Fitertz Privacy Policy

1. Introduction

Fitertz ("Fitertz", "we", "us", or "our") respects the privacy of individuals whose personal information is processed through the Fitertz website, web application, mobile applications, CRM, fitness management platform, communication features, Marketplace, and related services (collectively, the "Services").

This Privacy Policy explains what personal information Fitertz collects, how that information is used, how it may be shared, how it is protected, how long it may be retained, and the choices and rights available to individuals.

This Privacy Policy applies to all individuals who interact with Fitertz, including gym and fitness business owners, coaches and trainers, administrators and staff members, gym clients and members who are provided access to the Fitertz client application, website visitors, Marketplace customers, and individuals who communicate with Fitertz.

Because Fitertz operates as a business and fitness management platform, some personal information stored in Fitertz is provided to us by a gym, coach, or other business using the Services. In those circumstances, the business may determine why the information is collected and how it is used for its fitness or business operations, while Fitertz processes that information to provide the Services.

2. Our Role in Processing Personal Data

Fitertz operates in different capacities depending on how information is collected and used.

When you create and maintain your own Fitertz account, Fitertz generally determines the purposes for which the information is processed in connection with providing and managing your account and access to the Services.

When a gym, coach, or other business enters information about its clients, members, staff, or other individuals into Fitertz, that business generally determines the purposes for which the information is collected and used. Fitertz processes that information on behalf of the business to provide functions such as client management, fitness assessments, workout management, attendance, billing, communication, reporting, and other Services.

Accordingly, a gym or coach using Fitertz remains responsible for ensuring that it has an appropriate lawful basis, notice, authorization, consent, or other permission required to collect and provide personal information to Fitertz.

Fitertz does not independently determine whether a customer's collection or use of client information is lawful. Customers remain responsible for their own privacy obligations toward their clients, employees, trainers, and other individuals whose information they enter into the platform.

3. Personal Information We Collect

The information collected by Fitertz depends on how you interact with the Services and which features are enabled.

When an individual creates a primary Fitertz account, we generally require an email address, gym or coach name, and password. These details are used to create and authenticate the account.

After an account has been created, the account holder may voluntarily provide additional information through the Fitertz dashboard, including a phone number, profile photograph, business name, business address, city, state, country, GST or tax-related business information, and role or account information.

When a gym or coach creates accounts for staff members or clients who will receive access to the Fitertz mobile application, Fitertz may collect the individual's email address and create temporary account credentials required to provide access. The individual may subsequently change their password through the available password-reset functionality.

Fitertz does not require or collect government identity documents such as Aadhaar, PAN, passports, or driving licences for ordinary account creation.

4. Business and Gym Information

Fitertz allows gyms, fitness businesses, coaches, and trainers to maintain information necessary to operate their businesses and manage their clients.

Depending on the Services used, this information may include the business or gym name, business address and contact information, staff and trainer information, client and lead records, membership information, membership status, payment and billing records, invoices, expenses, attendance information, access-related information, notes, reports, and other information entered by the customer.

Business customers may also enter tax-related information such as GST numbers where they choose to maintain that information within the Fitertz dashboard.

This information is processed to provide the CRM and business-management functionality requested by the customer, including client management, billing, attendance, reporting, communication, fitness management, and related administrative functions.

Fitertz does not use customer business information for unrelated purposes merely because that information is stored within the platform.

5. Client and Fitness Information

A gym, coach, or fitness business may use Fitertz to maintain detailed information about its clients and members.

Depending on the features used, this may include names, email addresses, phone numbers, dates of birth, age, gender, height, weight, body measurements, body-fat information, fitness goals, workout history, exercise history, workout plans, nutrition plans, food and dietary information, fitness assessments, posture assessments, progress information, photographs, videos, health-related information, injuries, allergies, medications, sleep information, activity information, wearable information, client-trainer communications, WhatsApp-related information, documents, and other information entered or generated through the Services.

Some of this information may be considered sensitive or particularly private depending on the applicable law and the context in which it is collected.

