Privacy notice

Who we are

FitFam is a marketplace that connects members with coaches, gyms, classes and programs in Nigeria, and runs the FitFam Store. FitFam is the data controller for the personal data described here. For anything about your data, email privacy@fitfam.ng.

What we collect

• Account details: your name, phone number, email address and password (stored encrypted).
• Profile and goals: city and area, fitness goal and level, date of birth, and calorie and protein targets you set.
• Health and fitness activity: check-ins, workouts, progress entries and progress photos, gym visits, and the health questions you answer before a booking.
• Food logs (FitFam Plus): meal photos, dictated or typed meals, and the nutrition estimates Ada gives you.
• Purchases: bookings, passes, subscriptions, store orders, refunds and delivery addresses. Card and bank details go straight to Paystack. FitFam never sees or stores your full card number.
• Community: squad posts, comments, cheers, messages with providers, reviews and reports.
• Device and usage: app version, device type, push notification token, and error logs that help us fix problems.

We don't use advertising trackers, and we don't sell your personal data. The camera and microphone are used only when you scan a pass, take a photo or dictate a meal.

Why we use it (and our legal basis)

• To run your account, bookings, passes and orders, and to pay providers (contract).
• To take payments, prevent fraud and keep financial records (legal obligation and legitimate interest).
• To send booking reminders, receipts and squad updates by push, email, SMS or WhatsApp, as set in your notification settings (contract and consent).
• To give you Ada's food and meal-plan suggestions when you use FitFam Plus (consent, which you can withdraw by stopping Plus).
• To keep the community safe, handle reports and enforce our terms (legitimate interest).
• To improve FitFam using aggregated, de-identified statistics (legitimate interest).

Health and fitness information is sensitive personal data under the NDPA. We process it only to provide the features you use, with your consent, and you can delete it at any time.

Who we share it with

• Providers you book see your name, contact details, booking, pass status and the health answers you give them.
• Your squad sees your name, check-ins and posts.
• Paystack processes payments and payouts.
• Supabase hosts our database, sign-in and file storage.
• Anthropic processes meal photos and text for Ada (FitFam Plus) and does not use them to train its models.
• Messaging providers deliver SMS codes, WhatsApp messages and email, and Apple and Google deliver push notifications.
• Authorities, when the law requires it.

Some of these providers process data outside Nigeria. We use them under contracts with safeguards the NDPA recognises.

How long we keep it

We keep your data while your account is open. When you delete your account, we erase your profile, content and sign-in straight away. We keep payment records, without your name, for as long as tax and financial law requires.

Your rights

You can ask to access, correct, move or delete your data, object to or restrict how we use it, and withdraw consent at any time. You can delete your account yourself or email privacy@fitfam.ng. We reply within 30 days. If you're unhappy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

Security and age

Data is encrypted in transit and access is limited to people who need it. FitFam is for adults aged 18 and over, and we don't knowingly collect data from children.

Changes

If we change this notice in a way that matters, we'll tell you in the app or by email before it takes effect.