FitOnTap Privacy Policy

1. What FitOnTap stores about you

Everyone:

• Your name, email address and, if you give it, your phone number and city.
• A profile photo, if you add one.
• Your language, time zone, currency and units.
• How you sign in: an email code, Google, or Apple. We never see a password.
• A push-notification token for each phone where you allow notifications, and the notifications we sent you.
• Messages you send in FitOnTap chat.

If you are a trainer:

• Your bio, specialities, business name and the certificates and documents you upload (which may include identity documents).
• Your availability, leave dates and reminders.
• The ways you get paid — a UPI ID, or a bank account name, number and IFSC — which are shown to your clients so they can pay you.
• Where you offer training: a pin code, a radius, a fee, and the languages you teach in.
• The records you keep about your clients (see "If you are a client"), which you enter as their trainer.

If you are a client:

• Your goal.
• Personal details: date of birth, gender, height, starting and target weight, occupation, activity level, address, an emergency contact's name and phone, and your diet preference.
• Health answers, only with your consent: allergies, conditions, injuries, medications, surgeries, whether a doctor has cleared you, your answers to the PAR-Q screening questions, and notes. You can withhold these from a new trainer when you move, and you can withdraw consent at any time.
• Check-ins: weight, body measurements, progress photos and notes.
• Meal logs: photos and notes, and your trainer's verdict on them.
• Habits and whether you did them; workouts logged in a session; sessions booked, attended, missed or cancelled; your "on my way" taps; leave requests.
• Packages you bought and payments recorded against them: amount, date, method and the UPI transaction reference (UTR) when there is one. FitOnTap records payments; it does not move money.
• If you use a gym: your membership, fees, visits and attendance days, and any request you send a gym or trainer (your name, goal and message).

If you run a gym:

• Your gym's name, branches and addresses, photos, logo and UPI ID; the packages you sell; door check-in codes.
• Which trainers work with you, the share terms you agree, and the monthly settlements between you.
• Your members' memberships, payments, visits and attendance.

We do not collect: your location, your contacts, your calendar, audio, files on your phone, or anything for advertising. There is no analytics or tracking in FitOnTap.

Crash reports: when crash reporting is switched on, a crash sends the device model, operating system version, app version and the error to Sentry (servers in the European Union). A report never contains your name, email, messages, photos, health answers or payment details, and is not linked to your account.

2. Where it comes from

From you, when you fill in a screen. From your trainer or gym, when they enter details about you — a trainer may create your record before you sign in, and may record payments and sessions for you. From Google or Apple, when you sign in with them: your name and email address (Apple may give us a private relay address instead of your real one).

3. Why we store it

To run FitOnTap for you: book sessions, follow plans, record payments, send the notifications you ask for, and keep the records you and the people you train with both need. Health answers are stored only because you consented, so that your trainer can train you safely. We store nothing for advertising, and we do not sell anything about you.

4. Who can see what

• Your trainer sees your details, health answers, progress, meals, sessions and payments.
• Your gym sees your name, contact details, package, payments, visits and attendance. A gym never sees your health answers or your progress photos.
• A new trainer sees nothing until you approve a transfer, and then only the categories you choose to share.
• Other clients see nothing about you.
• FitOnTap's operator can see trainer and gym accounts and money totals in order to run the service and handle deletion requests, and cannot read your health answers.
• Nobody else, except the service providers below, who work for us under contract and may not use your data for their own purposes:
  • Supabase — database, sign-in, file storage and server functions, in AWS ap-south-1 (Mumbai, India).
  • Resend — sends the emails FitOnTap sends you (sign-in codes, invites).
  • Expo, Google Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS) — deliver notifications to your phone.
  • Google and Apple — only if you sign in with them.
  • Sentry — crash reports, when crash reporting is on.

5. How long we keep it

• While your account is open.
• Health answers: deleted 90 days after your trainer archives you; health answers you entered without a trainer are deleted 12 months after you last signed in.
• Meal photos: deleted 12 months after the day they were taken.
• Crash reports: 90 days.
• After you delete your account: everything about you is deleted at once (photos within a day), except the records described in section 7.

6. Your rights

Under India's Digital Personal Data Protection Act 2023 you can ask to see what we hold about you, correct it, delete it, withdraw a consent you gave, and nominate someone to act for you. Most of this you can do in the app: More → Profile, Personal details, Medical (including withdrawing consent), and Account. For anything else, write to [support address]; we answer within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India. Our grievance officer is [name, support address].

7. Deleting your account

In the app: More → Account → Delete account, type DELETE. Without the app: email [support address] from the address you signed up with. Deletion takes effect at once.

What is deleted: your profile and photo, your sign-in, your details and health answers, check-ins and photos, meal logs, habits, workout logs, chat messages you sent, your push tokens and notifications; for a trainer, also the library, availability, certificates, payment methods and listing.

What is kept: the trainers and gyms you dealt with keep their records of sessions, packages, payments, memberships and settlements, because they need them for their own accounts and Indian tax law requires them to keep their books. Your name on those records is replaced by "Deleted client"; a deleted trainer's or gym owner's name is removed from theirs. These records no longer identify you.

If money is still open between you and someone else — an unanswered payment claim, an unsettled month with a gym, an active gym link, or a live membership — the app asks you to close it first and says how.

8. Children

FitOnTap is for people aged 18 and over. A trainer or gym that records a minor's details is responsible for having a parent's or guardian's permission.

9. Security

Everything travels over HTTPS. Each person can read only their own rows and the rows of the people they train with (enforced in the database). Photos are in private storage and served by short-lived links. Provider secrets never leave our servers. FitOnTap stores no card numbers and moves no money.

10. Changes

When this policy changes we update the date at the top and tell you in the app before the change applies.