Official Privacy Policy
This Privacy Policy clearly identifies the application, developer entity, and data governance practices associated with our Google Play and Apple App Store listings.
Zero Data Sales
We never sell, rent, or trade your personal health, gym, or location data to brokers or advertisers.
Health Connect Limited Use
Strict adherence to Google Play Health Connect Limited Use guidelines. No health data is used for ads.
Local Geofencing
Location access is solely used to verify gym branch arrival and departure checkouts. We never track your routes.
Account Deletion
Start deletion inside the app or use our public web request page. Verified web requests are processed within 30 days.
info 1. Introduction & Scope of Policy
This Privacy Policy ("Policy") governs the data collection, processing, storage, and retention practices for the mobile application "ClubFIT-Gym management app" (Google Play Application ID / Package Name: com.kgflex.gymmanagement_22092025, also marketed and referenced as "ClubFit" and formerly known as "MetaFIT"), published and maintained by APEX LAB (operating in conjunction with MetaFIT Kinetic Systems, collectively referred to as "APEX LAB", "we", "us", or "our").
This Policy applies to all end users ("User", "you", or "your") who download, install, access, or register with the ClubFit mobile applications (Android and iOS), web dashboards, and gym facility software (collectively, the "Service").
This Policy is intended to provide the disclosures expected by the Google Play User Data and Health Connect policies and Apple App Store privacy requirements. It also explains how users can exercise applicable privacy rights. Store declarations must be kept consistent with the app's current behavior and integrated third-party services.
dataset 2. Information We Collect & System Permissions
We adhere strictly to the principle of data minimization. We only collect and process data that is technically essential to operate the gym management platform and athletic coaching functionality:
A. Health & Wearable Telemetry (Google Health Connect & Apple HealthKit)
With your explicit, granular runtime consent, ClubFit reads and synchronizes the following data types:
- Daily Steps (READ_STEPS): Aggregated to compute daily movement consistency, streak achievements, and member gym challenges.
- Heart Rate (READ_HEART_RATE): Ingested during workout sessions to calculate cardiovascular training zones, peak exertion, and resting recovery intervals.
- Exercise & Workouts (READ_EXERCISE): Imported to log gym strength routines and cardio intervals without manual double-entry.
- Active Energy Burned (READ_TOTAL_CALORIES_BURNED): Utilized to evaluate workout expenditure and nutritional replenishment guidelines.
B. Location & Geofencing Permissions
ClubFit requests ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION exclusively for:
- Proximity Check-In: Verifying your physical presence within your registered gym facility to unlock attendance turnstiles.
- Automated Checkout: Detecting when you exit the gym facility perimeter to automatically log your checkout time without requiring manual app interaction.
Location Privacy Guarantee: We do NOT continuously track, record, or store your geographical coordinates, travel history, or movements outside designated gym perimeters. Location checks occur on-device.
C. Camera, Hardware & Biometric Permissions
- Camera (CAMERA): Used solely to scan front-desk gym QR codes for check-in and optionally for on-device real-time AI exercise pose analysis. Camera frames are processed purely in volatile RAM and are NEVER recorded or uploaded to cloud servers.
- NFC (Near Field Communication): Used to scan authorized gym membership wristbands or access cards at contactless gym gates.
- Biometrics (Face ID / Fingerprint): Handled locally through the device's secure operating system enclave for fast, secure app login. Your biometric template is never accessed or stored by ClubFit.
- Notifications (POST_NOTIFICATIONS): Used to deliver timely gym class reminders, payment receipts, and facility announcements. You may disable notifications at any time in system settings.
D. User Account & Registration Information
When creating an account, we collect your name, email address, salted password hash, optional profile image, and basic fitness metrics (age, gender, body weight). This information is used to administer your membership and configure personal training analytics.
verified 3. Google Play Health Connect Limited Use Policy Compliance
Google Health Connect Compliance Statement
ClubFit’s use of information received from Google Health Connect adheres strictly to the Google Health Connect Permissions Policy, including the Limited Use requirements:
- Prohibition on Data Sales: We do NOT sell, rent, lease, or barter your Health Connect data or fitness records to any third-party entities, advertising networks, or data brokers.
- Prohibition on Advertising & Profiling: Health Connect data is NEVER used for serving advertisements, retargeting, behavioral marketing, credit assessment, or commercial user profiling.
- Restricted Purpose: Health Connect data is utilized solely to display workout performance charts, step milestones, and calorie summaries within your personal ClubFit app dashboard.
- Secure Cloud Storage: Health data synced to our secure databases (Google Firebase / Supabase) is isolated under strict encryption and access control policies. Infrastructure hosts are contractually prohibited from using your data for any secondary purpose.
health_and_safety 4. Apple HealthKit Privacy Compliance
In compliance with Apple App Store Review Guideline 5.1.1:
- ClubFit will never disclose or distribute HealthKit data to any third-party advertising platforms, data brokers, or information resellers.
- HealthKit data is never used for marketing, advertising, or data-mining purposes.
- Users retain full autonomy to grant or revoke HealthKit telemetry permissions at any time through iOS System Settings > Health > Data Access & Devices > ClubFit.
share 5. Data Disclosures & Third-Party Processors
We do not sell your personal data. Personal data is disclosed only to the following necessary service providers under strict data processing agreements:
- Cloud Infrastructure: Google Cloud / Firebase and Supabase Inc. provide database hosting, authentication, and encrypted data storage.
- Authentication: Google Sign-In and Sign in with Apple process sign-in identifiers when you choose those login methods.
- Diagnostics & Product Analytics: Sentry may process crash diagnostics and device or app context; PostHog may process product usage events used to understand reliability and improve the Service.
- Purchases: RevenueCat may process purchase status and app-user identifiers when purchase functionality is used. Apple and Google process store transactions under their own privacy terms.
- Your Authorized Gym Facility: Authorized administrative personnel and coaching staff at your registered gym branch can view your active membership status, attendance logs, and workout assignments.
- Legal Obligations: When legally compelled by judicial subpoena, court order, or official regulatory mandate.
lock 6. Data Security & Storage Controls
We employ industry-standard administrative, technical, and physical safeguards to protect your Personal Data:
- Encryption in Transit: Data sent between the app and cloud services is protected using HTTPS/TLS.
- Managed Storage: Firebase and Supabase provide managed infrastructure and storage safeguards.
- Access Control: Authentication and database access rules are used to limit records to authorized users and facility roles.
delete_forever 7. Account & Data Deletion Rights (GDPR / CCPA / Play Store Compliance)
In compliance with Google Play and Apple App Store account deletion mandates, you have the right to request the complete and permanent deletion of your account and all associated personal data:
Option A: Instant In-App Deletion
- Open the ClubFit app on your device.
- Navigate to the Profile tab.
- Scroll to the bottom and select "Delete Account Permanently".
- Confirm the deletion request. Associated personal data is deleted, except information that must be retained for security, fraud prevention, or legal obligations.
Option B: Web or Email Erasure Request
You may use our public account deletion page or email our data compliance team:
metafitfeedback@gmail.comRequests are processed within 30 days of identity verification.
support_agent 8. Developer Contact & Regulatory Information
If you have questions, feedback, or concerns regarding this Privacy Policy or your personal data, please contact the developer directly: