Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account and profile data: first and last name, email address, username, phone number, gender, date of birth, profile photo and password (stored hashed).
• Fitness and health data you enter: height, weight, BMI, body measurements, fitness test results and fitness goals.
• Attendance and access data: gym check-ins and check-out records, membership status, and (where enabled) RFID fob / mobile-key access events and visit sessions used to operate gym entry.
• Camera and photos: with your permission, the in-app camera is used to scan QR codes at gym check-in, and your photo library or camera is used when you choose to upload a profile picture or attach an image to a support ticket.
• Gym and membership data: the gyms you join, your plan and subscription details, bookings and classes.
• Payments and transactions: payment references, amounts, currency, subscription and purchase history. Card and bank details are entered on our payment provider’s checkout page; we do not store your full card number.
• Support communications: messages, images and details you send to gym staff or to our support team.
• Device and usage data: device type and operating system, app version, push-notification tokens, IP address, and diagnostic/error logs used to keep the Services secure and working.

2. How we use your information

• Provide, operate and maintain the Services, including gym check-in and access.
• Create and secure your account and authenticate you when you log in.
• Track your attendance, fitness progress, measurements and goals.
• Process payments, manage subscriptions and issue receipts.
• Send you service notifications about your account, workouts, bookings and gym activity.
• Provide customer support and respond to your requests.
• Detect, prevent and address fraud, abuse, security incidents and technical problems.
• Comply with legal, accounting, tax and regulatory obligations.
• Improve and develop the Services using aggregated and de-identified usage information.

Where required by law, we rely on your consent, on the performance of our contract with you, or on our legitimate interests in operating and securing the Services. You can withdraw consent at any time where consent is the basis (for example, by disabling optional notifications or sharing in the app).

3. When we share information

We do not sell your personal data. We share it only as follows:

• Your gym: when you join a gym, we share your name, contact details, membership status, attendance and check-in records with that gym. Your body measurements, fitness test results and BMI are also visible to your gym only if you enable “Share Progress with Gym” in Settings > Privacy. You can change this at any time.
• Service providers (processors): trusted companies that help us run the Services, bound by confidentiality and data-protection terms. These include our cloud hosting and database providers, our email delivery provider, our push notification provider, and our payment provider. For example, when you log in with Google we receive basic profile information from Google, and payments are processed by our payment partner on its own checkout page.
• Legal and safety: where required by law, to comply with a valid legal request, to enforce our terms, or to protect the rights, safety and security of users, gyms or the public.
• Business transfers: as part of a merger, acquisition or sale of assets, with legally adequate notice to you.

4. Data security

We use technical and organisational measures designed to protect your data, including encryption of data in transit (HTTPS/TLS), access controls, hashed passwords and secure storage. No method of transmission or storage is completely secure, so please keep your password confidential and notify us immediately of any unauthorised activity.

5. Data retention and deletion

We keep your personal data for as long as your account is active or as needed to provide the Services. When you delete your account, we permanently delete or anonymise your personal data (including your profile, fitness and measurement records, attendance and access history, posts, and account credentials) within 30 days.

We may retain certain records for longer where we are legally required or permitted to do so, such as financial and transaction records kept for accounting, tax and dispute-resolution purposes, or data needed to prevent fraud or comply with the law. Any such retained records are kept securely and no longer linked to an identifiable account.

You can delete your account at any time from within the app (Profile > Delete Account), or by using our web page at fiyifit.com/delete-account.

6. Your rights and choices

• Access, review and update your personal data in the app or by contacting us.
• Delete your account and associated data (in-app or via the web page above).
• Control whether your gym can see your measurements and fitness results.
• Opt out of non-essential notifications.
• Exercise rights available under applicable law (including under the GDPR for users in the EEA/UK), such as requesting a copy of your data, correction, restriction or objection.

To exercise any of these rights, contact us at support@kuriolabsltd.com.

7. Children’s privacy

The Services are not intended for children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children under that age. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. International transfers

We may process and store your data in countries other than the one in which you live. Where we transfer personal data across borders we take steps to ensure it receives an adequate level of protection, in line with applicable law.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page, update the “Last updated” date, and, where the changes are material, notify you in the app or require you to review and accept the updated policy.

10. Contact us

FiyiFit is operated by Kuriolabs Ltd. For any questions or requests about this Privacy Policy or your personal data, contact us at support@kuriolabsltd.com.