Privacy Policy

This policy explains what personal data Fitness Future Gym ("we", "us", "the gym") collects through our website (https://fitnessfuturegym.in) and member app, why we collect it, who we share it with, and the rights you have over it under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). It applies to visitors to our website, prospective members who submit an enquiry or claim a trial, and enrolled members using our member dashboard.

This is a plain-language summary of our actual data practices, prepared as a technical compliance measure — it is not a substitute for legal advice, and should be reviewed by a qualified lawyer before you rely on it for compliance purposes.

1. What We Collect

Depending on how you interact with us, we collect:

• Contact & identity details — full name, WhatsApp/phone number, email address, and postal address, collected when you sign up for an account, claim a free trial, or send us an enquiry.
• Date of birth — optional, collected at signup, used for birthday greetings and age-appropriate program guidance.
• Membership & attendance data — your membership number, plan, joining date, and check-in timestamps each time you mark attendance (in person via QR code or through the app).
• Fee & payment records — the amount, method (UPI, cash, or other manual method), and date of each payment you make. We do not process card payments and do not store card numbers or bank details — payments are recorded manually by our front-desk staff.
• Fitness & activity data — information you choose to log, such as workout entries, personal records, muscle-group progress, body-weight/height for the BMI & macro calculator, and food/nutrition entries.
• Communication preferences & push notifications — your reminder settings (water, meal-log, streak, workout) and, if you enable them, a push-notification subscription token from your browser.
• Enquiry messages — anything you type into the "Direct Inquiry" form on our Location page.
• Technical data — standard web server logs (IP address, browser type, pages visited) collected automatically by our hosting provider as part of running the website securely.

We do not knowingly collect data from anyone below the age set out in our Terms & Conditions without appropriate consent.

2. Why We Collect It

• To create and administer your membership account and digital membership card.
• To record attendance, calculate streaks, and track fee due dates.
• To let you log and review your own workouts, nutrition, and progress.
• To send service messages relevant to your membership — fee due/overdue reminders, payment receipts, membership card delivery, account block/unblock notices, birthday greetings, and (only if you opt in) water/meal/streak reminders — by WhatsApp, email, and/or push notification.
• To respond to enquiries and trial requests you submit to us.
• To operate, secure, and improve the website and app, and to detect abuse (e.g. fee non-payment patterns).

We do not sell your personal data, and we do not use it for third-party advertising or profiling.

3. Who We Share It With

We use a small number of service providers to run the website and app. Each one only receives the data it needs to perform its specific function on our behalf:

• Supabase — our database and authentication provider, which stores your account, attendance, fee, and activity records.
• Vercel — our website hosting provider.
• Resend — our email delivery provider, used to send receipts, reminders, and account notices.
• Meta / WhatsApp Business Platform — used to deliver WhatsApp messages (reminders, receipts, membership cards) to the number you provide.
• Web3Forms — processes the "Direct Inquiry" form on our Location page and forwards it to our email inbox. If you use that form, your name, phone number, and message pass through this third-party service.
• Google (Fonts & Maps) — our website loads typefaces from Google Fonts and, on our Location page, an embedded Google Map. Loading these can expose your IP address and browser information to Google. See our Cookies Policy for how we handle this.
• Your device's push-notification service (e.g. the one built into your browser/OS) — used only if you opt in to push notifications.

Some of these providers may process or store data outside India. We only share what each provider needs to do its job, under their own respective privacy and security terms. We do not otherwise sell, rent, or trade your personal data to anyone.

We may also disclose information where required by law, to a court or government authority, or to protect the rights, safety, or property of the gym, our members, or the public.

4. How Long We Keep It

Core account information (your name, contact details, membership, and fee records) is kept for as long as your membership is active, and for a reasonable period afterward for accounting and legal record-keeping purposes [exact post-membership retention period to be confirmed by gym management].

Granular activity logs are automatically deleted on a rolling basis:

• Attendance check-in history — kept 30 days.
• Workout logs — kept 30 days.
• Food/nutrition logs — kept 30 days.
• In-app notifications — kept 7 days.
• Individual fee payment records — kept 18 months, after which they are archived (see below) and removed from the live system.

Before a fee payment record is removed, it is captured in a yearly financial-year archive sent to gym management for accounting records — the underlying data isn't deleted outright, it moves from the live system to an internal archive copy.

Your permanent streak counters and personal records are not subject to this rolling deletion, since they are the record of your membership itself.

5. Your Rights Under the DPDP Act, 2023

As a Data Principal under India's DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how it has been processed.
• Correction of inaccurate or incomplete personal data.
• Erasure of your personal data, once it is no longer needed for the purpose it was collected for or once you withdraw consent (subject to our legal/accounting record-keeping obligations).
• Withdraw consent at any time for optional processing (e.g. opt-in reminder notifications), without affecting the lawfulness of processing before withdrawal.
• Grievance redressal — to raise a complaint about how your data is handled and receive a response within a reasonable time.
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, contact us using the details in Section 7 below. We will respond within a reasonable timeframe.

6. Security

We take reasonable technical and organisational measures to protect your data, including access controls on our admin systems and encrypted connections (HTTPS) across the website and app. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

7. Grievance Officer & Contact

For any question about this policy, or to exercise your rights above, contact:

Fitness Future Gym
KH.No.52, Shop No.5 Plot No.8-A, 18, near Rao Vihar, Rao Vihar, Nangloi, Delhi 110041
Email: contact.fitnessfuture@gmail.com
Phone: +919643526435

[The DPDP Act requires a named Grievance Officer contact to be published — gym management should confirm a named individual for this role.]

8. Changes To This Policy

We may update this policy from time to time as our practices or the law change. The "Last updated" date at the top reflects the most recent revision. Continued use of the website or app after a change means you accept the updated policy.