Privacy Policy

Personal Information You Provide

When you create an account, book classes, or interact with the Platform, we may collect the following information:

• Full name, email address, phone number, and date of birth
• Profile photo, bio, and fitness preferences
• Payment information (credit card numbers, billing addresses) processed securely via third-party providers
• Health and fitness data you choose to share (height, weight, fitness goals)
• Communications you send to us, including support requests and feedback

Information Collected Automatically

When you access or use the Platform, we automatically collect:

• Device information: IP address, browser type, operating system, device identifiers
• Usage data: pages viewed, features used, session duration, click patterns
• Location data: approximate location based on IP address or GPS (with permission)
• Log data: access times, referring URLs, error logs, and system activity

Information from Third Parties

We may receive information from third-party services, such as social login providers (Google, Apple), fitness device integrations, and analytics partners.

We use the information we collect to:

• Provide, maintain, and improve the Platform and its features
• Process transactions, manage bookings, and send confirmations
• Personalize your experience with tailored content, class recommendations, and workout plans
• Communicate with you about updates, promotions, and important notices
• Monitor and analyze trends, usage, and activities to improve our services
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations and enforce our Terms of Service
• Facilitate community features such as forums, reviews, and social interactions

We do not sell your personal information. We may share your data in the following circumstances:

• With trainers and gym partners to facilitate class bookings and personalized training
• With trusted service providers who assist in operating the Platform (payment processors, hosting, analytics, email delivery)
• With your consent or at your direction, such as when you connect third-party fitness apps
• To comply with legal requirements, court orders, or governmental requests
• To protect the rights, property, or safety of FitNova, our users, or the public
• In connection with a merger, acquisition, or sale of assets, with appropriate notice

All third-party service providers are contractually obligated to handle your data securely and only for the purposes we specify.

We implement industry-standard security measures to protect your personal information, including:

• End-to-end encryption for data in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits, penetration testing, and vulnerability assessments
• Strict access controls with role-based permissions for internal teams
• Secure authentication mechanisms including multi-factor authentication (MFA)
• Automated monitoring and alerting for suspicious activities
• SOC 2 Type II compliant infrastructure and processes

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use strong passwords and protect your account credentials.

We use cookies and similar technologies to:

• Essential cookies: Maintain your session, remember preferences, and ensure security
• Analytics cookies: Understand how you use the Platform to improve functionality
• Marketing cookies: Deliver relevant advertisements and measure campaign effectiveness

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. We respect "Do Not Track" (DNT) browser signals where required by applicable law.

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specific retention periods include:

• Account data: Retained for the duration of your account, plus 30 days after deletion request
• Transaction records: Retained for 7 years to comply with financial regulations
• Usage analytics: Aggregated and anonymized data may be retained indefinitely
• Support communications: Retained for 3 years after resolution

After the retention period expires, your data is securely deleted or anonymized in accordance with our data management policies.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Deletion: Request erasure of your personal data ("right to be forgotten")
• Portability: Receive your data in a structured, commonly used format
• Restriction: Request limitation of processing in certain circumstances
• Objection: Object to processing based on legitimate interests or direct marketing
• Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, please contact us at shamim.bd.pc@gmail.com. We will respond to your request within 30 days as required by applicable law.

FitNova is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected data from a child under 16, we will take immediate steps to delete such information. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at shamim.bd.pc@gmail.com.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by relevant authorities
• Data Processing Agreements with all third-party processors
• Adequacy decisions where recognized by applicable law
• Certification mechanisms and binding corporate rules where appropriate

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Post the revised policy on this page with an updated "Last Updated" date
• Send you a notification via email or through the Platform for significant changes
• Provide a summary of changes and, where required, obtain your consent

We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to reach out:

For data protection inquiries in the EU, you may also contact our Data Protection Officer (DPO) at shamim.bd.pc@gmail.com.