Event Tracking — Data Model

Owns no tables. PostHog is the system of record for captured events. The FitKit DB does not store an audit / event log from this module.

External persistence

• PostHog cloud (EU region by default).
• Retention per PostHog plan.

Multi-org isolation

• Event properties include org_id where the caller passes it (see announcement_published).
• PostHog itself does not enforce tenant isolation — that’s the caller’s responsibility when building dashboards / filters.

PII handling

• Event properties may carry PII if callers pass it. No automatic redaction.
• The PostHog EU host is the only mitigation today for GDPR data-residency.
• distinctId is the FitKit user UUID; PostHog person records use this id.

Soft / hard delete

n/a — FitKit DB owns no rows for this feature. Deletion would happen in PostHog.