The purpose of processing this information is generally to enable the gym, coach, trainer, or client to use Fitertz features such as fitness assessments, workout planning, nutrition management, progress tracking, attendance, client management, AI-assisted analysis, wearable integration, and related fitness services.

Fitertz does not claim ownership of customer or client information merely because it is stored on the Fitertz platform.

6. Photos, Videos, and Fitness Assessments

Fitertz may process photographs and videos uploaded by account holders, trainers, staff members, or clients for supported features.

Photographs may be used for purposes such as profile photographs, client profiles, progress tracking, fitness assessments, and posture-related assessments.

Where Fitertz provides static or dynamic posture assessment functionality, the relevant photographs or videos are processed temporarily for the purpose of performing the requested assessment. Fitertz does not permanently store those assessment photographs or videos as part of the assessment record.

Where technically applicable, the media may be temporarily held in application or processing cache while the assessment is performed and is deleted after processing.

The resulting assessment information may be retained where necessary to provide the assessment, display results, maintain progress history, or support related fitness functionality.

Users should avoid uploading photographs or videos containing individuals for whom they do not have the necessary rights, authorization, or lawful basis.

7. Face Recognition and Biometric Information

Fitertz provides an optional face-recognition feature that may be used for attendance and related identification functionality.

Face recognition is not mandatory. A gym may choose whether to enable or use this functionality.

When face recognition is enabled and an individual is enrolled for the feature, Fitertz stores a face embedding or biometric representation used for recognition rather than retaining the original enrollment photograph as the biometric record.

The biometric processing is performed within Fitertz-controlled infrastructure and is not outsourced to a third-party face-recognition API.

Because biometric information can be highly sensitive, the gym or business enabling face recognition is responsible for determining whether its use is legally permitted and for obtaining any required consent, authorization, notice, or other lawful basis from the relevant individuals.

Fitertz provides the technical functionality but does not determine whether a particular gym's collection or use of biometric information complies with the laws applicable to that gym or its clients.

Individuals who do not wish to participate in face-recognition attendance should discuss available alternatives with the relevant gym or business.

8. Wearable and Health Platform Data

Fitertz may integrate with supported health and fitness platforms, including Google Health Connect and Apple Health, where the user or customer enables the relevant integration and grants the required permissions.

At present, Fitertz may request read access to supported categories including steps, sleep, heart-rate, and glucose information, depending on the capabilities of the relevant platform and permissions granted by the user.

Fitertz currently does not write information back into Apple Health or Google Health Connect through these integrations.

Wearable and health-platform information is used to provide fitness tracking, progress monitoring, analytics, coaching, and other functionality requested through the Services.

Users can withdraw the relevant wearable or health-platform access through the applicable platform or device settings. Fitertz will process subsequent data collection in accordance with the permissions and integration state applicable at that time.

The availability and categories of information provided by Apple Health, Google Health Connect, or other third-party platforms may change based on their APIs, permissions, policies, or technical limitations.

9. AI Processing

Fitertz provides AI-assisted features that may help users interpret fitness and business information, generate responses, support assessments, and provide other automated functionality.

Fitertz is designed so that direct personal identifiers of individual clients are not intentionally provided to third-party AI systems for ordinary data-question answering.

For example, when a user asks a question about client information, Fitertz's backend may first retrieve and process the relevant information and provide the AI system with the resulting data required to generate an answer. The AI system may receive the relevant data necessary to formulate the response without receiving the client's identifying information.

The Fitertz backend maintains the relationship between the resulting information and the relevant client or account.

Depending on the feature, AI processing may involve third-party AI infrastructure or models. Where third-party AI processing is used, Fitertz takes steps designed to minimize unnecessary disclosure of identifying information.

AI-generated responses may contain errors or inaccuracies. AI output should therefore be reviewed by the user before being relied upon for fitness, nutrition, business, or other decisions.

10. Use of Data for AI Improvement and Aggregated Analysis

Fitertz may use anonymized or aggregated information to improve its Services, develop and evaluate AI functionality, understand platform usage, identify trends, improve performance, and develop new features.

