Privacy Policy

Fitacle is the data controller responsible for your personal data. For any privacy questions or to exercise your rights, contact us at privacy@fitacle.com.

• Account data: name, email address, and password (stored only as a secure hash).
• Profile & fitness data: details you choose to provide such as age, height, weight, fitness goals, activity level, workout schedule, gym, city, and country.
• Community & messaging data: posts, comments, and direct messages you send to other members.
• Technical data: IP address, device and browser type, and cookie identifiers.
• Usage data: how you interact with the app, such as pages viewed and features used.

We process your data to:

• Create and manage your account and authenticate you.
• Provide core features such as body analysis, AI plans, the Fitacle Score, partner matching, and messaging.
• Match you with relevant training partners based on your profile.
• Keep the service secure and prevent fraud or abuse.
• Communicate with you about your account and important service updates.
• Improve our products and understand how the service is used.

Where the UK or EU GDPR applies, we rely on the following legal bases:

• Contract: to provide the service you sign up for.
• Consent: for optional features and non-essential cookies. You may withdraw consent at any time.
• Legitimate interests: to secure, maintain, and improve the service, balanced against your rights.
• Legal obligation: where we must retain or disclose data to comply with the law.

Depending on where you live, you have rights over your personal data. Under the UK/EU GDPR these include the rights to access, rectify, erase, restrict or object to processing, data portability, and to withdraw consent. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) you have the right to access and correct your data, the right to erasure, the right to grievance redressal, and the right to nominate another person to exercise your rights. Residents of other regions (including the CCPA in California) have comparable rights.

To exercise any right, email privacy@fitacle.com. You also have the right to lodge a complaint with your local data protection authority (for example, the UK ICO or the Data Protection Board of India).

We do not sell your personal data. We share it only with trusted service providers that help us run the service (such as our hosting and database provider) under contracts that require them to protect it. Profile information you choose to make visible (such as your name and fitness focus) is shown to other signed-in members to enable partner matching.

Your data may be processed in countries other than your own. Where we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses or transfers to countries with an adequacy decision.

We keep your personal data for as long as your account is active and as needed to provide the service. When you delete your account, we delete or anonymize your personal data unless we are legally required to retain it.

We use industry-standard measures including encryption in transit, hashed passwords, and row-level access controls so that users can only access their own private data. No method of transmission is completely secure, but we work continuously to protect your information.

Fitacle is not intended for children under 16 (or the minimum age required in your country). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date above. Significant changes will be communicated to you where required.

Questions about this policy or your data? Email us at privacy@fitacle.com.