Privacy Policy

FitCompass is operated by FitCompass Innovations Private Limited (“FitCompass”, “we”, “us”, or “our”). We provide a fitness engagement and intelligence platform for gyms and their members, including the FitCompass member app, the FitCompass trainer app, and the FitCompass admin console (together, the “Platform”), and our website at fitcompass.in (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use the Platform or the Site.

We have prepared this Policy with reference to the Digital Personal Data Protection Act, 2023 and other applicable Indian laws. By using the Platform, you acknowledge that you have read and understood this Policy.

1. Information We Collect

Information you provide to us

• Account and registration details such as your name, email address, and mobile number. We use your mobile number to sign you in with a one-time passcode (OTP).
• Profile and fitness details such as age, gender, height, weight, fitness goals, and preferences.
• Activity and health-related data you log in the Platform — workouts, sets, repetitions, weights, session timings, fitness assessments, body weight and body-composition measurements, meals and nutrition entries, challenges joined, community (FitSnaps) posts and interactions, and progress notes.
• Spot PT (personal training) booking details, such as the trainer, session date and time, and booking status.
• Photos you upload, such as your profile photo (avatar) and meal photos.
• Camera and photo-library access, which the app requests only when you choose to take or add a profile or meal photo. We do not access your camera or photos for any other purpose, and you can turn this access off at any time in your device settings.
• Communications you send us, including support requests and feedback.

Information we receive from your gym

• If you access the Platform as a member or trainer of a gym, your gym may provide details such as your name, contact information, and membership or staff status to set up your account.

Information we collect automatically

• Usage data about how you interact with the Platform (features used, actions taken).
• Device and technical data such as device type, operating system, app version, IP address, and identifiers.
• Push-notification tokens, used to deliver notifications to your device.
• Diagnostics and crash reports, used to identify and fix problems with the Platform.
• Cookies and similar technologies on our Site (see “Cookies” below).

Payment information

If you pay for a service through the Platform, such as a Spot PT session, payments are handled by third-party payment processors. We do not store your complete card or bank account details on our systems. We do keep booking and payment metadata — such as amounts, payment status, and order IDs — but never your card or bank details.

2. How We Use Your Information

We use personal data to:

• provide, operate, and maintain the Platform and its features;
• create and manage accounts and authenticate users;
• enable the core experience — guided workouts, session tracking, nutrition logging, challenges, and Spot PT bookings;
• give your gym and its authorised trainers visibility into member activity and engagement so they can support you (see “Your Gym, Trainers, and Your Data”);
• generate engagement analytics and reports for gym operators;
• provide optional features, including paid services such as Spot PT sessions;
• communicate with you about updates, security alerts, and support;
• improve and develop the Platform; and
• protect the security and integrity of the Platform and comply with legal obligations.

AI-powered features

Some features use artificial intelligence to analyse the inputs you provide — for example, generating nutrition analysis from the meals or meal photos you log, and producing personalised fitness insights. To deliver these features, the relevant data may be processed by trusted third-party AI and service providers under contract, solely to provide the feature to you and not for their own purposes. We send only the data needed for the feature you request. AI-generated insights are for general fitness information only and are not medical advice.

3. Consent and Legal Bases

Where required by law, we process personal data on the basis of your consent, which you may withdraw at any time (see “Your Rights”). We may also process personal data for certain legitimate uses permitted under applicable law, such as providing a service you have requested, complying with law, or responding to a security incident. Withdrawing consent may limit your ability to use some features.

4. How We Share Your Information

We do not sell your personal data. We share personal data only as described below.

With your gym and its trainers

If you use the Platform through a gym, your activity and engagement data is made available to that gym and its authorised trainers and administrators, so they can support your fitness journey and operate their services. Your gym’s own handling of your data is also subject to its policies.

With service providers

We share data with trusted third parties who process it on our behalf — such as cloud hosting, image and file storage, push-notification delivery, analytics and crash reporting, communications, and payment processing providers. These providers include, for example, cloud storage, Firebase (Cloud Messaging, Analytics, Crashlytics), and our payment processor (Razorpay). They may access data only to perform services for us and are contractually bound to protect it.

For legal and safety reasons

We may disclose data where required by law, regulation, legal process, or governmental request, or to protect the rights, safety, and security of users, the public, or FitCompass.

Business transfers

If FitCompass is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction, subject to this Policy.

5. Your Gym, Trainers, and Your Data

The Platform is designed to connect members, trainers, and gyms. When you join the Platform through a gym, that gym and its authorised trainers and administrators can view your activity, workouts, engagement, and related information through the trainer app and admin console. This is a core function of the Platform. If you have questions about how your gym uses your data, please contact your gym directly.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Platform.

Deleting your account

You can delete your account and all associated personal data at any time from within the app: More → Delete account. If you can’t access the app (uninstalled, or unable to sign in), email support@fitcompass.in from your registered email address, or include your registered mobile number if you signed up by phone, with the subject “Delete my account”. Deletion revokes your access immediately; your personal data is then deleted within 30 days. See our Account Deletion page for exactly what is deleted and what is retained.

What we retain after deletion

When you delete your account, we delete your personal data within 30 days, except records we are required to keep by law — in particular payment and transaction records, retained for 8 years for tax and accounting, and limited records needed for fraud prevention, security, and dispute resolution. Retained records are minimised and, where feasible, de-identified so they can no longer be linked to you.

7. Data Security

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration. Data sent between the apps, the Site, and our servers is encrypted in transit using HTTPS/TLS. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Subject to applicable law, you may have the right to:

• access the personal data we hold about you and request a summary of its processing;
• request correction or updating of inaccurate or incomplete data;
• request erasure of your personal data;
• withdraw consent previously given;
• nominate another individual to exercise your rights in the event of death or incapacity; and
• raise a grievance with us.

To exercise these rights, contact us using the details in “Grievance Officer and Contact”. We may need to verify your identity before acting on a request.

9. Children’s Privacy

The Platform is intended for users aged 18 and over. We do not knowingly create accounts for, or collect personal data from, anyone under 18. If we learn that we have collected data from a person under 18, we will delete it. If you believe a person under 18 has provided us with personal data, please contact us.

10. Third-Party Links and Services

The Platform may contain links to, or integrate with, third-party websites and services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies.

11. International Data Transfers

We are based in India and primarily process data in India. Where data is transferred to or processed in other jurisdictions (for example, by our service providers), we take steps to ensure it is handled in accordance with applicable law and this Policy.

12. Cookies

Our Site uses cookies and similar technologies to operate the Site, remember preferences, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect Site functionality.

13. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

14. Grievance Officer and Contact

If you have questions, requests, or grievances regarding this Policy or your personal data, please contact:

Manajit Rath
FitCompass Innovations Private Limited
5th Floor / Tower A,
No. 51,
Devarabeesanahalli,
Bellandur,
Bengaluru - 560 103
Email: support@fitcompass.in

We will acknowledge and address grievances within the timelines required under applicable law.