Privacy policy
Last updated 19 October 2026
The Fit Lab is a professional network, job board and academy for people who work in health and fitness. This policy explains what personal data we collect, why, who we share it with, and the choices you have. It covers the website and The Fit Lab apps.
The Fit Lab is run from Kakinada, Andhra Pradesh, India. Questions and requests: hello@thefitlab.in.
What we collect
- Account: your email address and password. Passwords are stored only as a secure hash by our sign-in provider.
- Profile: name, photo, cover image, headline, profession, city, district and country, about text, work experience, education, credentials, skills, services, languages and the social links you add. Your date of birth and mobile number are private and never shown to other members.
- What you share: posts, comments, reactions, messages, connection requests and the categories you give your connections, job posts, job applications, service requests, saved posts and saved jobs.
- Learning: courses you join, lesson progress, exam attempts, assignments and certificates.
- Verification: documents you upload to get a verified tick, such as professional certificates or business registration. We do not ask for government ID numbers.
- Payments: for Premium and courses we keep the plan or course, amount, date and payment reference. Card, UPI and bank details go straight to Razorpay and never reach us.
- How you found us: if you arrive from one of our ads or links, the campaign details in the link (such as utm_source or fbclid) and the page you landed on.
- Activity: who viewed your profile, page or posts (shown to you as counts and, for Premium members, names), notifications, and pop-up notification addresses for the devices where you switch pop-ups on.
- Security: sign-in attempts, used to stop password guessing.
How we use it
- To run your account and show your profile, posts and jobs to other members.
- To suggest people, pages and jobs, and to explain why each one is suggested.
- To issue and verify certificates.
- To send notifications by pop-up and inside The Fit Lab. You choose which kinds in Settings.
- To keep members safe: messages, posts and comments are checked automatically for abuse, sexual content and dating approaches before they are shown, and reported content is reviewed by our team.
- To keep photos safe and small: before any photo is uploaded, your phone or computer shrinks it, removes hidden details such as location, and checks it for nudity. The check runs on your own device, so the photo is not sent anywhere for it. If a photo may break our rules, a note with the photo's link goes to our team for review.
- To process Premium and course payments and send a reminder before a plan ends. Nothing renews automatically.
- To measure which of our ads lead to sign-ups and payments, so we spend less on ads that don't work (see Meta below).
We do not sell your data and we do not show third-party advertising on The Fit Lab.
Who can see what
- Your profile, posts and comments are visible to signed-in members.
- Your certificates appear on the public verification page and the Hire-a-Coach list only if you agree when you register. You can change this in Settings.
- Your social links are shown to everyone or only your connections, as you choose.
- Messages are seen only by you and the person you message, except when one of you reports a message or it is held by the safety checks, when our team can read it to decide.
- Members under 18 are never suggested to other people and can't use messaging or connecting.
Services we use
| Service | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage and server functions, including the automated safety check | Mumbai, India |
| Netlify | Hosting the website | Global network |
| Razorpay | Premium and course payments | India |
| Hostinger | Our web address (thefitlab.in) and our email: sending your welcome email, payment receipts, certificates, and important updates such as bookings, trial sessions and job offers from hello@thefitlab.in, and receiving what you write to us. Hostinger handles your email address and the message. You can switch off update emails in Settings → Emails; receipts and certificates are always sent. | Hostinger's own servers |
| Meta (Facebook, Instagram) | Measuring our ads: the Meta Pixel on our sign-up and payment pages, and Meta's Conversions API when a payment completes. Meta receives the event (for example "sign-up" or "₹99 payment"), your browser and IP details, and your email, mobile, name and city in hashed (scrambled) form so it can match the ad you saw. It never receives your password, payment details, messages or exam answers. | Meta's global network |
| Google, Apple, Microsoft, Mozilla | Delivering pop-up notifications to your device's browser or app | Their own networks |
| Google Fonts and jsDelivr | Loading fonts and code libraries, including the photo check, which shares your device's IP address with them. Your photos are not sent to them. | Global networks |
Cookies and storage on your device
We store your sign-in session, your light or dark theme choice and the ad link you arrived from on your device. On our sign-up, course and payment pages the Meta Pixel sets Meta's measurement cookies (_fbp, _fbc). You can limit how Meta uses this in your Facebook or Instagram ad settings, or block third-party cookies in your browser — The Fit Lab works the same either way.
How long we keep it
We keep your data while your account is open. When an account is deleted, its profile, posts, comments, messages, connections, applications and files are removed within 30 days. Payment records are kept for as long as Indian tax law requires.
Your choices and rights
- See and correct: edit your profile at any time from your profile page.
- Control: choose who sees your social links, whether your certificates are public, and which pop-ups you get, in Settings.
- Copy of your data or deletion: email hello@thefitlab.in from the address you signed up with. We reply within 7 days and complete the request within 30 days.
- Withdraw consent to any optional use, such as public certificate display, at any time.
- Complaints: write to the same address. If you are not satisfied, you can complain to the Data Protection Board of India.
Children
The Fit Lab network is for adults. Members under 18 may use Academy courses with a parent or guardian's permission; messaging, connecting and people suggestions are switched off for them.
Security
Data travels over encrypted connections. Access to member data is checked on our database for every request, and every action by our admin team is recorded in a log that nobody can edit or delete.
Changes
If we change this policy in a way that matters, we'll tell members inside The Fit Lab before the change takes effect.