Privacy Policy

What we collect

• Account details: name, email, mobile number, and for gyms the business name, address and GSTIN.
• AI Trainer data you give us: age, height, weight, goals, diet preference, equipment, workouts, meals and messages to the AI coach.
• Gym Accounting data a gym enters: its members, plans, invoices, payments, expenses, staff and attendance. For this data the gym decides what is collected and why; we process it on the gym's instructions.
• Payments: payment references and status from our payment partners. We never see or store your card details or UPI PIN.
• Technical data: IP address, device and browser type, and essential cookies needed to keep you signed in.

How we use it

• To provide the service you signed up for, including AI-generated plans and coaching.
• To bill you, send invoices and reminders, and provide support.
• To keep the service secure and to meet legal, tax and accounting obligations.
• With your consent only: anonymised analytics and product updates. You can withdraw consent at any time.

We do not sell personal data and we do not use it for advertising. Members' conversations with the AI coach are never shown to their gym.

Who we share it with

Only with service providers who help us run FITRON, under contract and only for that purpose: cloud hosting, payment processing (e.g. Razorpay), messaging (e.g. WhatsApp Business), email delivery, and the AI model provider that generates coaching replies. We may disclose data when the law requires it.

What the AI model provider receives. When you chat with the AI coach, we send it your messages and what you told the app that it needs to coach you: your plan, and answers such as age, sex, height, weight, injuries, goals, diet, training schedule and, if you allow it, your city. We do not send your name or email. When gym staff use Fitron AI, we send their question and the details it looks up to answer it, such as member names, phone numbers, plans and dues, limited to what that staff member is allowed to see. The provider processes this on its own servers, which may be outside India, only to write the reply.

Where it is kept and for how long

The data we store is hosted on servers in India. The AI model provider handles the AI requests described under "Who we share it with" on its own servers. We keep it while your account is active and afterwards only as long as the law requires (for example, tax records for 8 years). When you delete your account, other data is erased within 30 days, except encrypted backups, which expire within 14 days after that.

Your DPDP rights

• Access a summary of your personal data and how it is processed.
• Correct, complete or update your data.
• Erase your data and withdraw consent.
• Nominate another person to exercise these rights if you die or become unable to.
• Raise a grievance with us, and then with the Data Protection Board of India.

Members of a gym that uses FITRON can also ask their gym directly. To use any right, write to hello@fitron.in. We reply within 30 days.

Cookies

We use essential cookies to keep you signed in and to remember your cookie choice. With your consent we also remember preferences and collect anonymised analytics. We do not use advertising cookies. You can change your choice any time with "Cookie settings" at the bottom of fitron.in.

Security

Passwords are hashed with Argon2, connections use HTTPS, sensitive biometric templates are encrypted, staff access is limited by role, and every change in Gym Accounting is written to an audit log.

Data Processing terms

For your members' and staff's personal data, your gym is the Data Fiduciary and FITRON is the Data Processor under the Digital Personal Data Protection Act, 2023. FITRON processes that data only on your instructions, to run the console for you.

You will collect and enter members' data lawfully, with their consent where the law requires it, keep it accurate, and respond to your members' requests to access, correct or erase their data.

FITRON will keep the data secure, process it only to provide the service, keep it confidential, tell you without undue delay about any breach affecting it, help you answer members' requests, and delete or return it when your account ends.

Children

The AI Trainer is for people aged 18 and over. We do not knowingly process children's data without verifiable parental consent.

Grievance Officer

For any complaint about your data or this policy, write to the Grievance Officer, FITRON, at hello@fitron.in with the subject "Grievance", or WhatsApp +91 62077 74673. We acknowledge within 24 hours and resolve within 15 days.

Changes

If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect.