Privacy policy

What we collect, why, and who can see it

Last updated

Systofit is an app that connects you with an independent fitness business — a coach, studio or therapist. This policy explains what we collect, why we need it, and who can see it.

Plain version: we collect what the business needs to work with you, we never take your money, and you can delete your account from inside the app at any time.

What we collect

• Account: your email address, and your name and profile picture if your Google or Apple account provides them. We never receive your password.
• Profile: your name, mobile number, date of birth and city. The business needs these to identify you and contact you about your sessions.
• Health and fitness data: the weight you log, any progress photos you upload, and the diet or workout plans your coach writes for you.
• Activity: your bookings, your subscriptions, and payments the business has recorded against your name.
• Messages: the conversation between you and the business.
• Device: a notification token so we can send you reminders, and basic technical information such as app version and error reports.

Who can see it

Your data belongs to the workspace you joined. The owner of that business can see your profile, your bookings, your plans and your progress — that is the point of the app.

• Other members of the same business CANNOT see your data.
• Other businesses on Systofit cannot see it either, even if you join more than one. Each workspace is separated at the database level.
• Private notes your coach writes about you are theirs, not yours, and are never shown to you in the app.
• Systofit staff access personal data only when it is necessary to operate or fix the service.

Payments

Systofit never holds your money and never sees your card or UPI credentials. You pay the business directly using your own UPI app. When you tap "I have paid", we record that you say you have paid, and the business confirms it separately.

That means the payment records in the app are bookkeeping, not proof of a transaction we processed.

Where your data is stored

• Your account and activity are stored in a managed PostgreSQL database.
• Photos and file attachments are stored privately in Cloudflare R2. They are never public: the app fetches them through short-lived links that expire after 15 minutes.
• Notifications are delivered through Google Firebase Cloud Messaging.
• Sign-in is handled by Google and Apple under their own privacy policies.

How long we keep it

We keep your data for as long as your account exists. If you delete your account, we remove your name, mobile number, date of birth, location and sign-in identity immediately.

The business keeps its own financial records of payments you made, because it is legally required to. Those records will no longer identify you.

Your choices

• You can correct your profile at any time from the app.
• You can delete your account from Profile → Delete account. It is immediate and cannot be undone.
• You can turn off notifications in your phone settings.
• You can ask us what we hold about you by emailing $supportEmail.

Children

Systofit is not intended for children under 16. If you believe a child has given us personal data, contact us and we will remove it.

Changes and contact

If we change this policy we will update the date at the top and, for anything significant, tell you in the app.

Questions: $supportEmail