Privacy policy

Data controller

FitBook is the technical platform trainers use to manage bookings and progress. Your trainer generally acts as controller for the client data they manage. The platform’s technical operator processes data to provide the service (hosting, authentication, backup).

What data we collect

• Account data: email, name, role (trainer/client).
• Booking data: reserved dates/times, status.
• Subscription data: session count, expiry.
• Progress data (if entered): body measurements, personal records, progress photos and related metadata.
• Technical data: IP addresses (rate limiting, security), session cookies for authentication.

Purposes

• Providing the booking and progress-tracking service.
• Authentication and security (including limiting abuse).
• Meeting legal obligations and your GDPR requests (access, deletion, portability).
• Recording consent for publishing images, when applicable.

Retention

We keep data for as long as you have an active account. When the account is deleted, associated data is removed from the database (except data we are legally required to keep for a limited period, e.g. security logs).

Your rights

• You have the right to access, rectification, erasure (“right to be forgotten”), restriction, portability and objection, where applicable.
• You can export your data and delete your account from the Privacy section in the app.
• You can lodge a complaint with ANSPDCP (Romania).

Security

We use secure authentication, role-based access control, private photo storage (signed URLs) and limits on abusive requests. No measure is 100% infallible; please use a strong password.

Contact

For personal-data requests, contact your trainer and/or the FitBook platform administrator.