Privacy Policy

1. Introduction

Welcome to FITISIFY OS, a next-generation gym management SaaS platform and athlete mobile application engineered and operated by Nexora Lab Technologies ("Company", "We", "Us", or "Our").

We respect your privacy and are committed to protecting the personal data of gym facility owners, staff administrators, trainers, and gym members ("Users"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access our cloud web software or use our FITISIFY OS mobile application on Android and iOS devices.

2. Information We Collect

We collect information necessary to provide seamless multi-tenant gym management and digital attendance services:

• Account & Profile Information: Full name, phone number, email address, emergency contact details, profile picture, gender, and gym facility membership ID.
• Gym Membership & Attendance Data: Membership tier, plan duration, start and expiry dates, payment transaction receipts, check-in timestamps, and dynamic QR digital pass logs.
• Device & Technical Information: Operating system, app version, unique device tokens for FCM push notifications, IP address, and security logs.
• Payment Information: Transaction IDs and payment verification statuses processed securely via PCI-DSS compliant payment partners (e.g. Cashfree, UPI, Razorpay). We do not store raw credit card numbers or UPI PINs on our servers.

3. How We Use Your Information

Your information is used strictly to deliver and enhance FITISIFY OS functionality:

• To verify member identity and grant digital pass QR entry into assigned gym facilities.
• To notify members of upcoming membership renewals, fee due dates, and gym announcements.
• To enable gym owners and trainers to manage workout routines, diet plans, and attendance registers.
• To maintain strict multi-tenant data isolation, ensuring Gym A's member data is completely segregated from Gym B.
• To prevent fraudulent QR pass duplication, unauthorized account access, and security breaches.

4. Data Security & Encryption

Nexora Lab Technologies implements industry-standard security measures to protect your personal data:

• All data transmitted between the FITISIFY OS mobile application and cloud servers is encrypted using 256-Bit SSL/TLS HTTPS encryption.
• Member QR Digital Passes utilize time-bound cryptographic HMAC-SHA256 signatures to prevent unauthorized screenshot sharing.
• User passwords are hashed using secure cryptographic algorithms (BCrypt) prior to storage.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to advertisers or third-party marketers.

Data is shared only with trusted service providers necessary for app operations:

• Payment Processors: To process secure subscription and fee payments.
• Push Notification Gateways: To deliver real-time attendance and fee reminders (Firebase Cloud Messaging).
• Legal & Compliance: If required by law, subpoena, or government order.

6. Account Deletion & Data Rights

Users have the right to request access to, correction of, or deletion of their personal information:

• Gym Members: You may request account deletion directly through your gym facility administrator or by contacting our privacy team.
• Gym Owners / SaaS Subscribers: You may request complete tenant data export or deletion upon account termination.

To submit a privacy or data removal request, please contact us at: