Privacy policy

This app holds things about your body and your health. That is not ordinary data, and this policy is written to be read rather than to be survived. It describes what the software actually does.

Fitmarto is run by Fitmarto (to be confirmed), Address to be confirmed. Where this policy says "we", it means that company. Where it says "your trainer", it means the independent coach you chose — a separate person, with their own obligations. Where it says "a gym", it means a gym your trainer coaches at, which we have checked — a separate business, too.

What we hold, and why

To have an account at all: your name, and the phone number or email address you sign in with. We send a six-digit code to it; that is the whole of how signing in works, so we never hold a password.

Because your trainer is coaching you: your date of birth, height, weight, measurements, goals, and your answers to the pre-exercise health questionnaire — old injuries, conditions, medication, whether a doctor has ever told you to avoid exercise. Progress photos, if you take them.

Because you are training: every set you log, what you lifted and how it felt, the sessions you attended, and the messages you send your trainer.

Because you use the Food tab: what you ate, your food goal and calorie budget, the water you log, the activities you add, and the foods and meals you save. This is health data, under the rule in the next section.

Because money changed hands: what you bought, when, from which trainer, who sold it (your trainer, or the gym they coach at), the invoice, and the reference our payment provider gives the payment. We never see your card number, your UPI PIN or your bank login — those go straight to the payment provider and never touch our servers.

Because the law asks us to show you agreed: when you turn a permission on or off, we record the moment, your IP address and which app you did it in, together with the version of this policy that was showing. That record is added to, never edited.

So the app works: a token that lets us send notifications to your phone, and ordinary server logs.

Your health data has its own rule

Your trainer can see your health answers, measurements and weights only when both of these are true: a coaching between you and them is active, and you have switched health sharing on. Turn the switch off, or end the coaching, and the door closes immediately — not overnight, not at the end of the month. Progress photos need their own separate permission on top of that.

If you have no trainer, nobody but you sees any of it.

If your trainer coaches at a gym

Some trainers coach at a gym. When yours does, and the gym has accepted them, the gym sees enough to run the gym — and nothing about your body:

• your name, and since when you have trained with your trainer
• whether your trainer has written you a plan
• the sessions you booked with your trainer, and whether you came
• what you paid for your coaching, from the day your trainer joined the gym

When your trainer coaches at a gym, you pay the gym: it is the seller, so it is paid, and the invoice it issues carries your name. That is the whole of what changes.

The gym never sees your health answers, your weight or measurements, your workouts, what you eat, your photos, your messages, your email address or your phone number. None of it depends on the health sharing switch, because none of it is health data — and the switch never opens anything to the gym.

A trainer's page says which gym they coach at before you join them. If your trainer joins a gym while they are coaching you, the app tells you, with this list. The gym stops seeing anything about you the moment your trainer leaves it, or you leave your trainer.

Who else sees anything

We do not sell your data, we do not rent it, and we do not let anybody advertise to you inside the app. A small number of companies do a specific job for us, and each gets only what that job needs:

• the payment provider, to take a payment and to send a refund back
• the SMS and email providers, to deliver your sign-in code
• the video provider, when you join a live session
• the file storage provider, which holds your photos and documents encrypted
• the push notification service, to ring your phone

The gym your trainer coaches at, if they coach at one, sees only what is listed above.

When you buy in the Shop, the seller of each part of your order is given your name, the delivery address you chose and its phone number, so they can deliver it — and the courier they use sees the same on the parcel. Nothing else: never your health data, your training or your email. Sellers agree to use these only for your order and to delete them once it, and any return, is over, except what tax law makes them keep. If you report a problem with an order, the seller and our team see the photos and note you send with it.

We will also hand something over if a court or the law genuinely requires it, and if the company is ever sold the accounts go with it under this same policy.

How long we keep it

While your account exists. When you delete your account, it switches off at once and is erased thirty days later — signing in during those thirty days brings it back.

If you run a gym and delete your account, the gym comes off the app at once, and its address, phone number, email and description are erased with the rest thirty days later; the record of which trainers coached there stays, without them.

Your saved delivery addresses are erased with the account; each order keeps the address it was sent to, because the invoice names it.

Two things survive that: orders and invoices, because tax law requires us to keep them for years, and the audit record of decisions staff made. Both are stripped of your name, phone number and email, so what remains is a sale rather than a person.

What you can do about all this

• Take everything with you. Profile, Your data, Download my data. It is one file with every column we hold, not a summary.
• Delete the account. Same screen. Thirty days' grace, then gone.
• Change your mind about any permission, at any time, in Profile. Withdrawing one does not undo what was already shared, but it stops it there.
• Correct anything that is wrong — most of it you can edit yourself; ask us for the rest.
• Complain. Write to our grievance officer, To be confirmed, at support@fitmarto.com or To be confirmed. If you are in India you may take an unresolved complaint to the Data Protection Board.

If you run a gym

When you register a gym we hold its name, city, address, phone number and email, what you write about it, and your own sign-in details. We check them before any trainer can find the gym. Trainers see its name, city and description; members see its name and city on the page of each trainer who coaches there. The phone number and email are for us to reach you, not for them.

What your dashboard shows you about members is theirs. It is shown to you to run the gym, and the Terms say what that allows.

If you are in the EU or the UK

We hold your data because we have a contract with you (running the app you signed up for) and, for your health information and progress photos, because you gave explicit consent — which you may withdraw at any time. You have the rights above plus the right to object and to ask that processing be restricted, and the right to complain to your own country's supervisory authority. Your data is processed in India and in other countries where our providers operate, under the safeguards those transfers require.

Children

You have to be 18 to have an account. We do not knowingly hold anything about anyone younger, and if we find out we have, we delete it.

When this policy changes

We change the version at the top and the date it took effect. If a change matters, we tell you in the app before it starts applying, and ask again for anything that needs your agreement. Every permission you ever gave is stamped with the version that was showing at the time, so you can always tell what you actually agreed to.

Questions: support@fitmarto.com.