Sera ya faragha

1. Who we are

FitFlex Africa is operated by FitFlex Africa Technology Limited, registered in Tanzania under number 208965360, of Ada Estates Offices, Plot 84, Kinondoni Road, Dar es Salaam ("FitFlex", "we", "us"). This policy covers the FitFlex Africa mobile app, the partner and business portals, this website and related services. We are the data controller for the personal data described here, under the Personal Data Protection Act, 2022 of Tanzania.

2. Information we collect

• Account information: your name, phone number, email address, profile photo, role and sign-in identifiers.
• Membership and activity: passes, gym visits and QR check-ins, trainer bookings, marketplace orders, credits, payment status and support requests.
• Partner information: for gyms, trainers and vendors, business profile details, location, services, availability, payout details and approval or compliance information.
• Device and technical information: app version, device identifiers, IP address, logs, crash data and security events.
• Location: when you allow it on your device, to show nearby gyms or confirm a gym visit.

3. How we use information

• To create and manage accounts, passes, gym access, trainer bookings, check-ins, orders, payments and support.
• To verify identity, prevent fraud, enforce visit rules and protect members and partner gyms.
• To send service messages such as receipts, account notices, renewal reminders and policy updates.
• To improve the app, fix problems and understand how the service is used.
• To meet legal, tax, accounting, safety, dispute-resolution and regulatory obligations.

We send marketing messages only where you have agreed, and you can stop them at any time.

4. Sharing information

We do not sell personal data. We share it only when needed to run FitFlex, process transactions, protect rights and safety, or comply with the law, with:

• Partner gyms and trainers, who receive only what they need to admit you or deliver a session. QR check-ins use masked member identifiers where possible.
• Employers on FitFlex for Business, who see totals for the whole programme or a department, never which employee trained, when or where.
• Service providers for payments, sign-in, hosting, SMS, crash reporting and support, under contracts that limit their use of the data.
• Professional advisers, regulators or law enforcement when the law requires it.

5. Payments

Payments are processed by our payment partners, including M-Pesa, Airtel Money and Selcom, under their own terms and privacy notices. We do not store your mobile money PIN or card details. We keep transaction references, statuses, amounts and the account records needed to run the service.

6. Forms on this website

When you send a form on this website (for example a gym application, a business enquiry or a request for the app link), we store the details you enter, the page you sent it from, your browser type and a one-way coded version of your IP address used only to block spam. Our team is alerted so we can reply. We use these details only to answer your request and, for partner applications, to assess the partnership.

7. How long we keep data

We keep information for as long as we need it to provide FitFlex, meet legal and accounting obligations, resolve disputes, prevent fraud and keep audit records. Periods differ by type of data and legal requirement. Website enquiries that do not lead to an account or partnership are deleted within 24 months.

8. Your rights and choices

You can ask to see the personal data we hold about you, correct it, delete it, object to or restrict how we use it, or withdraw consent you gave earlier. You can update most account details in the app, manage device permissions in your phone settings and stop non-essential messages. To make a request, write to privacy@fitflex.af. We may need to confirm your identity first.

If we cannot delete something straight away because the law requires us to keep it (for example payment records), we will tell you why and delete or anonymise it once we no longer need it. You can also complain to the Personal Data Protection Commission of Tanzania.

9. Security

We use administrative, technical and organisational safeguards to protect personal data. No internet service is completely secure, so please keep your sign-in details and phone secure and tell us straight away if you think your account has been misused.

10. Children

FitFlex is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

11. Processing in other countries

Some of our service providers store or process data outside Tanzania. When that happens, we take steps so your data is protected in line with this policy and the Personal Data Protection Act, 2022.

12. Changes to this policy

We may update this policy. If a change is significant, we will tell you in the app, on this website or by message before it applies. The date at the top shows the latest version.