Welcome to FitPerks. Your privacy is important to us. This Privacy Policy describes how we collect, use, store, and share your information when you use our mobile app, website, and related services (collectively, the “Services”). By using FitPerks, you consent to this Privacy Policy.

1. Information We Collect

We collect information to provide personalized fitness rewards, support our services, and ensure a great user experience.

a. Information You Provide

• Account Details: Email address, username, password (hashed).

• Profile Data: Age range, gender (optional), country or region.

• Contact Information: When you contact support, we may retain the message and contact method.

b. Health & Fitness Data (Sensitive Data)

With your explicit, revocable consent, we access fitness data from:

• Apple HealthKit (iOS)

• Health Connect by Android (Android)

We may collect:

• Step count

• Active calories burned

• Move/Stand/Exercise ring completion

• Exercise minutes

• Distance walked or run

• Workouts and duration

We only access health data necessary to compute fitness rewards. Health data is never used for advertising and is processed only with your consent.

c. Device and Technical Data

Automatically collected for performance and analytics:

• Device type, OS version, and app version

• IP address, language, and timezone

• Crash reports and diagnostic logs

d. Cookies and Tracking Technologies (Web only)

If you use our web platform:

• We may use cookies and similar technologies for login sessions, analytics, and performance.

• We use tools like Google Analytics (or similar) to understand website usage.

You can control cookies via browser settings.

2. How We Use Your Information

We use your information to:

• Calculate and award fitness points

• Enable gift card redemptions

• Provide personalized progress and goal tracking

• Send reminders, motivation, and optional promotional messages

• Monitor and improve system performance

• Prevent fraud and ensure fair usage

We may also aggregate and anonymize data for analytics or research purposes.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Consent (e.g., for health data)

• Contract (e.g., to deliver rewards)

• Legitimate Interests (e.g., security, analytics)

• Legal Obligations (e.g., complying with law enforcement)

You may withdraw your consent at any time.

4. Sharing and Disclosure

We do not sell or rent your personal information.

We may share your data:

• With rewards partners to fulfill gift card redemptions

• With trusted service providers (e.g., cloud storage, analytics), under confidentiality agreements

• In response to legal requests (court orders, subpoenas, etc.)

• In case of a merger, acquisition, or asset sale (with notice)

5. Data Retention

We retain your data only as long as needed:

• Account and profile data: while your account is active

• Health data: stored locally where possible; temporary snapshots retained for reward processing

• Reward transaction data: retained for accounting and fraud prevention for up to 5 years

• Support correspondence: up to 2 years

Upon deletion request, we permanently erase your data within 30 days unless retention is required by law.

6. Data Security

We use industry-standard safeguards to protect your information:

• TLS encryption for data in transit

• Encryption at rest for sensitive data

• Secure APIs and regular vulnerability testing

• Role-based access controls

Despite our efforts, no system is 100% secure. You use our services at your own risk.

7. Your Rights and Choices

Depending on your jurisdiction (e.g., EU, UK, California), you may have rights including:

a. General User Rights

• Access your data

• Correct or update your data

• Delete your account and data

• Withdraw consent (e.g., health permissions)

b. GDPR Rights (EEA/UK Users)

• Right to object to processing

• Right to data portability

• Right to lodge a complaint with a Data Protection Authority

c. CCPA/CPRA Rights (California Residents)

• Right to know what personal data is collected and shared

• Right to delete your data

• Right to opt out of “sale” or “sharing” (we do not sell data)

To exercise your rights, contact us at [TBD].

8. Children’s Privacy

FitPerks is not intended for users under 13 years of age, or 16 where required by local law. We do not knowingly collect data from children. If you are a parent and believe your child has used our app, contact us immediately to delete their information.

9. International Transfers

We may transfer your data to the United States or other countries where our servers or service providers are located. These transfers comply with applicable legal safeguards such as Standard Contractual Clauses (SCCs).

10. Third-Party Links and Services

Our app may contain links to external websites or services. We are not responsible for their privacy practices. We recommend reading their privacy policies before engaging with them.

11. Changes to This Privacy Policy

We may update this policy to reflect changes to our practices or legal requirements. We will notify you of material changes via in-app notice or email. Continued use after such changes constitutes consent.

12. Contact Us

Have questions or need help?

FitPerks Support Team
Email: fitperkscontact@gmail.com

We typically respond within 3 business days.