Privacy Policy

Fittin OS has three kinds of users:

• Clients — people looking to book fitness professionals.
• Professionals — trainers and fitness service providers who list and sell their services.
• Admins — Fittin's internal team, who use a separate, more restricted part of the platform to review verifications, moderate content, and manage payments.

This policy covers all three.

When you sign up: your name, email address, phone number, and password. Professionals additionally provide profile details, service listings, and availability.

To verify Professionals: Aadhaar-based identity verification is done through our verification partner, API Sathi, using a consented DigiLocker flow, along with any certification documents Professionals choose to upload. Verification results are reviewed and approved by our admin team before a Professional goes live on the platform.

When you book or message: booking details, time slots, conversation messages between Clients and Professionals, requirement posts, and proposals.

Location data: if you use address autocomplete or location-based search, this is handled through Google Maps. During an active booking, we use live location tracking so both sides can see trip progress — this only runs while a booking is in progress, not continuously.

Payment and wallet data: payments, coin purchases, and payouts are processed through Cashfree. We don't store your card, UPI, or bank credentials ourselves — Cashfree handles that directly. Internally, we keep a record of transactions (an append-only ledger) so wallet balances, earnings, and payouts stay accurate and auditable.

Files you upload: profile photos and certification/verification documents. These are stored securely, either on our servers or in Google Cloud Storage depending on environment, and access is restricted.

Usage data: basic technical information like IP address, browser type, and how you interact with the platform, mainly for security and improving the product.

• To create and run your account, and give you the right access (Client, Professional, or Admin).
• To verify a Professional's identity and certifications before they can accept bookings.
• To let Clients and Professionals find each other, communicate, book services, and leave ratings/feedback (ratings are recorded as part of completing a booking, not a separate review system).
• To process payments, manage the coin wallet, and pay out Professional earnings.
• To send booking confirmations, verification updates, reminders, and support responses — by email or in-app notification.
• To keep the platform safe: this includes reviewing reported conversations, blocking abusive users, and handling support tickets.
• To fix bugs and improve the platform.

We do not use your data to build advertising profiles, and we do not sell your personal information.

• Other users, only where needed: a Professional's public profile is visible to Clients; booking and conversation details are shared only between the Client and Professional involved.
• API Sathi, for Aadhaar-based identity verification through DigiLocker.
• Cashfree, for payments, coin purchases, and payouts.
• Google Maps, for address lookup and geocoding.
• Our hosting and cloud storage providers, purely to run and store the platform's data securely.
• Legal authorities, only if we're required to by law.

That's the full list — we don't share your data with anyone outside of what's needed to actually run the service.

• Every request to our platform passes through security checks — including rate limiting and authentication — before it can touch any data.
• Access to sensitive actions (like approving a Professional's verification) is restricted to our admin team, and every admin action is logged for accountability.
• Identity verification is done through a licensed provider (API Sathi), not stored or processed by us directly.
• Payment credentials never touch our servers — Cashfree handles that.
• Uploaded files and documents are stored with restricted access.
• No system is 100% immune to risk, but we've built Fittin OS with these safeguards in mind from the ground up.

You can:

• Access, update, or correct your account and profile information anytime.
• Request deletion of your account. (Some information, like verification or transaction records, may need to be retained for a period to meet legal or financial obligations.)
• Turn off location access — manual address entry is always available as a fallback.
• Reach out to us anytime with questions about your data.

Fittin OS is meant for adults. We don't knowingly collect information from anyone under 18, and if we learn that we have, we'll delete it.

If anything meaningful changes about how we handle your data, we'll update this page and let you know through the platform or by email. Continuing to use Fittin OS after an update means you're okay with the changes.

Questions, concerns, or requests about your data? Reach out:

Fittin Health and Fitness LLP