🔒 Introduction & Compliance

FitStreet, operated by Ball Street Private Limited ("we", "our" or "us"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile applications, and engage with our fitness platform services (“Services”). By accessing or using FitStreet’s Services, you agree to the terms of this Privacy Policy and consent to the collection, use, and disclosure of your information as described below.

Compliance statement: This Privacy Policy complies with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and Google Play Developer Program Policies (including the User Data Policy). We declare accurate data collection and sharing practices in the Google Play Console Data Safety form.

📋 1. Information We Collect

• Personal Identification Information: name, date of birth, gender, photo, email address, phone number, address, and other contact details.
• Government Identifiers: PAN, Aadhaar (masked or reference tokens only), KYC documents, selfie for identity verification. By providing KYC or identity documents you expressly consent to such processing for verification and compliance purposes.
• Professional Information (trainers): certifications, experience, specialties, languages spoken.
• Payment Information: bank account details, UPI IDs, payment history, transaction details (processed via third-party payment processors). We do not store raw card numbers on our servers.
• Health & Fitness Data (sensitive): fitness goals, medical conditions (if shared), workout metrics, session notes, progress photos. By providing health or fitness data you explicitly consent to our processing of such sensitive personal data for the purposes described in this Policy.
• Communication Data: messages, feedback, and communications exchanged through the platform.
• User-generated Content: reviews, ratings, photos, or videos you upload.

• Device Information: IP address, device type, operating system, browser type.
• Usage Data: pages visited, features used, session duration, clicks, crash logs and diagnostics.
• Location Data: approximate location derived from IP or precise GPS location if you enable location sharing (with explicit consent).
• Cookies and Similar Technologies: used to personalize content, optimize user experience, and for analytics and advertising (with consent where required).

⚙️ 2. How We Use Your Information

• Provide, operate, and maintain our Services.
• Verify identities and perform KYC compliance checks (for trainers/payments).
• Connect trainers to clients and facilitate bookings, scheduling, and payments.
• Process payments, refunds, invoices and keep financial records.
• Communicate about bookings, updates, support issues, and security alerts.
• Personalize user experience (recommendations, reminders).
• Perform analytics to improve and debug the App.
• Send marketing communications where you have opted in (you may opt out).
• Comply with legal obligations and respond to lawful requests.
• Detect, prevent and respond to fraud, abuse and security threats.

📑 3. Legal Basis for Processing

• Processing necessary for contract performance (service delivery).
• Processing necessary to comply with legal obligations (KYC, taxation).
• Processing based on your consent (which you can withdraw to the extent permitted by law).
• Processing necessary for legitimate interests (security, fraud prevention), balanced with your rights.

🔗 4. Information Sharing and Disclosure

• We do not sell or rent personal information. We may share data with:
• Service Providers: payment gateways, cloud hosting, analytics, push notifications, crash reporting, customer support and marketing providers. Example provider categories: Analytics (e.g., Google Analytics for Firebase), Push Notifications (e.g., Firebase Cloud Messaging), Payments (e.g., Razorpay, Stripe), Cloud Hosting (e.g., AWS, Google Cloud). Replace these examples with the actual providers you use.
• Regulatory Authorities: for compliance with laws, KYC, taxation or court orders.
• Trainers and Clients: limited profile information necessary to facilitate bookings and services.
• Legal Process: in response to lawful requests or to protect rights, property or safety.
• Business Transfers: in a merger, acquisition or sale; any such transfer will include appropriate confidentiality protections.
• Aggregate/Anonymised Data: shared for research or analytics in a manner that cannot identify you.

💾 5. Storage, Retention & Security

• Storage & Transfers: Data is processed and stored in India and may be transferred to other countries with adequate protections. We implement reasonable safeguards for international transfers.
• Retention: We retain personal data only as long as necessary for service provision and legal compliance. When you delete your account, we will delete or anonymise account data within 90 days, except where we must retain certain records for legal, tax, or fraud-prevention reasons. Backups may persist for up to 180 days but will be isolated and deleted according to policy.
• Security: We use industry-standard technical and organisational measures (encryption in transit and at rest, access controls, periodic security audits and vulnerability assessments). However, no method is 100% secure.

🧑‍⚖️ 6. Your Rights & Choices

• Where local law grants you rights, you may:
• Access and correct personal data.
• Request deletion or restriction of processing (subject to legal exceptions).
• Request portability of your data in a machine-readable format.
• Withdraw consent for processing (where processing is consent-based).
• Opt out of marketing communications.
• Control cookies via browser or app settings.
• To exercise rights, contact us at support@ballstreet.club. We will respond as required by applicable law.

👶 7. Children’s Privacy

• Our Services are not directed at children under 18. We do not knowingly collect personal data from children under 18 without verified parental consent. If we learn we have collected such data without consent, we will delete it promptly.

🍪 8. Cookies and Tracking Technologies

• We use cookies and similar technologies to enhance UX, remember preferences, analyze usage, and (with consent) deliver targeted advertising. You can control cookie settings in your browser and within the app.

🧩 9. Third-Party SDKs and Links

• Third-party SDKs used in the App (analytics, crash reporting, ad SDKs, payment SDKs) may collect data independently. Please review the privacy policies of such providers. The App may contain links to third-party websites; we are not responsible for their privacy practices.

🔄 10. Changes to This Privacy Policy

• We may update this Policy. Material changes will be posted and, where required, we will notify you. Continued use constitutes acceptance.

📱 11. Google Play Compliance

• FitStreet collects and uses data in accordance with Google Play’s User Data Policy. We accurately disclose all data collection, use, and sharing practices in the Play Console Data Safety form and do not sell personal or sensitive user data to third parties.

🗑️ 12. Data Deletion Request

• If you want to delete your Fit Street account or any personal data shared with us, please email support@ballstreet.club with the subject “Delete My Account”.
• Once we receive your request, your account and associated data will be permanently deleted within 7 business days.

📞 13. Grievance Officer (India)

• Grievance Officer: Abhishek Chauhan
• Email:support@ballstreet.club
• Phone:+91 8100 20 1919
• Address: Ball Street Private Limited, Delhi NCR, India
• We will acknowledge and respond to grievances within 30 days.

✉️ 14. Contact Us

• Email:support@ballstreet.club
• Phone:+91 8100 20 1919
• Address: Ball Street Private Limited, Delhi NCR, India