Data Safety Commitment
• All network traffic is encrypted using TLS/HTTPS.
• We do not sell or rent your personal information to third parties or advertisers.
• Camera access is used solely to scan partner venue QR codes for check-in.
• You can permanently delete your account & data at any time via in-app settings or our Account Deletion Portal.
1. Introduction & Scope
This Privacy Policy applies to the FITKEY - Gym & Fitness Pass mobile application (package ID com.fitkey.fitkey_user) developed by Ravindra Nath Jha and operated under FITKEY (“FITKEY”, “we”, “our”, or “us”). FITKEY provides flexible multi-venue gym and fitness studio access passes, instant QR-based check-in, on-demand workout sessions (FitKey Studio), and attendance tracking across partner gyms, swimming pools, yoga studios, and combat centres.
By downloading, creating an account, or using the FITKEY mobile application, you agree to the collection and use of information in accordance with this Privacy Policy.
2. Data We Collect & Google Play Data Safety
In compliance with Google Play Developer Program Policies, the table below provides complete transparency on the categories of data collected and their operational purposes:
| Data Category | Data Type | Collection | Purpose |
|---|---|---|---|
| Personal Info | Phone Number | Required | Secure OTP authentication & account management |
| Personal Info | Full Name | Required | User identification at partner gym check-ins |
| Personal Info | User ID | Required | Account management, membership validation & security |
| Health & Fitness | Check-ins & Attendance Logs | Collected | QR pass validation, membership count & workout history |
| Photos & Videos | Profile Photo | Optional | In-app profile avatar customization |
| Diagnostics | Crash Logs & Metrics | Optional | App performance diagnostics and bug fixing |
* We do not share your personal info, attendance records, or health logs with third-party advertisers or external data brokers.
3. Device Permissions & Hardware Usage
- Camera Permission (
android.permission.CAMERA):
FITKEY requests camera access strictly for the in-app QR scanner to check you in when arriving at a partnered gym, pool, or fitness studio. We do not record videos, capture continuous photos, or access your camera background streams. - Internet Access (
android.permission.INTERNET):
Used to communicate securely with our cloud servers to verify active memberships, load venue directories, stream on-demand workout videos, and log your attendance. - Storage / Media (Optional):
Used solely if you choose to select and upload a profile picture from your gallery.
4. In-App Payments & Membership Purchases
The FITKEY application is free to download. Users purchase fitness passes, single-day venue visits, or monthly/annual memberships inside the app.
All financial transactions are processed securely through certified, PCI-DSS compliant third-party payment gateways (e.g., Razorpay / Stripe / Google Play In-App Billing). FITKEY never stores or has access to your full debit/credit card numbers, CVVs, or net banking passwords.
5. Health & Medical Disclaimer
FITKEY provides fitness studio access and tracking tools. FITKEY is not a medical provider, and our content (including FitKey Studio on-demand workouts) does not constitute medical diagnosis, treatment, or clinical advice.
Always consult with a licensed physician or healthcare professional before beginning any new exercise regimen, strength routine, or physical activity, especially if you have pre-existing medical conditions or physical limitations.
6. Account Deletion & Data Erasure (Google Play Requirement)
In full compliance with Google Play's Account Deletion Policy, FITKEY provides a direct and effortless pathway for all users to permanently delete their account and associated personal data, both inside the app and via the web without needing to reinstall the app.
What happens when you request deletion:
- Permanently Erased: Your profile details, registered phone number, full name, profile picture, QR check-in history, attendance records, and active login sessions.
- Retention for Legal/Tax Compliance: Past payment transaction invoices may be retained securely for statutory accounting and tax compliance as mandated by law.
- Timeframe: Account deletion requests are permanently executed within 30 days.
You may also delete your account inside the mobile app by navigating to Profile > Settings > Delete Account, or by emailing support@fitkey.in.
7. Data Security
We implement industry-standard security safeguards to protect your personal data against unauthorized access, loss, or alteration. All client-server communications are protected by TLS 1.3 encryption. Internal access to user databases is restricted to authorized operations personnel on a need-to-know basis.
8. Children's Privacy
FITKEY is intended for individuals aged 18 and older (and teenagers aged 13–17 with parental consent where permitted by gym venue rules). We do not knowingly collect personal identifiable information from children under the age of 13. If you believe a child has provided us with personal information, please contact us immediately for deletion.
9. Contact Details & Developer Information
For questions regarding this policy, venue partnerships, or your personal data rights: