Privacy policy
How Fit N Shapes and the Fit N Shapes Android app collect, use and protect your personal data.
Effective from 28 October 2026
1. Who we are
Fit N Shapes runs this website and the Fit N Shapes Android app (package com.fitnshapes.app).
The app is used by our members, trainers and staff to manage memberships, fees, attendance, workouts,
diet and progress. Accounts are created by the gym when you join; you cannot create an account in the app yourself.
This policy covers the website, the app and the server they both use. We do not show ads and we do not sell your data.
2. What we collect
Account and profile
Your name, phone number, email address, date of birth, gender, profile photo (if you add one), your role (member, trainer or admin) and your password, which we store only as a secure hash.
Membership and payments
Your membership plan, start and end dates, fees, discounts and payment history. If you record a payment in the app you may attach a photo or screenshot of the payment as proof. The app does not process card or bank details; payments are made in person or through your own UPI or banking app.
Attendance and location
Your check-in and check-out times. When you check in, or when automatic check-in is on, the app uses your phone's precise location to confirm that you are at the gym. The location is sent with the check-in request so the server can check the distance to the gym; we record that you checked in and when, and we do not keep a history of where you have been.
Fitness and health
Information you or your trainer enter: body measurements, weight, BMI and body-fat estimates, transformation photos, exercise plans, diet plans and the food you log. If you turn on step counting, the app reads your phone's step counter and uploads your daily step totals.
Messages and community
Messages you send to trainers or staff, community chat posts, feedback, announcements you receive, and reviews you submit. A review you submit may be shown on this website with your name once the gym approves it.
Store orders
Products you order from the gym store, quantities, prices and order status.
Website enquiries
If you send an enquiry from the Join page we collect your name, phone number, optional email address, the plan you are interested in and your message, so the gym can contact you.
Technical data
Our server records the time, IP address and outcome of requests for security and to limit abuse, and keeps a record of your signed-in sessions. The app writes a small diagnostic log on your phone only; it is not uploaded unless you choose to share it with us.
This website uses only essential cookies: one keeps you signed in and one protects forms from forgery. We do not use analytics, advertising or tracking cookies.
3. App permissions
The app asks for each permission only when you use the feature that needs it, and works without the optional ones.
| Permission | Why we need it |
|---|---|
| Location (precise) | To confirm you are at the gym when you check in. |
| Location in the background | Optional. Only for automatic check-in, so you are checked in when you arrive at the gym even if the app is closed. |
| Physical activity | Optional. To read your phone's step counter for the steps feature. |
| Camera and photos | To take or choose a profile photo, a progress photo, a product photo or a payment proof. Only the photo you pick is uploaded. |
| Notifications | For check-in confirmations, fee reminders, messages and announcements. |
| Send SMS | Staff only. Lets gym staff send fee reminders or login details to a member from the staff member's own phone. Members are never asked for this. |
| Run at start-up, ignore battery optimisation | So automatic check-in and step counting keep working after the phone restarts. |
| Internet | To talk to the gym's server. |
You can turn any permission off at any time in your phone's settings.
4. How we use your data
- To run your membership: plans, fees, renewals, receipts and reminders.
- To record attendance and check you in at the gym.
- To let your trainer build and adjust your workout and diet plans and follow your progress.
- To send you notifications and messages about your membership and the gym.
- To answer website enquiries.
- To keep the service secure, prevent misuse and fix problems.
We do not use your data for advertising, and we do not make automated decisions about you that have legal or similar effects.
5. Who can see it
- Gym staff: admins can see member records to run the gym. Trainers see the members assigned to them, including their fitness and diet information.
- Other members: only what you choose to post in community chat, and an approved review on this website.
- Our hosting provider: the server and database run on a hosted server that stores the data for us and is not allowed to use it for anything else.
- Authorities: only when the law requires it.
We do not sell, rent or trade your personal data.
6. How long we keep it
We keep your account and its records while you are a member and for as long as we need them for accounting and legal obligations afterwards. Website enquiries are kept until they are dealt with and then for up to one year. Expired sign-in sessions are removed automatically. Step data on your phone is kept for 90 days and is cleared when you log out. When you ask us to delete your account, we delete or anonymise your data as described below.
7. Security
All traffic between the app, this website and our server is encrypted with HTTPS. Passwords and sign-in tokens are stored only as secure hashes, sessions expire, and staff see only what their role allows. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you as the law requires.
8. Your rights
Under India's Digital Personal Data Protection Act, 2023 and other laws that apply to you, you can ask us to access, correct or delete your personal data, withdraw consent you have given, and name someone to act for you. You can update most of your profile in the app yourself. For anything else, contact us; we will answer within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.
9. Delete your account
To delete your Fit N Shapes account and its data:
- Contact the gym using the details in Contact us, or ask at the front desk.
- Tell us the name and registered phone number on the account. We will confirm the request with you.
- We delete your account within 30 days.
We delete your profile, photos, attendance, fitness, diet, step and message data. We may keep payment and invoice records for as long as tax and accounting law requires, after which they are deleted. You can also ask us to delete only some of your data, such as photos or measurements, without closing your account.
10. Children
Members under 18 can use the app only with the consent of a parent or guardian, who may contact us about the child's data at any time. We do not knowingly collect data from children without that consent.
11. Changes to this policy
We may update this policy when the app or the law changes. We will change the date at the top of this page and, for important changes, let you know in the app.
12. Contact us
For privacy questions or requests, contact Fit N Shapes:
- Or visit the gym: the address and opening hours are on the Contact page.