Privacy Policy

Last updated: September 4, 2026

BrixFit is operated by Brixfly Services, a company registered in India. This Privacy Policy explains what information we collect, how we use it, and how we protect it.

---

1. Information We Collect

1.1 Coach Account Information

When you create a BrixFit account, we collect:

• Your name and email address
• Your password (stored as a secure hash — we never see your actual password)
• Billing details such as name, address, GSTIN, and PAN (for invoice generation)
• Payment is processed by Razorpay — we never store your card or bank details

1.2 Client & Lead Data

As a coach, you collect information from your clients and leads through BrixFit. This may include:

• Health metrics (weight, height, age, fitness goals, body measurements)
• Check-in responses, meal compliance logs, and progress photos
• Workout session records and progress data
• Personal contact details (name, phone, email)
• In-app messages exchanged between coach and client

You are responsible for obtaining consent from your clients before collecting their data. BrixFit stores and processes this data on your behalf as a data processor. You remain the data controller for all client and lead data you collect.

1.3 Usage Data

We automatically collect basic technical information to keep the platform running:

• IP address, browser type, and device information
• Pages visited and features used
• Error logs and performance data

1.4 Health & Fitness Data (Apple Health / Health Connect)

If a client chooses to connect a health source — Apple Health on iPhone or Google Health Connect on Android — the BrixFit mobile app reads a limited set of health and activity data on the client's device and sends it to BrixFit so it can be shown to that client and their assigned coach:

• Steps, walking/running distance, active energy burned, and exercise minutes
• Heart rate, resting heart rate, and heart-rate variability
• Sleep duration and sleep stages
• Body measurements the client records (weight, body-fat percentage, lean mass, BMI)

BrixFit requests only the data types listed above, and only read access — it is never granted, and never asks for, permission to write to Apple Health or Health Connect.

This feature is opt-in. It stays off until the client turns it on, and the on-device permission prompt appears only after the client taps "Connect" on a screen that explains what will be read and why. The client can disconnect at any time from the BrixFit app (Settings › Integrations) or from the Apple Health / Health Connect app itself, and can permanently delete all previously synced health data from within the BrixFit app. On Android, Health Connect only makes the last ~30 days of data available to a newly connected app; older readings are never sent.

We use this data only to display the client's progress to the client and their coach. We do not use it for advertising or marketing, we do not sell it or share it with data brokers, we do not transfer it to any third party other than our infrastructure provider, and we do not use it for any purpose other than providing the coaching service. Health Connect data is used solely for the feature the client granted it for.

Health data is stored in our managed database (Supabase, hosted on Amazon Web Services in the Asia Pacific (Mumbai) region) with the same encryption and access controls as other client data. Detailed intraday readings are retained for approximately 90 days; daily summaries are retained for the duration of the coaching relationship or until the client deletes them.

---

2. How We Use Your Information

We use your information only to:

• Run, maintain, and improve BrixFit
• Generate AI health reports and lead analysis (using health data you provide)
• Calculate health metrics (BMI, BMR, TDEE, body fat %, protein targets) using validated clinical formulas — see our Health Metrics Methodology
• Deliver in-app messages between coaches and their clients
• Send WhatsApp notifications on behalf of coaches (Growth and Pro plans) — message content is transmitted through Meta's WhatsApp Business API
• Process subscription payments and generate GST invoices
• Respond to support requests
• Detect fraud and prevent abuse
• Meet our legal obligations

We do not sell your personal data to anyone.

---

3. Third-Party Services We Use

We work with trusted providers to deliver BrixFit:

All providers are bound by agreements to handle your data securely and only for the purposes listed above. When WhatsApp notifications are used, the content of those messages is transmitted through Meta's infrastructure subject to their data processing terms.

---

4. Data Security

We take security seriously:

• All data is encrypted at rest and in transit (TLS 1.2+)
• Each coach account can only access their own data (row-level security)
• Internal team access is role-restricted and logged
• Passwords are hashed and never stored in readable form

If you discover a security issue, please email [email protected] and we will respond promptly.

---

5. Data Retention

• Coach accounts — your data is kept as long as your account is active. After deletion, data is removed within 90 days.
• Client data — kept as long as your account is active. You can delete client records from your dashboard at any time.
• Synced health data — detailed intraday readings are kept for about 90 days; daily summaries for the duration of the coaching relationship. A client can delete all of it immediately from the app.
• Billing & invoice records — kept for 7 years as required under Indian financial regulations.

---

6. Your Rights

You have the right to:

• Access — request a copy of the data we hold about you
• Correct — ask us to fix inaccurate information
• Delete — request deletion of your account and data
• Export — download your client data from the dashboard

To make a request, email [email protected]. We will respond within 7 business days.

---

7. Children

BrixFit is not for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will remove it.

---

8. Changes to This Policy

We may update this policy. When we do, we will update the date at the top of this page. For significant changes, we will notify you by email.

---

9. Contact

For privacy questions, contact Brixfly Services:

• Email: [email protected]
• Address: Ward 22 Ganeshpuravaas, Bhadra, Rajasthan — 335501, India