Fitertz does not use identifiable customer or client information to train its AI systems as an identified individual's personal profile.

Where information is used for AI improvement or aggregated analysis, Fitertz aims to remove or avoid direct identifiers and use information in a form that does not reasonably identify the individual.

Aggregated or de-identified information may also be used for statistical analysis, product development, security, system optimization, quality assurance, and other legitimate purposes.

Fitertz does not sell personal information as a commercial data product.

11. How Fitertz Uses Personal Information

Fitertz uses personal information only for purposes connected with operating, providing, securing, maintaining, and improving the Services and the features requested by customers and users.

Depending on the circumstances, Fitertz may use personal information to create and manage accounts, authenticate users, provide access to the CRM and mobile applications, manage gym and client records, provide fitness and assessment functionality, process attendance, manage billing and invoices, facilitate communications, provide customer support, process payments, provide wearable integrations, operate AI-assisted features, maintain security, investigate technical problems, prevent fraud and abuse, maintain backups, respond to legal obligations, and otherwise provide functionality described within the Services.

Fitertz may also use information to understand how the Services perform, identify errors, improve reliability, develop new features, conduct internal analytics, and improve anonymized or aggregated AI and platform capabilities.

Fitertz does not use personal information for purposes unrelated to the Services merely because that information is available to us.

12. Lawful Basis and Consent

Fitertz processes personal information in accordance with applicable privacy and data-protection laws, including the Digital Personal Data Protection Act, 2023, and applicable rules and regulations.

Depending on the nature of the processing, Fitertz may process information where necessary to provide a service requested by the individual or customer, to perform or administer an account or transaction, to comply with legal obligations, to protect the security and integrity of the Services, or on the basis of consent or another lawful ground available under applicable law.

Where consent is required, Fitertz will seek consent in an appropriate manner and will use the information for the purposes communicated at the time consent is obtained or for other purposes permitted by applicable law.

Where a gym, coach, or business provides Fitertz with information about its clients, the relevant business is responsible for determining the appropriate lawful basis for collecting and providing that information to Fitertz and for providing any notices or obtaining any consents required by applicable law.

Consent provided for one feature does not automatically mean that consent has been provided for unrelated processing activities.

Where applicable, an individual may withdraw consent for a particular processing activity. Withdrawal of consent does not affect processing that was lawfully carried out before the withdrawal and may affect the availability of the feature for which the information was required.

13. Information Relating to Children

Fitertz accounts are intended for individuals aged 18 years or older.

However, Fitertz recognizes that gyms and fitness businesses using the platform may provide fitness programs to clients who are under 18 years of age. A gym may therefore enter information relating to an under-18 client into Fitertz and may provide that client with access to the Fitertz client application where such processing and access are legally permitted.

In such circumstances, the gym, coach, or business is responsible for determining whether the collection, use, storage, and sharing of the minor's information is permitted under applicable law and for obtaining any parental, guardian, or other consent or authorization that may be required.

Fitertz will process information relating to such clients only for purposes connected with providing the Services to the relevant customer and in accordance with applicable law.

Fitertz does not knowingly permit an individual under 18 to independently create a primary Fitertz business or coach account.

14. Account Verification and Authentication

Fitertz collects and processes account credentials and related authentication information to establish accounts and protect access to the Services.

When a primary Fitertz account is created, the account holder provides an email address, gym or coach name, and password. Fitertz uses this information to create and authenticate the account.

When a gym or coach creates an account for a staff member or client who requires mobile application access, Fitertz may create temporary login credentials, including a temporary password, to enable initial access. The user may subsequently change the password using the available password-reset functionality.

Fitertz may process authentication records, login activity, timestamps, technical identifiers, and security-related information to authenticate users, detect unauthorized access, investigate security incidents, and protect accounts.

Users are responsible for keeping their credentials confidential and should notify Fitertz if they believe an account has been accessed without authorization.

15. Service and Transactional Communications

Fitertz may send communications necessary to operate and administer the Services.

