Privacy Policy

Important: This Privacy Policy describes how Fit Addaa collects, uses, stores, discloses, protects and deletes personal data. It is intended to support transparency requirements under applicable Indian law, Google Play requirements, and, where applicable, the EU/UK GDPR framework.

1Who We Are and Scope

Fit Addaa is operated by T FIGHT CLUB CHAMPIONSHIP PRIVATE LIMITED ("Company", "Fit Addaa", "we", "us" or "our"). This Privacy Policy applies to the Fit Addaa mobile application, website, social/community functionality, challenge services, trainer and food-vendor onboarding, Find Buddy features, communications, support channels, and associated administrative services.

Where we determine the purposes and means of processing personal data, we act as the data controller or data fiduciary, as applicable. Certain service providers may process data on our behalf under contractual instructions.

2Categories of Personal Data We May Collect

2.1 Account and Identity Information

• Name, mobile number, OTP authentication information and account identifiers.
• Optional profile details such as gender, age/date-of-birth information where requested, profile photo, biography, sports interests and other profile fields.
• Followers/following relationships, badges, challenge participation, account settings, blocks and reports.

2.2 User-Generated Content and Communications

• Posts, photos, videos, captions, comments, likes, shares and challenge submissions.
• One-to-one messages and community/group messages, including images, videos, documents and links shared through group features.
• Reports, complaints, moderation evidence, support tickets and communications with us.

2.3 Location and Nearby-User Data

If you enable Find Buddy or other location-based features, the app may process device location or location-derived information to identify users within a configured radius, display distance, filter nearby users, or provide location-related services. Location visibility is subject to user settings and permissions. We do not represent that displayed distance is exact, continuous, or real-time in every circumstance.

2.4 Challenge, Fitness and Activity Information

• Challenge registrations, fees, duration, participation status, rankings/categories, badges, rewards and challenge-related media.
• Activity information you choose to submit or that is generated through the use of challenge features.
• We do not treat Fit Addaa as a medical service unless a feature is expressly stated otherwise; users should not upload unnecessary medical records or highly sensitive health information into social areas.

2.5 Trainer and Vendor Verification Information

• Trainer certificates, qualifications, supporting documents, contact information, session details, location and fees.
• Food-vendor information such as food licence, trade licence, stall name, location, contact details and photos.
• Administrative review status, approval/rejection history and records reasonably necessary to assess or document marketplace eligibility.

2.6 Payment and Transaction Data

Where paid challenges, premium functionality, subscriptions, or other paid services are offered, payment processors or app stores may process card, bank, wallet, billing or transaction data. We may receive transaction identifiers, payment status, amount, currency, refund status and limited billing metadata. We generally do not need to store full card credentials where a third-party payment provider processes them.

2.7 Device, Log and Technical Information

• Device model, operating system, app version, language, time zone, IP address, network information and diagnostic logs.
• Device or installation identifiers, push notification tokens, session identifiers, crash reports and security/fraud signals.
• Cookie, SDK, analytics or similar technology information, subject to applicable consent requirements.

3How We Collect Personal Data

• Directly from you when you register, edit your profile, post content, join groups, participate in challenges, message users, apply as a trainer/vendor, contact support, or exercise privacy rights.
• Automatically through your use of the app, device permissions, security logs, analytics tools and service infrastructure.
• From payment processors, app stores, notification providers, cloud/service providers and other processors used to operate the service.
• From other users where they interact with you, mention you, report content, invite you, follow you, message you or submit information involving you.

4Purposes of Processing

• Create, authenticate, secure and administer user accounts.
• Provide social feeds, profiles, following, messaging, community/group functionality and notifications.
• Enable challenge discovery, registration, participation, ranking, badges, rewards and related administration.
• Process trainer and vendor applications and display approved listings.
• Provide Find Buddy discovery, nearby-user filtering and location-based experiences when enabled.
• Process transactions, subscriptions, refunds, fraud checks and payment reconciliation.
• Moderate content, investigate reports, enforce community standards and protect users.
• Prevent abuse, unauthorized access, spam, fraud, manipulation and security incidents.
• Provide customer support, legal notices and operational communications.
• Measure performance, troubleshoot, improve product quality and develop features.
• Comply with legal obligations, regulatory requests, tax/accounting requirements, litigation holds and lawful government requests.

5Legal Bases Where GDPR Applies

Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we rely on one or more lawful bases depending on the activity: performance of a contract; compliance with legal obligations; legitimate interests that are not overridden by your rights; consent where required; and, in limited circumstances, protection of vital interests or establishment/exercise/defence of legal claims.

• Contract: account creation, messaging, challenge participation, transaction administration and core service delivery.
• Consent: optional location permissions, certain marketing, non-essential tracking, or other processing where consent is legally required.
• Legitimate interests: service security, fraud prevention, moderation, service improvement and limited analytics, subject to balancing safeguards.
• Legal obligation: accounting, tax, regulatory, law-enforcement response and statutory retention.

6Indian Data Protection Framework

For users in India, personal data processing is intended to be handled in accordance with applicable provisions of the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as and when the relevant provisions are in force, together with other applicable information-technology, consumer-protection and sectoral requirements. Where consent is relied upon, we aim to provide clear notice and a means to withdraw consent as applicable.

7Sharing and Disclosure of Personal Data

We do not sell personal data merely because a user uses Fit Addaa. We may disclose data only to the extent reasonably necessary for the following categories of recipients or purposes:

• Cloud hosting, storage, database, content-delivery, authentication, messaging, analytics, crash-reporting, notification, customer-support and security service providers.
• Payment processors, app stores, banks or transaction service providers for paid services.
• Professional advisers, auditors, insurers and corporate service providers subject to confidentiality obligations.
• Government, courts, law-enforcement or regulators where disclosure is required or legally permitted.
• A successor or transaction counterparty in a merger, financing, restructuring, sale of business/assets or similar transaction, subject to appropriate confidentiality safeguards.
• Other users where information is intentionally public or shared through social/profile/community functionality.

8Public Profiles and Social Features

Fit Addaa contains social features. Depending on settings and the feature used, your profile information, profile photo, posts, challenge badges, follower/following information, comments, likes and other content may be visible to other users. Content shared in public groups or public-facing areas should be treated as potentially viewable, copied, re-shared, screenshotted or otherwise preserved by others. Do not publish information you do not want other users to see.

9Direct Messages and Group Communications

Direct messages and group communications are intended for permitted participants, but no digital communication system can guarantee absolute confidentiality. We may access or process message-related data where technically necessary to deliver the service, maintain security, investigate reports, enforce rules, comply with law or respond to valid legal process. We do not authorize users to use messaging to harass, threaten, exploit, groom, defraud or unlawfully solicit others.

10Location Privacy and Find Buddy

Location-based discovery can create heightened privacy and safety risks. Fit Addaa may use precise or approximate location depending on device settings and implementation. Users should have controls to enable or disable location permission and Find Buddy/location visibility. We may transform location into distance, radius, or nearby-result data rather than displaying exact coordinates where technically appropriate. Users must not use location features to stalk, surveil, intimidate or identify another person’s home or sensitive location.

11Children's Information and Minor Users

Fit Addaa is not intended to facilitate unlawful collection or exploitation of children’s personal data. If the service is made available to minors, age-gating, parental/guardian involvement, consent requirements and feature restrictions should be applied as required by applicable law and platform policy. Under the GDPR, consent rules for information-society services offered directly to children can vary by Member State, with Article 8 setting 16 as the default threshold and permitting Member States to provide a lower age not below 13.

We do not knowingly encourage children to disclose home addresses, school details, precise location, identity documents, private contact information or other sensitive information in public posts or chats. If we learn that personal data of a child has been collected contrary to applicable requirements, we may restrict the account and delete or otherwise remediate the data, subject to legal retention duties.

12Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including account operation, safety, fraud prevention, transaction records, legal compliance, dispute resolution and enforcement. Retention varies by data type. Deleted account data may persist temporarily in secure backups until backup rotation, and certain records may be retained longer where required by law, needed for fraud/security prevention, financial records, legal claims or regulatory obligations.

13Account Deletion and Erasure

Users may request deletion through the in-app deletion path where available and through the designated deletion mechanism on our website. Account deletion is intended to delete or de-identify personal data associated with the account, subject to lawful retention exceptions. Deactivation or logout is not treated as a substitute for deletion. Additional details are in the Account Deletion & Data Erasure Policy.

14Your Privacy Rights

14.1 Rights Under GDPR/UK GDPR Where Applicable

• Right to be informed about processing.
• Right of access to personal data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure in applicable circumstances.
• Right to restriction of processing.
• Right to data portability where applicable.
• Right to object to certain processing, including direct marketing.
• Rights relating to certain automated decision-making and profiling.
• Right to withdraw consent where processing is based on consent, without affecting prior lawful processing.
• Right to lodge a complaint with a competent supervisory authority.

14.2 Rights Under Applicable Indian Law

Depending on the provisions in force and applicable to the Company, Indian users may have rights relating to access to information about processing, correction/completion, erasure, grievance redressal, withdrawal of consent and nomination or other rights recognized by applicable law. We may need to verify identity before acting on a request.

15International Data Transfers

Service providers may process data in India or other jurisdictions. Where GDPR or another transfer-restriction regime applies, we will seek to use appropriate transfer safeguards, such as adequacy mechanisms, contractual safeguards or other legally recognized measures, as required.

16Security

We use reasonable administrative, technical and organizational safeguards designed to protect data against unauthorized access, alteration, disclosure or destruction. Measures may include encryption in transit, access controls, authentication controls, logging, backups, secure development practices, vendor controls and incident-response processes. No system is completely secure, and users are responsible for safeguarding their devices, OTPs and account access.

17Third-Party Services and Links

Fit Addaa may contain links to third-party websites, payment interfaces, maps, app-store services, or other services. Their privacy practices are governed by their own notices. We are not responsible for independent third-party privacy practices except to the extent required by law or contract.

18Marketing and Notifications

Operational messages may be sent for authentication, security, transactions, challenge updates, messages or service administration. Promotional communications, where sent, will be handled subject to applicable consent and opt-out requirements. Push notifications can generally be controlled through app/device settings.

19Automated Decisions, Ranking and Recommendations

Fit Addaa may use rules or algorithms to rank challenge participants, recommend content, filter Find Buddy results or organize feeds. For example, challenge categorization may use engagement metrics such as likes where the challenge rules specify this. Such features may be adjusted to prevent manipulation, abuse or unfair outcomes. Where applicable law grants rights regarding solely automated decisions producing legal or similarly significant effects, those rights will be respected.

20Data Breach and Incident Response

If a personal-data breach occurs, we will investigate, contain and remediate it and make notifications to affected persons or authorities where applicable law requires notification. We may preserve evidence and logs needed to investigate the incident.

21Changes to this Privacy Policy

We may update this Privacy Policy to reflect legal, technical or service changes. Material updates may be notified through the app, website, email, push notification or another reasonable method. The updated effective date will be displayed at the top of the policy.

22Contact and Complaints

Privacy questions, data requests and complaints may be submitted to futureunicornapps@gmail.com. Postal correspondence may be sent to T FIGHT CLUB CHAMPIONSHIP PRIVATE LIMITED, 17-2-786, Madannapet, Chanchalguda, Saidabad (Hyderabad), Hyderabad - 500059, Telangana, India. Where required, the Company will publish or provide the details of its designated grievance/privacy contact or officer.