Privacy Policy
1. Who we are
FITLYTIX is a fitness management platform operated by [LEGAL ENTITY], registered at [REGISTERED ADDRESS], India ("FITLYTIX", "we", "us"). This policy explains what personal data we handle, why, and what rights you have over it.
It applies to the FITLYTIX mobile app, the fitlytix.in website, and any related services.
2. Who controls your data
FITLYTIX is sold to gyms. That shapes who is responsible for what, and it matters when you want to exercise your rights.
| Data | Controller | Our role |
|---|---|---|
| Client profiles, health metrics, workouts, nutrition plans, session records | The gym that invited you | Data processor, acting on the gym's instructions |
| Gym and trainer accounts, billing, support correspondence | FITLYTIX | Data fiduciary / controller |
| Website analytics and security logs | FITLYTIX | Data fiduciary / controller |
If you are a gym client, your gym decides what is recorded about you and for how long. We will help you reach them, and we act on deletion requests directly where the law requires it.
3. What we collect
Account information
- Name and email address
- Phone number, where provided
- Role, meaning gym owner, trainer or client, and the gym you belong to
- A securely hashed password. We never store passwords in readable form
Health and fitness information
This is sensitive data and we treat it accordingly. Depending on what your trainer records, it may include:
- Height, weight, body measurements and derived values such as BMI
- Fitness level and training goals
- Injuries, physical limitations and health notes relevant to safe training
- Workout programs assigned to you and your logged performance
- Nutrition and meal plans, including macronutrient targets
- Session bookings and attendance history
Health information is entered by you or by your trainer on your behalf. It is used to plan and track your training, and nothing else.
Technical information
- Device type, operating system and app version
- IP address and approximate region, from server logs
- Timestamps of sign-in and key actions, kept for security and troubleshooting
What we do not collect
- Payment card numbers, which we never see or store
- Government identity numbers such as Aadhaar or PAN
- Precise GPS location or background location tracking
- Your contacts, photos, microphone or camera, unless you explicitly attach something
4. Why we use it
| Purpose | Basis |
|---|---|
| Running your account and delivering the service | Performance of a contract |
| Recording and displaying health and training data | Your consent, given when you accept your invitation |
| Sending transactional email such as invitations and password resets | Performance of a contract |
| Keeping the service secure and diagnosing faults | Legitimate interest |
| Meeting tax, accounting and legal obligations | Legal obligation |
We do not sell personal data. We do not share it with advertisers. We do not use it to train machine learning models.
5. Who we share it with
We share data only with the service providers needed to run FITLYTIX:
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Database, authentication and file storage | All account and training data |
| Resend | Transactional email delivery | Email address and message content |
| GitHub Pages | Hosting for fitlytix.in | Server logs, including IP address |
Each provider is bound by contract to process data only on our instructions. Some operate servers outside India; where that happens, transfers are made under appropriate safeguards.
We will also disclose data where we are legally compelled to, or to protect someone's safety. If we are ever acquired, data moves with the business and you will be told before your data becomes subject to a different policy.
6. Who can see your data inside your gym
- Clients see only their own profile, plans and progress.
- Trainers see the clients assigned to them.
- Gym owners and admins see all trainers and clients at their gym.
- Other gyms can never see your data. Access is enforced at the database level, not just in the interface.
7. How long we keep it
- Active accounts: for as long as the account exists.
- Deleted accounts: removed from live systems within 30 days.
- Backups: purged on a rolling 90-day cycle.
- Financial records: retained as long as Indian tax law requires.
- Security logs: 12 months.
When a gym stops using FITLYTIX, its data is deleted 90 days after the account closes, unless it asks for an export first.
8. How we protect it
- Encrypted in transit with TLS, and at rest
- Row-level security so every query is checked against the requesting account
- Passwords stored only as salted hashes
- Sign-in links that expire and can be used once
- Access to production systems limited to staff who need it
No system is perfectly secure. If a breach affects your personal data, we will notify you and the Data Protection Board of India as required by law.
9. Your rights
Under the Digital Personal Data Protection Act, 2023, you may:
- Access: get a copy of the data we hold about you
- Correct: fix anything inaccurate or incomplete
- Erase: have your data deleted where no legal duty requires us to keep it
- Withdraw consent: at any time, without affecting past processing
- Nominate: name someone to exercise these rights if you die or become incapacitated
- Complain: to our grievance officer, and then to the Data Protection Board of India
Write to support@fitlytix.in and we will respond within 30 days. To delete your account yourself, see Delete Your Account.
10. Children
FITLYTIX is not intended for anyone under 18. A gym may train a minor only with verifiable consent from a parent or guardian, and that gym is responsible for obtaining it. Tell us at support@fitlytix.in if you believe we hold a child's data without consent and we will delete it.
11. Cookies
This website sets no advertising or tracking cookies. The app and the onboarding pages store a session token in your browser or device so you stay signed in. Clearing site data signs you out.
12. Changes
We will post any changes here and update the date at the top. If a change materially affects your rights, we will email you before it takes effect.
13. Contact
Grievance Officer: [GRIEVANCE OFFICER]
Email: support@fitlytix.in
Address: [LEGAL ENTITY], [REGISTERED ADDRESS], India
If you are unhappy with our response, you may escalate to the Data Protection Board of India.