Privacy Policy

This Privacy Policy explains how Fit2Go (“Fit2Go”, “we”, “us”) collects, uses, shares, and protects information when you use our app. By using the app, you agree to this policy.

---

1. Who We Are

Fit2Go is operated by go technologies, a division of Fit2Go (Company No. 558624524) (“the Company”). For questions about this policy, contact us at service@fit2go.co.il.

2. Information We Collect

Depending on how you use the app, we may collect:

• Account information: name, email address, phone number, login credentials (stored securely), and account type (consumer / business).
• Social login: if you sign in with Google, Facebook, or Apple, we receive basic profile details (name, email, and a unique identifier) from that provider. We do not receive or store your social network password.
• Profile information: profile photo and other optional details you choose to provide.
• Bookings and usage: gyms, studios, and services you view or book, booking history, cancellations, and related activity.
• Payments and wallet: purchase history, FitCoins balance, and transaction records. Payments are processed by Cardcom. We do not store full payment card numbers on our servers.
• Location (while using the app): if you grant permission, we may access your device location while the app is in use to show nearby gyms and studios and provide location-based functionality.
• Phone number (SMS/OTP): your phone number is used for identity verification via one-time passcodes (OTP). SMS messages are delivered through Twilio.
• Chat / AI inputs: messages, prompts, and content you submit in chat or AI features.
• Push notifications: we may send you push notifications about upcoming bookings, promotions, and service updates via Firebase Cloud Messaging (FCM). You can manage notification permissions in your device settings.
• User-generated content: photos, reviews, ratings, and messages you upload or post (where available).
• Device and app data: device model, operating system version, app version, IP address, and diagnostic information.

3. How We Use Information

• Provide and operate the app: account creation, authentication, bookings, wallet functionality, and core features.
• Payments: process purchases and transactions via Cardcom and maintain transaction history.
• Identity verification: send OTP codes via Twilio to verify your phone number at registration or login.
• Location-based features: show nearby places and improve relevance of results when you choose to share location while using the app.
• Push notifications: remind you of upcoming training sessions, inform you of booking changes, and send relevant updates. You can opt out at any time in device settings.
• Chat / AI features: process your inputs to provide responses and functionality. Your messages may be sent to our servers and to AI service providers used to generate responses.
• File storage and delivery: photos and media you upload are stored on Google Cloud Storage and delivered via Amazon CloudFront CDN.
• Analytics and reliability: monitoring, debugging, fraud prevention, security, and understanding feature usage to improve the app experience.
• Support and communications: respond to support requests and send important service updates.
• Legal compliance: comply with applicable laws and enforce our terms.

4. Sharing and Disclosure

We may share information as follows:

• Service providers (processors): vendors who help us operate the app (hosting, databases, customer support tooling, etc.).
• Payment processor: Cardcom for processing payments and fraud prevention.
• SMS provider: Twilio for delivering OTP verification messages to your phone number.
• AI provider: OpenAI processes the text you submit in AI chat features to generate responses. Please avoid sharing sensitive personal data in chat inputs.
• Analytics and crash reporting: Firebase (Google) for usage analytics, crash reporting, and push notification delivery (FCM).
• File storage: Google Cloud Storage for storing uploaded media, served through Amazon CloudFront.
• Social login providers: Google, Facebook, and Apple when you use social sign-in. These providers’ own privacy policies govern data they collect.
• Service providers on the platform: gyms, studios, and trainers may receive booking details and relevant user information necessary to provide the booked service.
• Legal and safety: if required by law, or to protect users, our business, or to investigate fraud and security issues.

5. Location Information

If you enable location permission, we access location only while you use the app. You can turn this off at any time in your device settings. We do not collect location in the background.

6. Chat / AI Features

If you use chat or AI features, the text you submit is processed to provide responses. This involves sending your text to our servers and to OpenAI, which generates the AI responses. OpenAI may retain prompts in accordance with its own data policies. Please avoid sharing sensitive personal information (health records, payment details, national ID numbers) in chat inputs.

7. Push Notifications

We send push notifications (such as upcoming training reminders, booking confirmations, and cancellation alerts) via Firebase Cloud Messaging (FCM), a service operated by Google. FCM may collect device token information to route notifications. You can disable push notifications at any time in your device settings. Withdrawing consent does not affect your ability to use the app.

8. Social Login

When you sign in with Google, Facebook, or Apple, the relevant provider authenticates you and shares a limited profile (typically your name, email address, and a unique identifier) with us. We use this information only to create or authenticate your Fit2Go account. We do not receive your social network password. Each provider’s privacy policy governs how they process your data on their side.

9. Data Retention

We retain information only as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the type of data. When you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it by law.

10. Security

We use reasonable technical and organizational safeguards designed to protect your information. However, no system is completely secure. In the event of a data breach that is likely to affect your rights, we will notify you as required by applicable law.

11. Your Choices and Rights

• Permissions: you can disable permissions (such as location and notifications) at any time in device settings.
• Account information: you can update certain profile information inside the app.
• Account deletion: you can request deletion of your account and associated personal data by contacting us at service@fit2go.co.il. We will process your request in accordance with applicable law.
• Access, correction, or objection: you may request access to or correction of your personal data, or object to certain uses, by contacting us.

12. Children

Fit2Go is not intended for children under 13 (or the minimum age required by local law), and we do not knowingly collect data from children. If we become aware that we have collected data from a child, we will delete it promptly.

13. Third-Party Services

The app integrates with third-party services including Cardcom, Twilio, OpenAI, Google (Firebase / GCS), Amazon CloudFront, and social login providers. Each third party processes data under its own privacy policy. We are not responsible for the privacy practices of those third parties.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date. Continued use of the app after an update constitutes acceptance of the revised policy.

15. Contact Us

For privacy questions or requests:

• Email: service@fit2go.co.il