Privacy Policy

Effective: 7 June 2026 · Jurisdiction: India & EU

1. Who We Are

FitUpToday is a Limited Liability Partnership registered in India, based in Bengaluru, Karnataka. References to “we,” “us,” and “our” refer to FitUpToday and its operating entity.

Contact: hello@fituptoday.com
Grievance Officer available at the contact above — response within 30 days as required under the DPDP Act 2023.

2. Data We Collect

We collect the following categories of personal data:

Contact information: full name, email address, phone number, WhatsApp number
Health & fitness data: body weight, body fat percentage, medical conditions, hormonal issues (PCOS, thyroid, perimenopause, etc.), blood test reports, injuries, allergies, and dietary restrictions — collected via intake forms and coaching interactions
Payment information: transaction IDs, plan selected, and amount paid. Card, UPI, and banking credentials are processed and stored exclusively by PayU and are never retained by us
Communications: messages, queries, and feedback shared via WhatsApp, email, or our website forms
Usage data: pages visited, time on site, device type, and browser type, collected via cookies and analytics tools

Health and fitness data constitutes Sensitive Personal Data or Information (SPDI) under the IT (Reasonable Security Practices and Procedures and SPDI) Rules, 2011, and special category data under the GDPR. We collect this data only with your explicit consent.

3. How We Use Your Data

To deliver personalised fitness coaching, nutrition plans, and accountability services
To process your payment via PayU
For lead marketing and contacting you: WhatsApp messages, emails, and calls to share fitness tips, new plan offers, and wellness content relevant to your goals
To analyse website performance and improve user experience
To comply with legal obligations under Indian law

4. Legal Basis for Processing

India (DPDP Act 2023): We process your personal data on the basis of your explicit consent, given when you submit an enquiry form or purchase a plan. You may withdraw consent at any time by emailing hello@fituptoday.com. Withdrawal of consent does not affect the lawfulness of prior processing.

EU / EEA Residents (GDPR): Our lawful bases are: (a) Contract — processing necessary to provide the coaching services you have purchased; (b) Consent — for marketing communications and health data; (c) Legitimate interests — for website security, fraud prevention, and business analytics, where these interests are not overridden by your rights.

5. Payment Processing — PayU

Payments are processed through PayU Payments Private Limited, a payment aggregator licensed and regulated by the Reserve Bank of India. When you make a payment, PayU receives your name, email address, phone number, and transaction amount. PayU’s own Privacy Policy and Terms of Service govern the processing of your payment data.

We retain only transaction IDs, plan names, and payment status for accounting, legal compliance, and dispute resolution purposes. We do not store your card numbers, UPI handles, or banking credentials.

6. Marketing Communications

We use your contact information to send follow-up messages about your fitness goals, information about new coaching plans and offers, wellness tips, nutritional guidance, and motivational content. This constitutes lead marketing — using information you voluntarily provided to maintain contact and offer relevant services.

You may opt out at any time by replying “STOP” to any WhatsApp message, clicking Unsubscribe in any email, or emailing hello@fituptoday.com with the subject “Unsubscribe.”

7. Data Sharing — No Third-Party Sales

We do not sell, trade, or rent your personal data to any third-party company. Data is shared only with the following parties, and only to the extent necessary:

PayU: for payment processing (see Section 5)
WhatsApp / Meta Platforms: for coaching communication (subject to WhatsApp’s Privacy Policy)
Google Analytics: anonymised, aggregated usage data for website analytics
Legal authorities: if required by a court order, law, or government directive under Indian law (e.g., IT Act 2000, CrPC)

8. Data Retention

Contact and communication data: 3 years after your last interaction
Health and fitness data: duration of coaching engagement + 2 years
Payment records: 7 years as required by the Income Tax Act and GST regulations
Consent records: 5 years
Marketing opt-out records: retained indefinitely to prevent re-contacting

9. International Data Transfers

Some of our service providers (WhatsApp/Meta Platforms, Google) may transfer and process your data outside India and the EU/EEA. Where such transfers occur, we rely on Standard Contractual Clauses (for GDPR purposes) and ensure adequate safeguards exist to protect your data. By using our website, you acknowledge and consent to such transfers.

10. Your Rights

Under the Digital Personal Data Protection Act, 2023 (India):

Right to access a summary of your personal data being processed
Right to correction and erasure of inaccurate or incomplete data
Right to grievance redressal
Right to nominate a person to exercise your rights on your behalf
Right to withdraw consent at any time

Under the GDPR (EU / EEA residents):

Right of access (Article 15)
Right to rectification (Article 16)
Right to erasure / right to be forgotten (Article 17)
Right to restriction of processing (Article 18)
Right to data portability (Article 20)
Right to object to processing (Article 21)
Right to lodge a complaint with your local Data Protection Authority

To exercise any of these rights, email hello@fituptoday.com. We will acknowledge your request within 48 hours and respond within 30 days.

11. Cookies

Our website uses: Essential cookies (for website functionality, always active); Analytics cookies (Google Analytics — active only with your consent); and Marketing cookies (to measure the effectiveness of our promotions, active only with your consent). You can manage your preferences via the cookie banner on this website.

12. Data Security

We implement industry-standard technical and organisational measures including SSL/TLS encryption for data in transit, restricted access controls, and secure data storage. In the event of a data breach affecting your rights, we will notify you as required by law.

13. Children’s Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at hello@fituptoday.com.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated effective date. Continued use of our website or services after any changes constitutes acceptance of the revised policy.

15. Contact & Grievance Officer

Grievance Officer: Hemant Rathi
Email: hello@fituptoday.com
Address: Bengaluru, Karnataka, India
Response time: Within 30 days (as required by the DPDP Act 2023 and IT Rules 2011)

EU/EEA residents also have the right to lodge a complaint with their local Data Protection Authority (e.g., CNIL in France, ICO in the UK, BfDI in Germany).