Privacy Policy

Gym owners use FitMaza to manage their gym. When an owner or staff member adds a member to the Service, that gym decides what member information to enter and how it is used. FitMaza stores and processes that information on the gym’s behalf. For their own account, FitMaza is responsible for the information described below.

Account information. Name, mobile phone number, email address, role (gym owner, member, trainer or staff, marketer) and a password. Passwords are stored only as a one-way hash, never in plain text.

Gym and member records entered by gym owners and staff. Member name, phone number, email, gender, date of birth, address, emergency contact, medical notes, photo, identity-proof image, tags, membership plans, attendance, workout and diet plans, and body or progress measurements. Some of this (for example medical notes and measurements) can be health-related, so gyms should only record what they need and have the member’s permission.

Payment records. Amounts, dates, payment method and reference numbers for payments recorded in the Service. When a payment is made online, it is handled by our payment provider (see section 4). We do not receive or store your full card number, UPI PIN or bank login.

Photos. If you choose to add a member photo or other image, the app asks for access to your camera or photo library. We only access the photo you select.

Device and usage information. A push-notification token for your device, and technical logs such as IP address, time and the actions taken in the account (for security and troubleshooting).

• To create and secure accounts and let you sign in.
• To provide the Service: manage members, plans, attendance, payments, reminders and reports.
• To send notifications such as membership expiry reminders.
• To process subscription payments and confirm that they were completed.
• To keep the Service secure, prevent misuse and fix problems.
• To meet legal obligations.

We do not sell your personal information and we do not use it for third-party advertising.

We share information only with service providers that help us run the Service, and only as needed:

• Cashfree Payments – processes online payments for gym subscriptions.
• Google Firebase Cloud Messaging – delivers push notifications to your device.
• Email delivery provider – sends service emails where email is used.
• Hosting provider – our servers, where the data is stored.

Within a gym, member information is visible to that gym’s owner and the staff the owner authorises. We may also disclose information if required by law or to protect rights and safety.

Data is sent over encrypted connections (HTTPS). Passwords are hashed, and access to each gym’s data is restricted to that gym’s authorised users. No system is completely secure, but we work to protect your information and will act promptly on any issue we find.

We keep information while your account or your gym’s account is active and as long as needed to provide the Service, resolve disputes and meet legal or accounting requirements. When an account is deleted we remove or anonymise its personal information, except records we must keep by law (such as payment records).

• You can ask to see, correct or delete the personal information we hold about you.
• You can ask us to delete your account and associated data – see below.
• You can turn off push notifications in your phone’s settings.
• You can remove camera or photo access in your phone’s settings.

Account and data deletion. Email admin@fitmaza.in from the email address or phone number registered on your account, with the subject “Delete my FitMaza account”. We will confirm your identity and complete the deletion within 30 days. If you are a gym member, your gym may also hold your records, so ask the gym as well. Details are on our account deletion page.

The Service is intended for people aged 18 and over. Gyms are responsible for any under-18 member they register, including obtaining a parent’s or guardian’s consent. We do not knowingly collect information directly from children.

We may update this policy from time to time. The effective date above shows when it last changed. If the changes are significant we will notify you in the app or by email.

Questions or requests about this policy: admin@fitmaza.in.