These communications may include account-verification messages, password-reset instructions, payment confirmations, invoice and payment notifications, security-related notifications, service-related information, and other communications necessary to provide functionality requested by the user or customer.

Fitertz may also send push notifications through supported mobile applications, including notifications related to workouts, reminders, account activity, or other features enabled by the customer or user.

Some communications may be sent automatically based on actions or configurations made by the gym, coach, trainer, or user.

Transactional and security-related communications may continue even where a user has chosen not to receive optional promotional communications, where such communications are necessary to operate the account or provide the requested Services.

16. Promotional Communications

Fitertz may occasionally send promotional or marketing communications about Fitertz products, services, Marketplace offerings, updates, features, or relevant opportunities.

Where applicable law requires consent or provides an opt-out right, Fitertz will provide an appropriate mechanism for managing such communications.

You may request that Fitertz stop sending optional promotional communications by contacting support@fitertz.com or by using an available unsubscribe or communication-preference mechanism.

Stopping promotional communications does not prevent Fitertz from sending necessary transactional, security, account, payment, or service-related communications.

17. WhatsApp Communications

Fitertz provides WhatsApp automation functionality for gyms and businesses that choose to use the feature.

The messaging workflow generally operates as follows: the gym configures an applicable automation within Fitertz, Fitertz sends the required trigger information to its WhatsApp messaging service provider, Convobox, and Convobox sends the applicable message through the Meta/WhatsApp Business Platform.

Messages may contain information configured by the gym, including a client's name, membership information, payment reminders, attendance-related information, workout reminders, appointment information, promotional offers, and other business communications supported by the configured automation.

Fitertz may retain WhatsApp delivery-related information such as message status, delivery status, or other technical information required to operate and monitor the messaging service. Fitertz does not retain the full content of WhatsApp conversations as part of this messaging workflow unless a particular feature expressly provides otherwise.

The gym or business initiating WhatsApp communications remains responsible for ensuring that its use of WhatsApp complies with applicable privacy, communications, anti-spam, and marketing laws and with applicable Meta and WhatsApp policies.

18. Payment and Transaction Information

Fitertz processes information necessary to record, verify, reconcile, and manage payments for Fitertz Core, add-ons, Marketplace purchases, and other paid Services.

Depending on the transaction, Fitertz may store information such as the customer's name, email address, transaction identifier, payment amount, payment status, payment date, PhonePe reference or transaction information, and other information reasonably required for payment verification and accounting.

Fitertz does not store full card numbers, card CVV information, or bank account details.

Payment processing and verification may involve third-party payment infrastructure such as PhonePe. Information processed by a payment provider may also be subject to that provider's own privacy policy and security practices.

Fitertz may retain transaction records for accounting, dispute resolution, fraud prevention, legal compliance, refund processing, and other legitimate business purposes.

19. Technical, Device, and Security Information

When you access Fitertz through the website, CRM, or mobile application, Fitertz may automatically collect certain technical and operational information necessary to provide and secure the Services.

Depending on the platform and circumstances, this may include IP address, browser information, device type, operating system, application version, device or technical identifiers, login timestamps, session information, crash information, error information, authentication events, security events, and other technical logs.

Fitertz uses this information primarily to operate the Services, maintain security, diagnose technical problems, detect unauthorized activity, investigate errors, improve reliability, and protect the platform.

Fitertz may maintain authentication, security, technical, and error logs for appropriate periods based on their operational purpose and applicable retention requirements.

Fitertz does not use technical information to create advertising profiles for users.

20. Analytics, Cookies, and Location Information

At present, Fitertz does not use website analytics or advertising tracking systems to create user profiles for advertising purposes, and Fitertz does not currently use advertising pixels such as Meta Pixel or similar advertising trackers.

Fitertz also does not intentionally collect or use cookies for advertising or behavioral tracking. Where technically necessary, the Services may use session or authentication mechanisms required for the website or application to function, authenticate users, maintain sessions, or provide requested functionality. Such technical mechanisms are not used by Fitertz for advertising profiling.

