Fitbit is a fitness and health tracking service built around wearable devices and the Fitbit app. According to its privacy policy, health data is processed on the basis of explicit consent. The service is aimed at individuals who want to track their activity and health. For users outside the EEA, the UK and Switzerland, the provider is Fitbit LLC; for users in those regions, Fitbit International Unlimited in Dublin is the contracting party and data controller.
Fitbit LLC is a US company based in San Francisco. The privacy policy says that data is transferred to the United States and other countries, relying on the EU-U.S. and Swiss-U.S. Data Privacy Frameworks and on standard contractual clauses. Profile information is processed jointly with Google entities. The policy does not say where Fitbit data is stored and does not mention an EU storage option. For a European organisation, the main points are US jurisdiction over a US-operated service, joint processing with a US group, and the absence of an EU storage commitment. No self-hosted variant is mentioned.