Privacy Policy

AspireFit ("we", "our", or "us") operates a gym and fitness studio management platform. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our services, visit our website, or interact with our platform as a gym owner, staff member, or member.

By using AspireFit, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our services.

We collect the following categories of personal data:

• Account data: name, email address, password (hashed), and gym/studio name provided during registration.
• Member data: member profiles including name, contact details, membership plan, attendance, and payment history - entered by gym operators.
• Payment data: billing information processed via our payment providers (e.g., Stripe). We do not store full card numbers.
• Usage data: IP address, browser type, pages visited, time spent, and clickstream data collected automatically via cookies and server logs.
• Communications: messages you send us via email, chat, or support tickets.

We use collected data to:

• Provide, operate, and improve the AspireFit platform
• Process payments and manage billing
• Send transactional emails (receipts, password resets, notifications)
• Send product updates and marketing communications (you may opt out at any time)
• Detect and prevent fraud, abuse, or security incidents
• Comply with applicable legal obligations
• Analyse usage trends to improve features and performance

We rely on the following legal bases: contract (to provide the service), legitimate interests (analytics, fraud prevention), consent (marketing emails), and legal obligation.

We do not sell your personal data. We share data only with trusted third-party service providers who assist in operating our platform, including:

• Payment processors (Stripe) - for billing and subscription management
• Cloud hosting providers - for infrastructure and data storage
• Analytics providers - for aggregated, anonymised usage analysis
• Email service providers - for transactional and marketing communications

All third parties are contractually bound to handle data securely and in compliance with applicable laws. We may also disclose data where required by law or to protect our legal rights.

We retain personal data for as long as your account is active or as needed to provide services. Upon account termination, we delete or anonymise your data within 90 days, unless we are required to retain it for legal or regulatory reasons.

Member data managed by gym operators is subject to their own retention policies. If you are a gym member, please contact your gym operator directly for data deletion requests.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing activities
• Data portability - receive your data in a machine-readable format
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at privacy@aspirefit.in. We will respond within 30 days.

We use cookies and similar tracking technologies to operate our website and collect usage analytics. These include:

• Necessary cookies: required for the platform to function. Cannot be disabled.
• Analytics cookies: help us understand how visitors interact with our site (opt-in).
• Marketing cookies: used to deliver relevant advertisements (opt-in).

You can manage your cookie preferences at any time using the cookie banner on our website, or by clearing your browser cookies.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, regular security audits, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page and update the effective date. For significant changes, we will notify you by email or a prominent notice on the platform.

If you have questions about this Privacy Policy or our data practices, please contact: