Privacy Policy
Last updated: May 2026
1. Who We Are
AskFitness Technologies Private Limited ("AskFitness", "we", "us") operates the AskFitness gym and sports-academy management platform. This Privacy Policy describes how we collect, use, and protect personal data in accordance with the Digital Personal Data Protection Act 2023 (India) and other applicable laws.
2. Data We Collect
We collect the following categories of personal data:
- Account data: Name, email address, phone number, business name, and password hash
- Member data (entered by you): Gym member names, contact details, health goals, attendance, and payment records
- Usage data: Log files, IP addresses, browser type, pages visited, and feature usage
- Payment data: Transaction IDs and subscription status (card/bank details are processed by Razorpay; we do not store them)
- Communications: Support tickets and emails you send to us
3. How We Use Your Data
We use personal data to:
- Provide, operate, and improve the AskFitness platform
- Process payments and manage your subscription
- Send transactional communications (account verification, invoices, alerts)
- Provide customer support
- Detect, prevent, and investigate fraud or security incidents
- Comply with legal obligations
We do not sell your personal data or your members' data to any third party.
4. Data Sharing
We share data only with:
- Razorpay: Payment processing (governed by Razorpay's own privacy policy)
- Twilio: SMS and WhatsApp delivery
- Resend: Transactional email delivery
- Anthropic: AI feature processing (no personal data is sent; only anonymised workout/diet inputs)
- AWS: Cloud infrastructure (data hosted in ap-south-1, Mumbai)
- Legal authorities: When required by applicable law or court order
5. Data Retention
We retain your account data for the duration of your subscription and for 30 days after termination, after which it is permanently deleted. Backup copies are purged within 90 days. Certain records may be retained longer where required by law (e.g., GST records for 6 years).
6. Security
We use industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest for sensitive fields, bcrypt password hashing, and multi-factor authentication. All infrastructure is hosted in AWS Mumbai (ap-south-1) with private networking, access controls, and regular security audits.
7. Your Rights
Under applicable law, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your personal data ("right to be forgotten")
- Object to processing of your personal data
- Data portability — receive your data in a machine-readable format
To exercise these rights, email privacy@askfitness.in. We will respond within 30 days.
8. Cookies
We use strictly necessary cookies to maintain your login session. We do not use tracking or advertising cookies. You can control cookies through your browser settings, but disabling session cookies will prevent you from logging in.
9. Children's Privacy
The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice at least 15 days before the change takes effect. Your continued use after the effective date constitutes acceptance of the updated policy.
11. Contact Us
For privacy enquiries or to exercise your rights, contact our Data Protection Officer at privacy@askfitness.in or write to AskFitness Technologies Private Limited, Bengaluru, Karnataka 560001, India.