, or investigate illegal activity...”
“To the extent that information we collect is health data or another special category of personal data subject to the GDPR, we ask for your explicit consent to process the data.”
“Fitbit and Google will share with each other limited profile information about their Fitbit users, notably the user's name, photo, and friends list.”
Fitbit's privacy policy explains what data Fitbit collects about you, how it uses and shares that data, and what rights you have over it. Fitbit does not sell your personal information, and it shares your name, photo, and friends list with Google. Before any material changes to the policy take effect, Fitbit will notify you and give you a chance to review the changes before deciding whether to keep using the service.
This privacy policy establishes the terms under which Fitbit collects, uses, retains, shares, and discloses user information. Fitbit collects precise geolocation data only upon user-granted access and requires explicit consent before processing GDPR-covered health data or special category personal data. User information may be used to develop new features and Services, including generative AI models, and is shared with Google (name, photo, friends list), corporate affiliates, service providers, and partners—the latter bound to process data only on Fitbit's instructions under confidentiality and security measures. Fitbit categorically prohibits the sale of personal information, retains data for up to 90 days following account deletion, and commits to advance notice and a review opportunity before material policy changes take effect.
As a Fitbit user, your precise location data is collected only if you choose to grant Fitbit access, and your health data is processed only after Fitbit obtains your explicit consent. Your name, photo, and friends list are shared with Google, and your information may be used to develop features including generative AI models. If you delete your account, most data is removed within 30 days, but device-recorded and backup data may remain for up to 90 days. If legal process such as a subpoena seeks your information, Fitbit's policy is to notify you unless legally prohibited. Users covered by the Data Privacy Framework have access to binding arbitration as a last resort for unresolved complaints. You can review any material policy changes before they bind you—and at that point you may decide whether to continue using the Services.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“In certain circumstances, the DPF provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the DPF Principles.”
“Persons under the age of 13, or any higher minimum age in the jurisdiction where that person resides, are not permitted to create accounts unless their parent has consented in accordance with applicable law.”
“we use the information to troubleshoot and protect against errors; perform data analysis and testing; conduct research and surveys; and develop new features and Services, which may include generative artificial intelligence models.”
“We may preserve or disclose information about you to comply with a law, regulation, legal process, or governmental request; to assert legal rights or defend against legal claims; or to prevent, detect, or investigate illegal activity...”
“To the extent that information we collect is health data or another special category of personal data subject to the GDPR, we ask for your explicit consent to process the data.”
“Fitbit and Google will share with each other limited profile information about their Fitbit users, notably the user's name, photo, and friends list.”
“We never sell the personal information of our users.”
“We will notify you before we make material changes to this policy and give you an opportunity to review the revised policy before deciding if you would like to continue to use the Services.”
“The Services include features that use precise geolocation data, including GPS signals, device sensors, Wi-Fi access points, and cell tower IDs. We collect this type of data if you grant us access to your location.”
“Our policy is to notify you of legal process seeking access to your information, such as search warrants, court orders, or subpoenas, unless we are prohibited by law from doing so.”
“If you choose to delete your account, please note that while most of your information will be deleted within 30 days, it may take up to 90 days to delete all of your information, like the data recorded by your …”
“We transfer information to our corporate affiliates, service providers, and other partners who process it for us, based on our instructions, and in compliance with this policy and any other appropriate confidentiality and security measures.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Binding arbitration available for unresolved DPF complaints and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.