Oddbean

Looking for an open-source privacy oriented fitness tracker? I have really been enjoying FitoTrack. FitoTrack is a mobile app for logging and viewing your workouts. Whether you’re running, cycling or hiking, FitoTrack will show you the most important information, with detailed charts and statistics. It is open-source and completely ad-free. Features: • Track workouts. Choose the type of sport you would like to track and just start running, cycling or hiking, for example. You can see the general information right below the map on the tracking screen. • View your workouts. View general information such as date, time, duration, distance, speed and pace. See your route on a map. Work out your level of performance from the speed diagram. • Open-Source. There is neither advertisement nor tracking, and the source code is open and licensed under the GPLv3. https://file.nostrmedia.com/p/4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d/d0f5a79b909fda7a9f3ce60fa48b163bb9b750756b6410966dbd37e3fc2faf20.png https://file.nostrmedia.com/p/4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d/11d8d149a13225e0f890c16a4b9e64c98e1ae8093e8f533bbe443938c0d476cf.png https://file.nostrmedia.com/p/4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d/396a4bb2a9a93e81700c0d15694d2d1eb14d108a9d07774fe01c466b2b3bd24f.png https://file.nostrmedia.com/p/4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d/65c682f2713a11367b4ed7a88a4bde56568fb2389727648d07950f1f534311e8.png https://file.nostrmedia.com/p/4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d/d13dee42f5eba2995f5bc901ce27162aef09a2a564a1e8ad9d79eeb2e80eb664.png https://file.nostrmedia.com/p/4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d/2e139354ff7bff7deec48c381330240fb0574b3cadd4000de80289515aef514e.png Check it out! The repo is on Codeberg and the official release is on Google Play and F-Droid only, so... I recommend getting it from F-Droid Basic and not a third party like Obtanium. Get it here: https://codeberg.org/jannis/FitoTrack For those who wonder why not Obtanium? My views align with PrivacyGuides and modern security standards regarding obtaining apps from F-Droid. I don't recommend getting apps from F-Droid unless it's the only option. If F-Droid must be used, F-Droid Basic is the preferred choice. F-Droid Basic supports automatic background updates without privileged extension or root and has a reduced feature set, limiting the attack surface. Third-party F-Droid clients can have numerous issues, such as lacking proper mirroring support. For this reason, I recommend avoiding Neo Store and no longer suggest using any third-party clients for F-Droid repositories. #Ikitao #Fitness #OpenSource #Privacy

Yes, location data is stored on the device. https://file.nostrmedia.com/p/4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d/b59c2da8123ae2550e1f379c4cfc3394a15416c3aa13e88d47eec09c9ffe94e7.png Good question. Checking on device sync in the matrix forum now. Will get back to you when I hear something.

FitoTrack has the option to regularly export data. One would need setup one's own cloud sync that would look into the directory and sync it. The other device would also need such a setup. An auto-import functionality does not exist, though the data would be synced, so one just needs to manually import the data. There is also another way... The export mechanism allows defining an URL. FitoTrack will send POST requests to this URL frequently. You can read more about it here: https://codeberg.org/jannis/FitoTrack/wiki/Auto-Export

No, those are images I pulled from the repo. I've only recently found it, but I really like it. It's exactly what I've been looking for. All location data stays on the phone without clear consent to share it. https://file.nostrmedia.com/p/4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d/b59c2da8123ae2550e1f379c4cfc3394a15416c3aa13e88d47eec09c9ffe94e7.png

One of us is confused about how Obtainium works. AFAIK it's not a third-party client for F-Droid. Rather it downloads releases directly from the code forge used by the app developers (usually HitGub). Also, can you link to a good summary of the perceived security issues with using F-Droid, and what the alternatives are to using that, Goggle Prey Store (obviously not a good idea) or Obtainium?

The debate about F-Droid security and trustworthiness has been ongoing for a while now with passionate arguments on both sides, so I will let you go down that rabbit hole for yourself. The main issue for me with F-Droid is having to trust not only the dev but also F-Droid. This is basic OPSEC. If you can get it from the source (GitHub usually) without also having to trust a 3rd party, then that is basic security practice. If the release is on GitHub, the Obtanium is just pulling from the repo. If the dev releases the apk on F-Droid only, then that is the release repo (not GitHub/GitLab, Codeberg), straight from the dev. Using Obtanium, in this case, now introduces a third party, so while the risk is minimal compared to an alternative client like Neo Store, I still recommend following best OPSEC practices and just getting the apk from the source, which in this particular case is not Codeberg, or GitHub, or GitLab, but F-Droid. I already spoke about why I recommend F-Droid Basic in the post. Here is more info on the subject: https://discuss.privacyguides.net/t/remove-note-about-getting-f-droid-apps-from-obtanium/14440

Thanks a lot for the detailed response. Just posting the link would have been quicker for you, so I appreciate you taking the time. "If the dev releases the apk on F-Droid only, then that is the release repo (not GitHub/GitLab, Codeberg), straight from the dev. Using Obtanium, in this case, now introduces a third party" I guess the underlying issue here is one of dev practice. If all mobile app devs ran their own release repo, independent of *both* code forge and app library, then something like Obtainium could always download directly from the dev. Installing with F-Droid could then be an automated process of adding that repo, and installing from it. At least as an option, for those who don't want to trust the F-Droid team to compile from source. As things stand, people using Android apps are usually forced to trust either Goggle Prey Store, GritHub, or F-Droid. I know which of the 3 I trust. F-Droid is the only one where full source code is available for *every* link in their distro chain. In the long term though, the solution to all this is Reproducible Builds. Or some other way of checking whether a binary (or server) is compiled from the published source code.

this might make me start using a fitness tracker, i never did because i don't want something that stores the metrics in some proprietary format and uploads them to a cloud service that has then to be queried with a proprietary API it's literally my own data ffs looks like it supports common bluetooth LE heart rate sensors as well: https://codeberg.org/jannis/FitoTrack/wiki/Heartrate

Not only will i have to look at the tracker but also at the f-droid store app i'm using. I switched to o-droid a while back because i don't want to manually update everytime. Also i'll have to look at the mentioned privacyguides why i should not use obtainium. The endless struggles of trying to be aware of privacy... Sometimes i wonder if i should just stop using digital stuff and go 3 decades back in terms of technology.