Effective Date: March 7, 2026
Last Updated: March 7, 2026
This Privacy Policy ("Policy") is a legally binding notice describing how Qwik Fyt (the "App", "Service") collects, accesses, uses, discloses, stores, transfers, and otherwise processes personal information. The App is operated under the AlltechSavvy brand and developed by Sagar Shende ("Company", "we", "us", "our").
By creating an account, accessing, or using the App, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, do not use the App.
1.1 This Policy applies to information processed through:
the Qwik Fyt mobile application;
account authentication and profile management flows;
in-app step/activity functionality;
subscriptions and purchase-related entitlement workflows;
support and feedback tools integrated into the App.
1.2 This Policy does not apply to third-party services that are not controlled by us, even where such services are accessible from the App (for example, OAuth identity providers, app stores, or external links). Such providers maintain independent privacy policies and terms.
1.3 This Policy should be read with any in-app notices, permission prompts, app-store disclosures, and, where applicable, region-specific supplemental rights required by law.
For purposes of this Policy:
"Personal Data" / "Personal Information" means data that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a natural person.
"Processing" means any operation performed on Personal Data, including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, transfer, combination, restriction, erasure, or destruction.
"Controller" means the entity determining the purposes and means of processing.
"Processor" / "Service Provider" means an entity processing data on behalf of a controller under contractual instructions.
"Sensitive Data" means categories of data treated with heightened protection under applicable law.
"User" / "You" / "Your" means any individual who accesses or uses the App.
Unless otherwise stated for a specific jurisdictional context, the data controller for the processing described in this Policy is:
Brand: AlltechSavvy
Developer/Operator: Sagar Shende
Contact Email: sagarshende631@gmail.com
Website: https://alltechsavvy.com
If local law requires a local representative and none is designated here, requests may still be sent to the contact details above and will be routed internally as required.
We process the categories below to operate and improve the Service.
Name and display name (including values returned by OAuth provider metadata).
Email address.
Authentication identifiers generated by Supabase and/or identity providers.
Provider metadata (for example sign-in provider type such as Google or Apple).
Optional avatar/profile image URL supplied through profile metadata.
Age.
Gender.
Height and weight.
Step goals and fitness-related preference settings.
Unit preferences (metric/imperial), reminder configuration, and related settings.
Step counter values from device sensors.
Activity recognition signals required to compute and maintain step counts.
Platform health data permissions and historical step continuity data where granted (for example Apple Health / Android Health Connect data scopes used by the App).
Crash logs and exception traces (Firebase Crashlytics).
App performance traces and metrics (Firebase Performance).
Analytics events, screen navigation data, and engagement telemetry (Firebase Analytics).
Technical metadata reasonably necessary to detect failures, maintain reliability, and improve functionality.
Subscription entitlement state and renewal status.
Purchase restoration status and product metadata returned by billing infrastructure.
Store and receipt metadata processed via RevenueCat and platform billing systems.
User-submitted feedback text/content.
App/device technical context associated with submitted feedback (where provided by the feedback SDK and/or user).
Local preference records and configuration values.
Locally stored step history and related caches.
Data maintained through local storage technologies (including, as applicable, SharedPreferences, Hive, SQLite, and platform-local stores).
Except where technically contained in third-party diagnostic payloads outside our direct field-level control, we do not intentionally request or process:
government identification numbers,
payment card primary account numbers,
precise geolocation coordinates,
contacts, call logs, or SMS content.
We obtain data from the following sources:
Directly from you: account onboarding, settings, profile edits, fitness values, and feedback submissions.
Automatically from your device: sensor values, diagnostic telemetry, and app runtime metrics.
From platform APIs with your permission: health and activity data interfaces as authorized by you at OS level.
From third-party identity and subscription services: authentication profile attributes, entitlement, and purchase-related metadata.
We process data for legitimate and defined business purposes, including:
Account creation and authentication
To establish your user identity, create/manage sessions, and secure access to your account.
Core App functionality
To provide fitness tracking, profile continuity, step progress, reminders, and settings persistence.
Service reliability and operational integrity
To detect crashes, triage faults, analyze performance degradation, and maintain service stability.
Personalization and user experience
To present your profile data, preferences, and configured fitness settings in a coherent interface.
Subscription administration
To determine entitlement state, restore purchases, and administer premium features.
Security, fraud prevention, and abuse mitigation
To protect the App, users, infrastructure, and data against unauthorized access or misuse.
Legal and compliance obligations
To comply with applicable law, lawful requests, and recordkeeping obligations.
