Privacy Policy

This Privacy Policy explains how Fittians ("we," "us," "our") collects, uses, stores, shares, and protects your personal information when you use Fittians, in accordance with the laws referenced above.

1. Who We Are

• Fittians, a company/entity incorporated in India with its registered office at 006, Vaishno Realty White Petals, Balagere Road, Varthur, Bangalore, 560087, is the "body corporate" responsible for personal information collected through the App under the SPDI Rules, 2011.
• Contact for privacy matters: Ridhik Baya, Fittians@gmail.com.

2. Personal Information We Collect

• Under the SPDI Rules, 2011, certain categories of data we collect are classified as "Sensitive Personal Data or Information" (SPDI) — specifically physical, physiological and mental health condition, and biometric information (if collected, e.g., via wearables). We apply heightened safeguards to this data as required under Rule 8 of the SPDI Rules.
• Passwords and financial information (where directly collected) are also treated as SPDI under these Rules.

3. Consent

• We collect sensitive personal data or information only with your written consent (which, under the SPDI Rules, includes consent given through electronic means such as an in-app acceptance click) via letter, fax, or email, before collection.
• You have the option to not provide the data or information sought to be collected, though this may limit your ability to use certain features of the App.
• You may, at any time while availing the services, withdraw your consent by writing to the contact mentioned in Section 14 below. If you withdraw consent, we reserve the right not to provide the corresponding service or feature for which the information was sought.

4. How We Use Your Data

• Provide, maintain, and personalize core app features (workout plans, progress tracking, goals).
• Sync data across your devices and, where you opt in, with wearables/HealthKit/Health Connect.
• Process payments and manage subscriptions.
• Send service-related and (where consented) promotional notifications.
• Improve app performance via aggregated/anonymized analytics.
• Detect fraud, abuse, and security incidents.
• Comply with legal obligations under Indian law.

We do not use your health data for targeted advertising, and we do not sell it to data brokers.

5. Data Sharing and Disclosure

We may share data with:

• Service providers (cloud hosting, analytics, crash reporting, customer support), bound by contractual confidentiality obligations at least as protective as this Policy, consistent with Rule 6 of the SPDI Rules.
• Payment processors (Google Play Billing, Apple IAP, Razorpay/other gateways) for transaction processing.
• Wearable/health platform partners (Apple HealthKit, Google Health Connect) only with your explicit permission.
• Government agencies, mandated under law to obtain information for verification of identity, prevention/detection/investigation of offences, or prosecution of offenders, in accordance with Rule 6 of the SPDI Rules.
• Third parties, with your prior consent, where such disclosure is not part of the contracted service.
• Business transfers, in the event of a merger, acquisition, or asset sale, with notice to you.

We do not sell your personal information to third parties, and any third party receiving sensitive personal data from us is prohibited from disclosing it further, per Rule 6(4) of the SPDI Rules.

6. Cross-Border Data Transfer

• Your data may be transferred to another country only if that country ensures the same level of data protection as required under the SPDI Rules, 2011, and only where necessary for performance of a lawful contract between you and us, or where you have consented to the transfer.
• Server locations: Singapore, for the Asia Pacific region.

7. Data Retention

• We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law.
• Upon account deletion, we will delete or anonymize your personal data within 30 days, except data we are legally required to retain (e.g., transaction records under tax/accounting law).
• Inactive accounts may be subject to data deletion after 6 months of inactivity, with prior notice.

8. Your Rights

• Access and review: You may request access to the personal information you have provided and request correction of inaccuracies, as provided under Rule 5(6) of the SPDI Rules.
• Correction: You may update or correct your personal information at any time via Profile or by contacting us.
• Deletion: You may request deletion of your account and associated personal data by contacting Fittians@gmail.com, subject to our legal retention obligations.
• Grievances: You may raise any privacy-related complaint with our Grievance Officer (Section 14).

9. Children's Data

• The App is not directed at children under 13. Where a user aged 13–18 uses the App with parental/guardian consent, we limit processing to what is necessary for the service.
• If we learn that we have collected data from a child without appropriate parental/guardian consent, we will delete it promptly.

10. Data Security

We implement and maintain reasonable security practices and procedures as mandated under Section 43A of the IT Act, 2000 and Rule 8 of the SPDI Rules, 2011, including:

• Encryption of data in transit (TLS) and at rest;
• Access controls and authentication for internal systems;
• A documented information security policy, audited annually by an independent auditor as contemplated under Rule 8;
• Regular vulnerability assessments and penetration testing;
• Employee confidentiality obligations.

11. Data Breach / Security Incident Response

• In the event of a breach affecting your personal information, we will take reasonable steps to investigate, mitigate harm, and notify affected users and, where legally required, the relevant Indian regulatory/law enforcement authority (such as CERT-In, in accordance with applicable cybersecurity incident reporting directions), without undue delay.

12. Cookies and Tracking Technologies

• The App (and any companion website) may use cookies/SDKs for analytics and functionality. You can manage preferences via Profile → Settings → Privacy Policy or your device settings.

13. Permissions We Request

14. Grievance Officer / Privacy Contact

15. Changes to This Policy

• We may revise this Privacy Policy periodically. Material changes will be communicated via in-app notice, email, or a prominent notice on our website, along with the "Last updated" date above.

16. Contact Us

For any questions about this Privacy Policy or our data practices, contact us at Fittians@gmail.com or write to us at 006, Vaishno Realty White Petals, Balagere Road, Varthur, Bangalore, 560087.