Legal

Privacy Policy

What we collect, why, who we share it with and how to delete it. Last updated 2 November 2026.

Who we are

FitRaho is a fitness app and website for gym members, personal trainers and gym owners in Pakistan. This policy covers the FitRaho mobile app (Android and iOS) and fitraho.pk. When we say "we" we mean the FitRaho team. Questions about this policy go to support@fitraho.pk.

What we collect

Account details. Your name, email address and password (stored only as a one-way hash). If you sign in with Google we receive your name, email and Google account ID. You can add a phone number, username and profile photo.

Fitness profile. What you tell us during onboarding and in settings: gender, date of birth, height, body weight, target weight, fitness goals, activity level, workout experience, training days, gym time, diet preference, allergies, foods you like or dislike, and any notes you add, including health or medical notes. Health notes are optional.

Progress. Body measurements, workouts and meals you log, and progress photos you choose to upload.

Meal scans. When you scan a meal, the photo is sent to our server and to our AI provider to estimate the food and its calories and macros. We keep the result (dish name, foods, calories, protein, carbs, fat, fibre); we do not keep the meal photo.

AI coach chats. Messages you send to FitRaho AI and its replies, so you can see your conversation history.

Messages. Chats between you and your trainer or gym, including any files or images you share there.

Gym and coaching records. Gym memberships, trainer–client links, plans a trainer writes for you, and reviews.

Purchases. If you subscribe, Google Play or the App Store handles payment. We receive a purchase token and the subscription status to unlock features. We never see your card details.

Device data. A push-notification token for your device, and basic technical logs (such as IP address and error details) our servers record to keep the service secure and working.

Website. If you use the contact form we receive your name, email and message.

Why we use it

  • To create and secure your account and sign you in.
  • To build personalised workout and meal plans and AI coach answers from your fitness profile.
  • To estimate nutrition from meal photos.
  • To show your progress over time.
  • To connect you with your gym and trainer, and let them see what they need to coach you.
  • To send account emails (verification, password reset, account deletion) and push notifications you can turn off.
  • To check subscription status.
  • To prevent abuse, fix bugs and keep the service running.

Who we share it with

We do not sell your personal data and we do not use it for advertising. We share it only with:

  • Your trainer and gym, when you connect with them. They see your profile, plans, progress and messages relevant to coaching you.
  • The public, only if you are a trainer or gym owner with a public profile. Your profile, photos and reviews appear in the app and on fitraho.pk.
  • Google Gemini (Google), our AI provider. It receives the meal photos you scan and the fitness profile and messages needed to answer AI coach questions and build plans.
  • Google Firebase, for sign-in, push notifications and in-app chat.
  • MongoDB Atlas, where our database is hosted.
  • Cloudflare R2, where uploaded photos and files are stored.
  • Google Play and Apple App Store, which process subscription payments.
  • Our email provider, to deliver account emails.
  • Authorities, if the law requires it.

These providers process data on our behalf, and some of them store it outside Pakistan.

Storage and security

Data is sent over encrypted connections (HTTPS). Passwords are hashed, never stored in plain text. Private uploads such as progress photos are only served through short-lived signed links. Access inside FitRaho is limited to the people who need it. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you.

How long we keep it

We keep your data while your account is open. Meal photos are not kept after the scan. Email verification and password-reset links are removed automatically shortly after they expire.

When you delete your account, it is closed straight away: you are signed out on every device, your push tokens are removed, you leave your gym and trainer, and trainer profiles are taken off public listings. Records other people rely on, such as coaching history, reviews, gym records and purchase records, are kept. To have the rest of your personal data erased, email support@fitraho.pk and we will do it within 30 days, unless the law requires us to keep it.

Deleting your account

In the app: go to Settings › Delete account, confirm (with your password if you have one), then open the link we email you. Your account is deleted when you confirm from that link.

Without the app: email support@fitraho.pk from the address on your account and ask us to delete it.

Your rights

You can see and edit most of your data in the app. You can also ask us for a copy of your data, to correct it, to delete it, or to stop using it for a particular purpose. Email support@fitraho.pk and we will reply within 30 days. You can turn off notifications in the app or in your phone settings, and remove camera or photo access at any time in your phone settings.

Phone permissions

  • Camera: to scan meals and take progress photos. Only when you tap those features.
  • Photos: to pick an existing picture for a meal scan, progress photo or profile photo. Only the pictures you choose are read.
  • Notifications: for messages, reminders and account updates.

Children

FitRaho is not meant for children under 13, and we do not knowingly collect data from them. If you believe a child has given us data, email support@fitraho.pk and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top of this page, and tell you in the app if the change is significant.

Contact

FitRaho, Lahore, Pakistan. Email support@fitraho.pk.