Fitertz may use Supabase's platform analytics and logging capabilities for operational purposes, including error monitoring, troubleshooting, system reliability, and security. These operational records are different from advertising or behavioral analytics used to track users for marketing purposes.

Fitertz does not request or require GPS or other device location permissions for the normal operation of its mobile applications. Fitertz does not intentionally collect precise or approximate device location as a feature of the Services.

21. How Fitertz Shares Personal Information

Fitertz does not sell personal information as a commercial data product and does not share personal information with third parties for their independent advertising purposes.

Fitertz may share or provide access to personal information where reasonably necessary to operate the Services, provide a feature requested by a customer or user, process a transaction, maintain infrastructure, provide technical support, maintain security, comply with legal obligations, or protect the rights and safety of Fitertz, its customers, users, or other persons.

For client information entered by a gym or coach, information may be processed by the service providers that support the relevant Fitertz functionality. The gym or coach remains responsible for determining whether the disclosure or processing is appropriate and lawful for its particular client relationship.

Fitertz may also disclose information where required by applicable law, regulation, legal process, court order, governmental request, or where reasonably necessary to investigate fraud, abuse, security incidents, or other unlawful activity.

22. Service Providers and Subprocessors

Fitertz relies on selected third-party service providers to operate parts of the Services. These providers may process personal information on behalf of Fitertz or provide infrastructure through which information is stored or transmitted.

Depending on the features used, these providers include services for cloud infrastructure, databases, authentication, storage, AI processing, WhatsApp messaging, payment processing, notifications, analytics and error monitoring, health integrations, application infrastructure, and security.

Fitertz's principal subprocessors and third-party service providers are identified in the Fitertz Subprocessors List. The list may be updated when Fitertz adds, replaces, or removes providers used to support the Services.

Fitertz seeks to use service providers that provide appropriate safeguards for the information they process and limits the information provided to what is reasonably necessary for the applicable purpose.

Third-party providers may also have their own terms, privacy policies, security practices, and legal obligations governing their services.

23. International Processing and Transfers

Although Fitertz primarily operates its customer infrastructure for the Indian market, certain third-party service providers used by Fitertz may process information in countries outside India.

International processing may occur in connection with services such as AI processing, communication services, application infrastructure, analytics or technical services, or other third-party functionality.

Where personal information is processed outside India, Fitertz will take reasonable steps to use appropriate service providers and processing arrangements and to comply with applicable Indian data-protection requirements relating to such processing.

The location of processing may change as Fitertz's infrastructure, service providers, or technical architecture evolves. The current principal service providers and relevant processing purposes are described in the Subprocessors List.

24. Cloud Infrastructure, Database, and Storage

Fitertz uses Supabase as a core infrastructure provider for components including database services, authentication, storage, Edge Functions, and Realtime functionality.

Fitertz's primary Supabase project infrastructure is hosted in Mumbai, India, through the infrastructure made available by Supabase.

Customer information stored through Fitertz may therefore be processed within these cloud infrastructure systems as necessary to provide the Services.

Fitertz configures and manages its application environment and access controls, while the underlying infrastructure provider remains responsible for the infrastructure services it provides.

Fitertz may also use other infrastructure and edge technologies, including Cloudflare and Vercel, where required for application delivery, security, deployment, or related technical functionality.

25. Artificial Intelligence Service Providers

Fitertz may use third-party AI technologies, including services provided by OpenAI and NVIDIA, together with AI systems operated or hosted within Fitertz-controlled infrastructure.

Fitertz is designed to minimize unnecessary disclosure of identifiable client information to third-party AI systems. For supported data-question answering functionality, Fitertz may process a user's request through its backend, retrieve the relevant information, and provide the AI system with anonymized or de-identified information required to generate the response.

The third-party AI system may therefore process information relevant to the requested question without being provided with the direct identity of the individual to whom that information relates.

Fitertz may use anonymized or aggregated information for AI improvement, evaluation, quality assurance, and development of its Services.

