Privacy Policy

1. Introduction

Fitflix ("we", "our", or "us") is a premium fitness and wellness mobile application operated by Fitflix Wellness Club, Sainikpuri, Hyderabad, India. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data. By using the Fitflix app, you agree to the terms described in this policy.

2. Information We Collect

2.1 Personal Information

When you register or use the Fitflix app, we may collect:

• Full name
• Phone number
• Age and date of birth
• Sex / gender
• Physical address
• Emergency contact details
• Digital signatures (for consent forms)

2.2 Health and Fitness Data

As a wellness platform, we collect sensitive health-related data including:

• Height, weight, and target weight
• Fitness goals and workout experience level
• Workout history and exercise logs
• Meal logs and food preferences
• Hydration tracking data
• Allergies and current medications
• Uploaded health and medical reports (e.g., blood tests, DNA panels, imaging results) in PDF format

2.3 Account and Authentication Data

We collect authentication data to verify your identity:

• Phone number and OTP (One-Time Password) via Firebase Authentication for end-users
• Email address and password for staff accounts (doctors, trainers, admins)

2.4 Usage and Technical Data

We may automatically collect limited technical data required for app functionality:

• Device network state (to detect connectivity)
• Error logs and performance data via Sentry (anonymized crash reports)

3. How We Use Your Information

We use the information we collect to:

• Create and manage your Fitflix membership account
• Deliver personalized fitness, nutrition, and recovery recommendations
• Enable trainers and wellness staff to design tailored programs for you
• Process and display your uploaded health and diagnostic reports
• Track your workout, meal, and hydration progress
• Manage nutritionist bookings and appointment scheduling
• Process digital consent forms and maintain compliance records
• Send OTP messages for secure login verification
• Diagnose and fix technical issues in the app via error monitoring
• Communicate with you regarding your membership and service updates

4. Sensitive Personal Data

Fitflix collects and processes sensitive personal data including health and medical information. This data is treated with the highest level of care and is:

• Collected only with your explicit consent
• Used solely for providing you wellness and health services
• Accessible only by authorized Fitflix staff (trainers, doctors, admins) on a need-to-know basis
• Never sold or shared with third parties for advertising or marketing purposes

By using Fitflix, you provide explicit consent for us to collect and process this sensitive data for the purpose of delivering your fitness and wellness program.

5. How We Share Your Information

We do not sell your personal data. We may share your information in the following limited circumstances:

5.1 Authorized Staff

Your profile, health data, and progress may be accessed by Fitflix trainers, nutritionists, and medical staff assigned to your program.

5.2 Third-Party Service Providers

We use the following third-party services to operate the app:

• Firebase (Google LLC) — User authentication and app infrastructure. Firebase may process your phone number to deliver OTP messages. Firebase Privacy Policy: https://firebase.google.com/support/privacy
• Sentry — Error monitoring and crash reporting. Sentry receives anonymized technical data only. Sentry Privacy Policy: https://sentry.io/privacy/
• Syncfusion — PDF viewer library for displaying health reports. No data is shared externally.

These providers are contractually bound to use your data only to provide their services to us and not for any other purpose.

5.3 Legal Obligations

We may disclose your information if required to do so by law, court order, or government authority, or to protect the rights and safety of our users or third parties.

6. Data Storage and Security

Your data is stored in the following environments:

• Cloud server: Stored securely in our backend database, accessible only over encrypted HTTPS connections.
• Local device storage: Certain data is cached locally on your device in a secure SQLite database (via Drift/Flutter) for offline access and performance.

We implement appropriate technical and organizational security measures including encrypted data transmission (HTTPS/TLS), access controls, and staff authorization policies to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or method of electronic storage is 100% secure.

7. International Users

Fitflix primarily operates in India and is designed for members in India (+91). We also serve users in the United States, United Kingdom, UAE, Singapore, Australia, and Canada.

If you are located outside India, please be aware that your data may be transferred to and processed in India, where data protection laws may differ from those in your country. By using Fitflix, you consent to this transfer.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you our services. We may also retain certain information as required by law or for legitimate business purposes such as resolving disputes or enforcing agreements.

When your account is deleted (upon request), we will delete or anonymize your personal data within a reasonable timeframe, except where retention is required by law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your account and associated data
• Withdrawal of Consent — Withdraw consent for processing sensitive health data (this may affect your ability to use the app)
• Data Portability — Request your data in a portable format

To exercise any of these rights, contact us at support@fitflix.app. As Fitflix does not currently have a self-service account deletion option, all deletion requests must be submitted via email or through your personal concierge.

We will respond to your request within 30 days.

10. Children's Privacy

Fitflix is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately at support@fitflix.app and we will take steps to delete it.

11. App Permissions

The Fitflix app requests the following device permissions:

• INTERNET — Required to communicate with our servers and deliver app functionality
• ACCESS_NETWORK_STATE — Required to detect network connectivity and manage offline/online modes

We do not request access to your camera, microphone, contacts, location, or other sensitive device features.

12. Cookies and Tracking

The Fitflix mobile app does not use cookies. We do not use advertising tracking SDKs, analytics platforms (such as Google Analytics or Meta Pixel), or any cross-app tracking technologies.

Sentry is used solely for crash and performance monitoring and does not track user behavior or advertising identifiers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this document. For significant changes, we will notify you within the app or via SMS.

We encourage you to review this policy periodically. Your continued use of Fitflix after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your data, please contact us at: