Privacy Policy
FitBlastCRM ("we", "us") provides gym management software to fitness centres in India ("Gyms") at fitblastcrm.in and app.fitblastcrm.in. This policy explains what personal data we process, why, and the choices you have.
1. Our role
- Gym members: the Gym you belong to decides what information about you is recorded and how it is used. FitBlastCRM processes that information on the Gym's behalf to provide the service. For questions about your membership data, contact your Gym first; you can also contact us directly (section 9).
- Gym owners and staff: we process your account information to give you access to the service.
2. Information we process
Gym members (entered by the Gym):
- name and mobile number (required)
- optional details the Gym may add: email, date of birth, gender, emergency contact, notes
- membership plans, validity dates, payments (amount, method, reference) and invoices
- gym check-in records (date, time, branch)
Gym owners and staff:
- name, mobile number, role and branch
- login records: one-time login codes (stored only in hashed form), session data such as device type, browser and IP address, and last login time
Technical data:
- IP address and browser information, used for security, abuse prevention and audit logs
- error reports, used to fix problems in the app
We do not collect payment card or bank details. Payments are recorded by the Gym, not processed by us.
3. How we use information
- to run the service: managing members, memberships, payments, invoices and check-ins
- to send WhatsApp messages on the Gym's behalf: login codes, payment receipts, membership welcome messages and fee reminders
- to keep accounts secure: login verification, rate limiting and audit logs
- to fix errors and improve reliability
We do not sell personal data, and we do not use it for advertising.
4. WhatsApp messages
Messages are sent from the Gym's WhatsApp Business number using the WhatsApp Business Platform operated by Meta Platforms, Inc. Meta processes message content and delivery information under its own terms and policies. If you no longer want to receive reminders or welcome messages, ask your Gym, or reply to the Gym's WhatsApp number.
5. Service providers
We use trusted third-party providers to run FitBlastCRM, including cloud hosting and database services, website delivery and security services, error-monitoring tools, and the WhatsApp Business Platform operated by Meta Platforms, Inc. for messaging. These providers process personal data only as needed to provide their services to us and are required to protect it. Some providers may process data outside India, with safeguards appropriate to the service.
6. Cookies
The FitBlastCRM app uses only essential cookies that keep you securely signed in. This website sets no cookies of its own. We do not use advertising or analytics cookies. Our security provider may set strictly necessary cookies to protect the service against abuse.
7. Data retention
- We keep a Gym's data for as long as the Gym uses FitBlastCRM.
- When a Gym deletes a member, the record is removed from active use. Payment and invoice records may be kept as long as needed for the Gym's accounting and legal obligations.
- When a Gym stops using the service, we delete its data on request, or within a reasonable period after the account ends, unless the law requires us to keep it.
8. Security
We protect data with encrypted connections (HTTPS), encryption of sensitive credentials, hashed login codes, access controls and audit logging. No system is completely secure, but we work to protect your information and will act promptly if a breach occurs.
9. Your rights and data deletion
You may ask to access, correct or delete your personal data, or withdraw consent where it applies, in line with India's Digital Personal Data Protection Act, 2023.
To request deletion or access: email darshanraju.dev@gmail.com with the subject "Data request", your name, your mobile number and the name of your Gym. We may verify your identity before acting, and we respond within 30 days. Where a Gym controls your data, we work with the Gym to complete the request.
10. Children
FitBlastCRM is a business tool for Gyms. If a Gym records a member under 18, the Gym is responsible for obtaining a parent's or guardian's consent.
11. Changes
We may update this policy. The latest version will always be on this page, with its effective date.
12. Contact and grievances
FitBlastCRM
Email: darshanraju.dev@gmail.com