Privacy Policy

Welcome to Fitrobit — Sri Lanka's first AI-powered gym management system. We respect your privacy and are committed to protecting your personal data with industry-leading security standards. This privacy policy explains how we collect, use, and safeguard your information when you use our platform, mobile apps, access control systems, and AI-powered features. It also outlines your privacy rights and how Sri Lankan and international data protection laws protect you.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: name, username, gym name, member ID
• Contact Data: email address, phone number, physical address
• Biometric Data: fingerprint data for access control (stored encrypted and not shared)
• Health & Fitness Data: progress tracking, attendance logs, workout history (optional)
• Technical Data: IP address, browser type, device information, access logs
• Usage Data: AI-analyzed patterns for attendance, retention predictions, and personalized insights
• Payment Data: transaction history, subscription status (payment details processed by secure gateways)
• Marketing Data: your communication preferences and response to promotional offers

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To provide and maintain gym management services and mobile app functionality
• To process access control authentication (QR, RFID, fingerprint)
• To enable AI-powered features: attendance insights, churn prediction, personalized recommendations
• To send automated payment reminders and renewal notifications via SMS, WhatsApp, or email
• To provide customer support and respond to inquiries
• To analyze usage patterns and improve service quality
• To monitor platform performance and ensure 99.9% uptime
• To detect, prevent, and address security issues or fraudulent activity
• To send promotional offers and service updates (with your consent)

We implement industry-leading security measures to protect your data:

• SSL/TLS encryption for all data transmission
• Encrypted storage for sensitive data including biometric information
• Secure cloud infrastructure with 99.9% uptime guarantee
• Role-based access control for staff and administrators
• Regular security audits and penetration testing
• Automated backup systems to prevent data loss
• Compliance with international data protection standards

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

• Request access to your personal data
• Request correction of your personal data
• Request erasure of your personal data
• Object to processing of your personal data
• Request restriction of processing your personal data
• Request transfer of your personal data
• Right to withdraw consent

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.