Fitertz does not intentionally provide identifiable client profiles to third-party AI providers for the purpose of training a model about that identifiable individual.

AI processing may change as Fitertz improves its architecture and introduces new AI features. Where a particular feature has materially different data-processing requirements, the applicable feature or supporting documentation may provide additional information.

26. Health, Wearable, Messaging, and Other Integrations

Fitertz may connect with third-party platforms when a user explicitly enables a supported integration.

These may include Apple Health, Google Health Connect, Meta/WhatsApp Business Platform, Convobox, and other services required to provide particular functionality.

For health integrations, Fitertz currently requests read access to supported information such as steps, sleep, heart rate, and glucose information, depending on the permissions granted by the user. Fitertz currently does not write information back to these health platforms.

For WhatsApp functionality, Fitertz may transmit the information required to execute an automation through Convobox, which then communicates through the Meta/WhatsApp Business Platform.

The availability and processing of information through these integrations are also subject to the relevant third party's technical capabilities, policies, permissions, and privacy practices.

Fitertz does not require users to enable these integrations in order to use the Services generally, although disabling a particular integration may prevent the associated feature from functioning.

27. Security Measures

Fitertz takes reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.

Depending on the applicable system and information, Fitertz's security measures include encryption in transit, encryption at rest, role-based access controls, authentication controls, monitoring and logging, regular software updates, and backup and recovery procedures.

Access to production systems and customer information is restricted according to operational requirements and authorized access controls. Fitertz personnel may access customer information where reasonably necessary for legitimate purposes such as providing support, troubleshooting, maintaining the Services, investigating security issues, or performing other authorized operational activities.

No method of electronic transmission, storage, or processing can be guaranteed to be completely secure. Accordingly, while Fitertz takes reasonable measures to protect information, Fitertz cannot guarantee absolute security against every possible threat, attack, vulnerability, or unauthorized activity.

Customers are also responsible for protecting their account credentials, controlling staff access, and implementing appropriate security practices within their own organization.

28. Data Retention

Fitertz retains personal information for as long as reasonably necessary to provide the Services, maintain accounts and business records, satisfy legitimate operational requirements, resolve disputes, enforce agreements, prevent fraud and abuse, maintain security, and comply with applicable legal or regulatory obligations.

The specific retention period depends on the nature of the information and the reason it was collected.

Financial, payment, transaction, tax, and accounting records may be retained for periods required by applicable law or legitimate business requirements.

Fitness, assessment, client, business, communication, and other Customer Data may generally remain available while the customer's account is active and may be retained or anonymized after deletion where necessary for legitimate purposes or where legally required.

An account may be marked inactive after 7 days without activity, but inactivity does not by itself result in automatic deletion of the account or its data.

More detailed retention periods and deletion practices are described in the Fitertz Data Retention Policy.

29. Account Deletion, Data Deletion, and Backups

Customers may request deletion of their Fitertz account by contacting support@fitertz.com.

When an account is deleted, Fitertz will process the associated information for deletion from active systems in accordance with its applicable retention procedures, subject to information that Fitertz is legally required or legitimately permitted to retain.

Where a customer deletes an individual client, Fitertz may delete or anonymize the applicable client information. Certain historical business or financial records may need to be retained where required for legitimate business purposes or applicable legal obligations.

Deleted information may remain temporarily within backups or disaster-recovery systems until those backups expire according to Fitertz's normal backup-retention procedures.

Fitertz maintains daily database backups, and the applicable production backup infrastructure provides a limited historical recovery period. Backups are maintained primarily for operational recovery and are not intended to prevent a valid deletion request from being completed in the active production environment.

Once information is deleted from active systems and the applicable backup retention period has expired, it will generally no longer be available through Fitertz.

30. Customer Data Ownership and Customer Responsibilities

The gym, coach, fitness business, or other customer generally retains ownership of the business and client information that it uploads, creates, or stores through Fitertz.

Fitertz does not claim ownership of Customer Data merely because it processes or stores that information.