User support and product improvement
To respond to requests, resolve issues, and improve App functionality through aggregated insights.
If you are in a jurisdiction requiring a legal basis (such as EEA/UK), we rely on one or more of:
Performance of a Contract: processing necessary to provide the Service you requested.
Consent: processing based on permission prompts or user-enabled features (for example health/activity permissions, notifications where required).
Legitimate Interests: maintaining security, reliability, fraud prevention, and service improvement, provided such interests are not overridden by your rights.
Legal Obligation: compliance with applicable statutory and regulatory duties.
Where consent is the basis, you may withdraw consent at any time through device settings, App settings, or by contacting us, without affecting lawfulness of prior processing.
The App may request platform permissions and system capabilities, including:
Activity recognition permissions to support step tracking.
Health data permissions (including read/write step scopes where applicable) to synchronize or maintain continuity of step data.
Notification permissions to deliver workout, hydration, and progress reminders.
Exact alarm permissions (Android) to schedule reminders at user-selected times.
Foreground service permissions (Android) for background step tracking continuity.
Wake lock capabilities (Android) to improve reliability of scheduled operations and tracking updates.
Camera and photo library permissions (iOS usage descriptions present) for optional profile image workflows when/if enabled by user action.
Denying or revoking a permission may disable or degrade related functionality. Permission state can be managed through your device operating system settings.
Certain profile and fitness data (for example age, gender, height, weight, and step history) may be regarded as sensitive or health-adjacent in some jurisdictions. We process such data only for explicit fitness-service functionality and not for unrelated profiling, behavioral advertising, or sale.
The App is a fitness and wellness tool and is not intended to replace professional medical advice, diagnosis, or treatment. Data generated by the App is informational and should not be treated as a medical record unless otherwise required by law.
We disclose relevant data to service providers strictly as necessary to operate the Service, including:
Supabase (authentication, backend database, API support) - Privacy Policy
Google Firebase (analytics, crash reporting, performance monitoring) - Privacy & Security
RevenueCat (subscription and entitlement management) - Privacy Policy
App Store/Play Store billing infrastructure (payment and receipt workflows)
Identity providers such as Google and Apple (authentication flows)
Shorebird (over-the-air update infrastructure) - Privacy Policy
We may disclose data when necessary to:
comply with applicable law or legal process;
respond to lawful requests by public authorities;
enforce terms, detect fraud, or address security incidents;
protect rights, property, or safety of users or the public.
In connection with a merger, acquisition, financing due diligence, reorganization, insolvency, sale of assets, or transfer of service ownership, data may be transferred subject to lawful safeguards.
We do not knowingly sell personal information for monetary consideration and do not intentionally share personal information for cross-context behavioral advertising as those terms are defined under certain U.S. state privacy laws. If this practice changes, we will update this Policy and required notices.
Because our service providers may operate globally, your data may be processed in jurisdictions outside your country of residence. Where required by law, we implement recognized safeguards for cross-border transfers, which may include contractual protections and equivalent transfer mechanisms.
Regardless of processing location, we require service providers to maintain appropriate security and confidentiality protections consistent with applicable law and contractual obligations.
We retain Personal Data only for as long as reasonably necessary for the purposes described in this Policy, including legal, accounting, dispute-resolution, and security needs.
Retention is determined by criteria such as:
account status and ongoing service relationship;
technical necessity for continuity and integrity of user experience;
legal obligations and limitation periods;
fraud-prevention and security investigations.
Account and profile records: retained while account remains active and for a limited period thereafter where legally required or operationally justified.
Fitness/settings records: retained to support ongoing user experience and sync continuity; removed or de-identified following account deletion subject to legal exceptions.
Local on-device data: retained on your device until removed by user action (for example uninstall, clear app data, reset device storage).
Crash/performance/analytics records: retained according to provider controls and operational necessity.
Subscription metadata: retained as necessary for entitlement, reconciliation, audit, and legal compliance.
Where account deletion functionality is available in-App or via support request, we will initiate deletion/de-identification workflows for account-linked personal data, subject to:
legal hold requirements,
security and fraud-prevention needs,
records required to demonstrate compliance.
Residual copies may persist temporarily in backup systems until backup rotation cycles expire.
We maintain administrative, technical, and organizational measures designed to protect Personal Data, including:
encrypted transport over secure network protocols where supported by the underlying platform and service configuration;
access controls and authentication boundaries for backend access;
least-privilege operational practices where feasible;
monitoring and diagnostics to detect abnormal behavior or failures;
dependency and infrastructure updates to reduce known vulnerabilities.
