Privacy Policy

Fitorza (the “App” and “Site”) is operated by [LEGAL ENTITY] (“Fitorza”, “we”, “us”, “our”), [REGISTERED ADDRESS]. Fitorza connects you with gyms, trainers, healthcare providers, labs and a marketplace for fitness and wellness products.

By using Fitorza you agree to the practices described here. If you do not agree, please do not use our services. Privacy contact: support@fitorza.com.

Account data you provide: name, email, phone number, country, gender and date of birth (optional), profile photo (optional) and any referral code.

Activity you generate: subscriptions and check-ins, bookings and consultations, marketplace and lab orders, payment method records, reminders, challenges, messages and support requests.

Health and fitness data: health records you upload, lab orders and results, consultation information, food and meal logs, and — only if you connect it — activity, sleep, heart-rate and related data from Apple Health or Android Health Connect.

Location data, only when you enable it, to show gyms, clinics, labs and facilities near you and to support gym check-in. You can disable this at any time in your device settings.

Device and usage data: app version, device type, device identifiers, push notification tokens and basic diagnostics.

Payment data is collected and processed by our payment partners. We do not store full card numbers on our servers.

To provide the service: operate your subscription and gym check-ins, process bookings, orders, lab orders and payments, deliver lab results and consultations, and sync connected fitness data you choose to share.

To personalize what you see, such as nearby gyms, providers and relevant content.

To send service communications about your account, bookings, orders and important updates, and push notifications you have enabled.

To keep the platform safe, prevent fraud and abuse, and meet legal and regulatory obligations.

With gyms, trainers, healthcare providers and labs you choose to interact with, so they can deliver the service you requested.

With service providers that operate parts of Fitorza on our behalf, under appropriate confidentiality terms, including: Agora (real-time audio/video for consultations), Google Maps (maps and place search), our cloud hosting and database providers, our payment partners, and push notification delivery services.

Connected health platforms (Apple Health, Android Health Connect) only when you enable them, and only for the data types you authorise.

When required by law, regulation or valid legal process. We never sell your personal data and do not use it for third-party advertising networks.

Some features (health records, lab orders, consultations, connected fitness data) involve sensitive health-related information. We treat this with extra care and share it only with the provider or lab you are using, or as needed to deliver the service you requested.

We do not use your health or fitness data for employment decisions, insurance eligibility, credit decisions, or any unauthorised sharing. Connected fitness data is used only to display your insights and is never sold.

We keep your personal data for as long as your account is active or as needed to provide the service.

When you request deletion of your account, we delete your associated personal data, except where we must retain limited records to meet legal, tax, accounting, security or fraud-prevention obligations. Such records are kept only for the period required and then deleted.

We use secure connections and access controls to protect your data, including encryption of data in transit between your device and our servers. Payment information is handled by PCI-compliant providers.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

You can review and update your profile in the App. You can disable location access in your device settings, and disconnect Apple Health or Health Connect at any time.

Account deactivation and deletion: an account that is inactive for 60 days is deactivated. To request removal of your account and associated personal data, email support@fitorza.com from the address on your account and we will process your request.

Where applicable law (such as the GDPR) grants them, you also have rights to access, correct, port, restrict or object to processing of your personal data, and to withdraw consent. To exercise these, contact support@fitorza.com.

Fitorza is not directed to children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact support@fitorza.com and we will delete it.

We may update this policy from time to time. Material changes will be notified in the App, and the “Last updated” date above will change.

This policy is governed by the laws of the Islamic Republic of Pakistan. Questions about privacy: support@fitorza.com.