FitSplit Data Rights and Grievance Notice
Last updated: July 6, 2026
This notice explains how users can exercise privacy rights or raise data grievances related to FitSplit.
1. Contact details
Owner and operator: Blume Labs (https://blumelabs.in/)
Email: fitsplit.in@gmail.com
Registered address: [REGISTERED ADDRESS]
Grievance Officer: [GRIEVANCE OFFICER NAME]
Grievance Officer email: fitsplit.in@gmail.com
Grievance Officer postal address: [GRIEVANCE OFFICER POSTAL ADDRESS]
Support response hours: [SUPPORT RESPONSE HOURS]
2. Before contacting us
If you are a gym member, your gym controls many records in FitSplit, including membership, attendance, training, coaching, PT, billing-request, and account-status records. You may contact your gym owner directly for many corrections, membership changes, access changes, or deletion requests.
You may also contact FitSplit, and we will route or handle the request as appropriate based on the account, gym, and applicable law.
3. Rights you may have
Depending on where you live and which law applies, you may have rights to:
- know what personal data is processed and why;
- access a copy of your data;
- correct inaccurate or incomplete data;
- delete personal data;
- withdraw consent;
- restrict or object to processing;
- receive data portability/export;
- opt out of sale or sharing of personal information, where applicable;
- nominate another person to exercise rights after death or incapacity, where applicable;
- complain to a data protection authority, regulator, or grievance body.
Some rights may be limited where data must be retained for legal, security, fraud-prevention, accounting, dispute, or legitimate gym-record purposes.
4. India users
Users in India may contact the Grievance Officer about personal data questions, consent withdrawal, correction, erasure, access, or complaints.
When you make a request, please include:
- your full name;
- username or phone number used for FitSplit;
- gym name, if applicable;
- the right or issue involved;
- enough detail for us to verify and process the request.
We will respond within the period required by applicable law.
5. GDPR/UK GDPR users
If GDPR or UK GDPR applies, you may have rights to access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority.
Where FitSplit processes data on behalf of a gym, we may forward your request to the gym or support the gym in responding.
6. California users
If the CCPA/CPRA applies, California residents may request access/know, deletion, correction, portability, and information about disclosure practices. FitSplit does not sell personal information and does not share it for cross-context behavioral advertising.
You may use an authorized agent where permitted by law. We may require verification of identity and authority before acting on a request.
7. Verification
To protect accounts and gym data, we may need to verify your identity before completing a request. Verification may include matching account information, confirming access to your email/phone/account, or asking the gym owner to validate your relationship to the gym.
We will not ask for your password or PIN by email.
8. Consent withdrawal
You may withdraw consent where processing is based on consent. Withdrawal does not affect processing that occurred before withdrawal.
Withdrawing consent for health/fitness data, location attendance, or push notifications may limit or disable related features.
9. Deletion and retention
Deletion requests may be subject to:
- verification;
- gym controller instructions;
- legal retention duties;
- accounting or dispute needs;
- security, fraud-prevention, and abuse-prevention records;
- backup and archive deletion cycles.
Current app behavior includes a soft-delete archive with 60-day retention for supported deleted records, unless a longer retention period is required.
10. Complaints
If you are not satisfied with our response, you may reply to the same email thread for escalation to the Grievance Officer.
You may also have the right to complain to a regulator or data protection authority depending on your jurisdiction.