Privacy Policy

Last Updated: June 22, 2026

1. Introduction

Welcome to Fitnex (“we”, “our”, or “us”). We operate the Fitnex mobile applications (including the Member App and Gym Management App) and our website. This Privacy Policy details our practices regarding the collection, use, and disclosure of personal data when you use our service, and the choices you have associated with that data.

By downloading, installing, or using the Fitnex app, you consent to the data collection and usage practices outlined in this policy.

2. Information Collection and Use

To provide a functional, secure, and smart gym attendance experience, we collect specific information from both Gym Members and Gym Owners.

A. Information We Collect from Members

  • Mobile Phone Number: We collect your mobile number to send secure, one-time passcode (OTP) verification messages via SMS. This is our primary authentication method.
  • Device Identifier (Device ID): We collect your hardware device identifier (e.g. Android ID or iOS Vendor ID) to prevent account sharing. Your membership profile is bound to a single device.
  • Profile Information: Your name, email address, registration/join dates, and gym membership plan.
  • Attendance Records: Timestamps of when you generate an entry QR code and check into a gym.

B. Information We Collect from Gym Owners

  • Business Details: Gym name, contact number, address, and email address.
  • Subscription details: Dashboard usage plans, billing details, and active gym licensing packages.

3. How Your Information is Used

We use the collected information for various purposes:

  • Secure Authentication: Sending verification codes to verify your identity and protect your account from unauthorized access.
  • Device Binding: Enforcing that a member profile is linked to exactly one device, ensuring gym safety and preventing fraud.
  • Attendance Tracking: Logging entry records so gym owners can manage active occupancy, attendance logs, and membership status checks.
  • System Performance: To maintain and improve our app, diagnose errors, and address connection failures.

4. Third-Party Services

We do not sell your personal data. We engage specific, trusted third-party service providers to handle backend operations and authentication:

  • Supabase: We store application data, member profiles, logs, and database structures securely using Supabase cloud infrastructure, which employs state-of-the-art encryption protocols.
  • SMS Fortius: We transmit your phone number and OTP strings to SMS Fortius API servers solely for the purpose of delivering SMS login verification messages.

5. Data Retention

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. Members can request profile deletion through their respective gym management, which soft-deletes records from active databases.

6. Security of Data

The security of your data is important to us. We implement industry-standard administrative, physical, and technical security measures (including database SSL encryption and secure API calls) to protect your personal information from unauthorized access, misuse, or alteration.

7. Children's Privacy

Our services are not intended for use by children under the age of 13. We do not knowingly collect personal data from anyone under this age limit.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.

9. Contact Us

If you have any questions or suggestions about this Privacy Policy, please contact us at:

Email: privacy@fitnex.org
Website: www.fitnex.org/support