Customers are responsible for ensuring that the personal information they provide to Fitertz was collected and is used in accordance with applicable law. This includes obtaining any required consent or authorization, providing appropriate privacy notices, responding to client requests where applicable, determining appropriate retention periods where the customer controls those decisions, and ensuring that employees and trainers have appropriate access.

Customers are also responsible for ensuring that uploaded photographs, videos, biometric information, health information, nutrition information, and other personal information may lawfully be processed through the Services.

Fitertz acts as the technology platform and service provider for customer-controlled client information and does not replace the customer's own privacy, legal, regulatory, or professional responsibilities.

31. Your Privacy Rights

Depending on your relationship with Fitertz and the laws applicable to you, you may have rights concerning the personal information processed by Fitertz.

These rights may include the right to request access to personal information, request correction of inaccurate information, request deletion of personal information where legally permitted, obtain or export information maintained through the Services, withdraw consent where processing is based on consent, withdraw access previously granted to supported wearable or health integrations, and raise a complaint regarding the handling of personal information.

Where Fitertz processes information on behalf of a gym, coach, or other business, the relevant business may be the appropriate party to contact first regarding client information because that business determines how the information is collected and used. Fitertz may assist the customer in responding to a valid request where Fitertz holds or processes the relevant information on the customer's behalf.

Nothing in this Privacy Policy limits any privacy right that cannot legally be excluded under applicable law.

32. Withdrawal of Consent and Permissions

Where Fitertz processes personal information based on consent, you may withdraw that consent by contacting support@fitertz.com, where applicable.

You may also withdraw permissions granted to supported third-party integrations through the relevant device, operating-system, or third-party service settings. For example, access to Apple Health or Google Health Connect data can be withdrawn through the applicable health-platform or device settings.

Withdrawal of consent or a permission may prevent Fitertz from providing a feature that requires that information or access.

Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal. Fitertz may also continue to retain or process certain information where necessary to comply with a legal obligation, establish or defend legal claims, maintain security, complete a transaction, or otherwise process the information on a lawful basis permitted by applicable law.

33. Access, Correction, Deletion, and Data Export Requests

You may contact Fitertz at support@fitertz.com to request access to, correction of, deletion of, or export of applicable personal information.

Fitertz may request sufficient information to verify the identity and authority of the person making a request before taking action. This is intended to prevent unauthorized individuals from obtaining, modifying, or deleting another person's information.

Where applicable, Fitertz provides customer data export functionality, including export into Excel-compatible files. The precise information available for export may depend on the type of information and the functionality through which it is stored.

A deletion request may be subject to legal, contractual, security, accounting, fraud-prevention, or other legitimate retention requirements. Where information cannot immediately be deleted for one of these reasons, Fitertz will retain it only for the applicable period and handle it in accordance with this Privacy Policy and the Data Retention Policy.

Fitertz currently aims to respond to privacy-related requests within 2–3 business days after receiving a sufficiently clear and verifiable request. The time required to complete a request may vary depending on its complexity and the requirements of applicable law.

34. Complaints and Grievance Handling

If you have concerns about how Fitertz handles personal information, you may submit a complaint or privacy-related grievance to support@fitertz.com.

When submitting a complaint, you should provide enough information for Fitertz to understand the issue, including the relevant account or feature, the nature of the concern, and any information reasonably necessary to investigate it.

Fitertz will review the complaint, investigate the circumstances where appropriate, and take reasonable steps to address a valid concern.

Fitertz aims to acknowledge and respond to privacy-related requests and complaints within 2–3 business days, although more complex matters may require additional time for investigation or resolution.

Where applicable law provides a right to escalate a complaint to a relevant data-protection authority or other competent authority, nothing in this Privacy Policy prevents you from exercising that right.

35. Personal Data Breaches and Security Incidents

Fitertz maintains procedures designed to identify, investigate, contain, and respond to security incidents that may affect personal information.

If Fitertz becomes aware of a personal data breach or other security incident involving personal information, Fitertz will take reasonable steps to investigate the incident, contain and remediate the issue, assess the potential impact, and implement measures intended to reduce the likelihood of recurrence.

