Privacy policy

1. Scope of this policy

This privacy policy applies to the FitApp website, the FitApp web application, and every service offered under the fit8.ir domain.

By creating an account or using FitApp services you agree to the collection and processing of data described below.

2. Data we collect

We only collect the data needed to operate coaching, training and billing features:

• Account data: first and last name, mobile number, email address and password (stored as a hash, never in plain text)
• Body and training data: height, weight, age, goal, workout logs, meal logs, water intake and sleep entries entered by the user
• Service data: coach and gym assignment, plan status, membership dates and payment records
• Technical data: IP address, browser type, device type and error logs used for security and troubleshooting

3. How we use data

Personal data is processed only for the following purposes:

• Creating and authenticating the user account
• Delivering training plans, meal plans, progress reports and coach messaging
• Processing payments, memberships and invoices
• Providing support, preventing abuse and improving service quality

4. Data sharing

FitApp does not sell, rent or trade personal data. Data is shared only in these limited cases:

• With the coach and gym the user is assigned to, limited to the information needed for coaching
• With the payment gateway, limited to the data required to complete a transaction
• With infrastructure providers hosting the service under confidentiality obligations
• With competent Iranian authorities when legally required

5. Data security

We apply technical and organizational safeguards proportionate to the sensitivity of the data.

• All traffic between the browser and FitApp services is transmitted over HTTPS
• Passwords are stored as one-way hashes and are not visible to FitApp staff
• Access to member records is role-based and limited to the assigned coach, gym and the user themselves
• Users remain responsible for keeping their own password and device secure

6. Cookies and local storage

FitApp uses cookies and browser local storage only for essential functionality.

• Keeping the user signed in between visits
• Remembering language and light/dark theme preferences
• No advertising or cross-site tracking cookies are used

7. Data retention

Account and training data is retained while the account is active and for the period required by applicable accounting and legal rules.

• Payment and invoice records are kept for the legally required retention period
• Training and nutrition logs are removed or anonymized after account deletion
• Backups are rotated on a regular schedule and then permanently erased

8. User rights

Every FitApp user may exercise the following rights at any time:

• View and correct profile information from the app profile page
• Request a copy of the personal data stored about them
• Request account deletion, subject to legal retention obligations
• Withdraw from optional notification channels

9. Minors

Users under 18 may use FitApp only with the consent and supervision of a parent or legal guardian. FitApp does not knowingly collect data from children under 13 without such consent.

10. Changes to this policy

This policy may be updated to reflect new features or legal requirements. The revision date at the bottom of this page always shows the current version, and material changes are announced inside the app.