Notwithstanding these controls, no software, network, or storage system is completely secure. You acknowledge that transmission and storage risks cannot be eliminated entirely.
You are responsible for safeguarding device-level controls (screen lock, account credentials, and OS security updates) and for preventing unauthorized access to your own account/session context.
Depending on your location and applicable law, you may have one or more of the following rights:
Right to access personal data we process about you.
Right to request correction of inaccurate personal data.
Right to request deletion of personal data.
Right to object to or restrict certain processing.
Right to data portability where technically feasible and legally required.
Right to withdraw consent where processing is consent-based.
Right to non-discrimination for exercising privacy rights.
Submit requests through the contact information in Section 20. To protect users, we may require reasonable verification of identity before fulfilling a request.
We respond within periods required by applicable law. Where permitted, we may extend response time for complex or high-volume requests with notice.
Certain requests may be denied or limited where allowed by law, including:
inability to verify requestor identity,
legal retention obligations,
conflict with rights of other individuals,
disproportionate technical burden where lawful exemptions apply.
If you are a resident of a U.S. state with comprehensive privacy law (for example California, Colorado, Virginia, Connecticut, Utah, and other applicable states), this section supplements the Policy.
In the preceding 12 months, we may have collected categories broadly corresponding to:
identifiers and account information,
profile and fitness data,
internet/application activity and diagnostics,
subscription and transaction metadata,
feedback/support records.
Purposes include service operation, reliability, security, analytics, support, and legal compliance as described in Section 6.
We may disclose personal information to service providers/processors listed in Section 10 for business purposes.
As of the Last Updated date, we do not knowingly sell personal information or share personal information for cross-context behavioral advertising.
You may have rights to know, access, delete, correct, and opt out of certain processing where applicable. Submit requests through Section 20.
If GDPR or UK GDPR applies, you may have rights of access, rectification, erasure, restriction, objection, and portability subject to statutory limitations.
Where we rely on legitimate interests, you may object on grounds relating to your particular situation. Where we rely on consent, you may withdraw consent at any time.
You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been infringed.
We do not use fully automated decision-making that produces legal or similarly significant effects in the sense contemplated by GDPR Article 22, based on current App functionality. Fitness metrics and reminders are algorithmic product features intended to provide user-facing utility, not legal adjudication.
If material automated decisioning practices are introduced in future versions, this Policy will be updated accordingly.
Certain App functions depend on third-party SDKs and APIs. Such providers may process data under their own legal terms, including privacy policies and security controls that are outside our unilateral control.
You acknowledge that:
OAuth sign-in flows are subject to provider authentication terms;
in-app purchases are governed by Apple App Store and Google Play billing terms;
processor availability and data retention controls may vary by provider infrastructure settings and applicable law.
We select providers based on practical reliability and expected security posture but cannot guarantee uninterrupted external service behavior or third-party policy stability.
The App is not directed to children under 13 years of age, or under a higher age threshold where local law so requires. We do not knowingly collect personal data from children contrary to applicable law.
If we become aware that a child has provided personal data in violation of this section, we will take reasonable steps to delete such data and, where appropriate, disable the associated account.
Parents or guardians who believe a child has submitted data may contact us using Section 20.
For privacy requests, complaints, or compliance questions, contact:
Developer/Operator: Sagar Shende
Brand: AlltechSavvy
Email: sagarshende631@gmail.com
Website: https://alltechsavvy.com
GitHub: https://github.com/sagarshende23
When contacting us, include sufficient details to identify your account and request scope. We may ask follow-up questions to verify identity and process your request securely.
We may revise this Policy periodically to reflect legal, technical, or business changes. Material updates may be communicated through one or more of:
in-app notice;
update to publication date fields in this document;
additional notice channels where legally required.
Continued use of the App after an updated Policy becomes effective constitutes acknowledgment of the revised terms, except where law requires explicit consent for specific processing changes.
This Policy is drafted in English. To the extent a translated version is provided, the English version controls in case of conflict, unless applicable law in your jurisdiction mandates otherwise.
Section headings are for convenience only and do not limit interpretation. If any provision is deemed invalid or unenforceable under applicable law, the remaining provisions remain in full force to the maximum extent permitted.
By creating an account, authorizing permissions, or otherwise using Qwik Fyt, you acknowledge that your personal data will be processed in accordance with this Policy and applicable law.
If you disagree with this Policy, you should discontinue use of the App and may request account deletion through the contact mechanisms above.