Where notification is required under applicable law, Fitertz will make the required notifications to affected individuals, customers, authorities, or other relevant parties in accordance with the applicable legal requirements.

The nature and timing of any notification may depend on the circumstances of the incident, the information affected, the applicable legal requirements, and the availability of reliable information about the incident.

Customers are also responsible for promptly informing Fitertz if they become aware of unauthorized access to their Fitertz account or other security incident involving their use of the Services.

36. Third-Party Websites, Platforms, and Services

The Fitertz Services may contain links to or provide integrations with third-party websites, applications, platforms, or services.

Examples may include payment services, health platforms, WhatsApp, application stores, and other services that are accessed or enabled through Fitertz.

When you interact directly with a third-party service, that service may collect and process information according to its own privacy policy and terms. Fitertz does not control the privacy practices of third parties and is not responsible for their independent processing of information.

For example, enabling an Apple Health or Google Health Connect integration may involve processing governed by the respective platform's policies, while WhatsApp communications may also be subject to Meta and WhatsApp policies.

You should review the privacy policies of third-party services before enabling integrations or providing information directly to them.

37. Promotional Use of Gym Name and Logo

Fitertz may use the name and logo of a gym, coach, or business customer for reasonable promotional purposes, including identifying businesses that use Fitertz, displaying customer logos on Fitertz marketing materials, websites, social media, presentations, case studies, or similar promotional content.

Fitertz may use this information to communicate examples such as "This gym uses Fitertz" or otherwise identify the customer as a Fitertz user.

Fitertz does not intend such use to imply that the customer endorses Fitertz, has invested in Fitertz, is a business partner of Fitertz, or has made a particular public statement about Fitertz unless that relationship or statement actually exists.

Fitertz does not intend to publicly disclose private customer records, client information, fitness information, health information, assessment information, financial records, or other confidential Customer Data as part of promotional activities.

38. Changes to This Privacy Policy

Fitertz may update this Privacy Policy from time to time to reflect changes to the Services, technology, data-processing practices, third-party providers, legal requirements, security practices, or applicable privacy regulations.

When material changes are made, Fitertz may provide notice through the website, application, email, account notifications, or another appropriate communication method.

The updated Privacy Policy will become effective on the date specified in the updated policy unless a different effective date is required by applicable law.

Your continued use of the Services after the effective date of an updated Privacy Policy indicates your acknowledgment of the updated policy to the extent permitted by applicable law.

We encourage customers and users to periodically review the Privacy Policy to understand how Fitertz handles personal information.

39. Relationship With Other Fitertz Policies

This Privacy Policy should be read together with the other Fitertz policies and agreements that govern the use of the Services.

These may include the Fitertz Terms of Service, Data Retention Policy, Subprocessors List, Data Processing Addendum (DPA), Security Overview, Incident Response Policy, Cookie Policy, AI Usage Policy, and Service Level Agreement (SLA).

Each document addresses a different aspect of the relationship between Fitertz and its customers or users.

Where a separate written agreement, including a DPA entered into with a business customer, contains specific data-processing obligations that conflict with this Privacy Policy, the applicable contractual terms will govern to the extent of the conflict.

The Privacy Policy does not replace the customer's responsibility to provide its own privacy notices or obtain required permissions from its clients, employees, trainers, or other individuals whose information it collects.

40. Contact Information and Effective Date

If you have questions about this Privacy Policy, wish to exercise an applicable privacy right, request deletion or export of personal information, withdraw an applicable permission, or submit a privacy-related complaint, please contact:

Fitertz
Email: support@fitertz.com
Jurisdiction: India

Fitertz will use the information provided through a privacy request or complaint only as reasonably necessary to verify the request, investigate the matter, communicate with the requester, and fulfill the applicable legal or operational requirement.

This Privacy Policy applies to the Fitertz website, CRM, mobile applications, and related Services unless a particular service is expressly governed by a separate privacy notice.

Effective Date: September 14, 2026
Last Updated: September 14, 2026