Privacy Policy — Yours Multi Fitness Center

Effective Date: 14 September 2026

This Privacy Policy explains how Yours Multi Fitness Center (“we,” “our,” or “the app”) collects, uses, stores, shares, and protects information when you use the Yours Multi Fitness Center Android application, package name:

com.sdtechsolution.multifitness

This policy also covers information processed through the app in connection with services provided by the participating gym.

For privacy questions, account support, or account-deletion requests, contact:

yoursmultifitnesscenter@gmail.com

1. Information We Collect and Use

1.1 Account Information

To create and manage your account, we may process:

• Your name

• Verified phone number

• Firebase user ID

• Legacy email information retained on older accounts

New registrations and normal logins use a phone number, name, and password, where applicable.

The app does not provide email-based login or email-verification links for new accounts.

Authentication is provided using Firebase Authentication.

When your password is entered, it is transmitted securely over HTTPS to the authentication system for verification or password setup. Our application backend does not store your password.

For phone-based accounts, the system may create a randomly generated internal sign-in identifier. This identifier is used internally for authentication and is not treated as your contact email address.

The app does not intentionally store your entered password in the gym database or save it as plain text on your device.

1.2 Membership and Payment Information

The app may store information related to your gym membership, including:

• Gym association

• Membership approval status

• Active or inactive membership status

• Membership plans

• Membership start and expiry dates

• Recorded charges

• Payment history

• Payment notes

• Outstanding balances

Payment records are entered and managed by the gym.

The app does not collect or store bank-account details, debit-card details, credit-card credentials, or other online-payment credentials.

The application does not currently provide an online checkout or payment-processing service.

1.3 Owner Collection Notes

A gym owner may use a private collection notebook within the application to manually record:

• Collection date

• Person's name

• Amount collected

These records are available only to the relevant owner through the application.

Collection notes are not automatically linked to a member's account, membership balance, or payment history.

1.4 Fitness and Activity Information

To provide fitness tracking and gym-management features, the application may store:

• Attendance dates

• Assigned workout plans

• Personal workout plans

• Selected training days

• Selected gym times

• Workout-completion records

• Optional body-weight entries

• Optional personal journal notes

• Optional food and calorie records

Food and calorie records may include:

• Date

• Meal category

• Food or portion description

• Manually entered calorie value

The application may also store a daily calorie-intake goal and information about when that goal was created or changed.

These features are designed for fitness organization and personal tracking.

1.5 Notification Information

The application may process information required to provide notifications, including:

• Reminder preferences

• Notification inbox records

• Device or installation registration identifiers used by Firebase Cloud Messaging

These identifiers allow notifications to be delivered to your device.

A gym owner may send repeated membership-expiry reminders after a membership has expired.

These notices may appear in the member's notification inbox.

Whether a phone notification is displayed also depends on:

• Android notification permissions

• The member's notification preferences

Temporary notification-delivery information and device references may be retained for retry purposes for up to approximately 24 hours.

1.6 Phone Verification

SMS verification may be used for:

• New account registration

• Adding a phone number to an existing signed-in account

• Password recovery

The app requests confirmation before sending an SMS verification code.

Phone numbers used for authentication are transmitted to and processed by Google/Firebase for authentication and for spam, fraud, and abuse prevention associated with Google services.

Normal phone-number and password login does not send an SMS every time you sign in.

Never share your SMS verification code with another person.

1.7 Technical and Security Information

Firebase and Google Cloud may process technical information necessary to:

• Authenticate requests

• Operate the backend

• Store application data

• Deliver notifications

• Diagnose technical failures

• Protect the application from abuse

Operational logs may contain technical identifiers and error-related information.

To reduce repeated or abusive password attempts, the backend may temporarily store:

• Hashed phone identifiers

• Hashed IP-related identifiers

• Attempt counters

• Expiry timestamps

These temporary protection records normally expire after approximately 15 minutes and are removed through scheduled cleanup.

2. Why We Use Your Information

We use information collected through the application to:

• Create and manage user accounts

• Authenticate users

• Verify phone numbers

• Manage gym memberships

• Approve member access

• Record attendance

• Record membership payments

• Display payment history and outstanding balances

• Assign and manage workouts

• Display personal fitness progress

• Calculate attendance streaks

• Maintain optional calorie and weight records

• Send requested reminders and membership notifications

• Protect accounts and prevent misuse

• Diagnose technical problems

• Provide customer support

• Process correction and account-deletion requests

We do not sell your personal information.

The application currently contains no advertising SDK.

Personal journal information is not used for advertising purposes.

3. Who Can Access Your Information

3.1 Gym Owner Access

The gym owner may access information that is necessary to operate your membership, including:

• Membership information

• Membership status

• Attendance information

• Payment information

• Assigned workout schedules

• Relevant workout information

• Food and calorie records

• Daily and weekly calorie totals

• Daily calorie-intake goals

The calorie tracker informs members about this access before food information is entered.

Only the member can add, edit, or delete their own food entries.

Private Weight Journal

Your personal weight journal is available through your member account.

The gym owner's normal dashboard does not provide access to your private weight journal.

3.2 Authorized Administrators

Authorized backend administrators may access information when reasonably necessary to:

• Operate the service

• Provide support

• Investigate technical problems

• Maintain security

• Process account deletion

• Protect users and the application

Access should be limited to legitimate operational purposes.

3.3 Google Firebase and Google Cloud

We use Google services, including Firebase and Google Cloud, for functions such as:

• Authentication

• Database storage

• Backend processing

• Cloud functions

• Notification delivery

Google infrastructure may process information outside Nepal.

The application's current database and backend functions are hosted in India.

Other Firebase services may operate through Google's broader global service infrastructure.

3.4 Legal Requirements

Information may be disclosed where disclosure is required by applicable law, a valid legal process, or where reasonably necessary to protect:

• Users

• The gym

• The application's systems

• The security and integrity of the service

4. Device Permissions and Local Information

4.1 Camera Permission

Camera access is used to scan the gym's attendance QR code.

The application code does not intentionally save or upload camera photographs or videos while performing QR attendance scanning.

Instead, the application reads the QR code and sends the decoded attendance token to the backend for verification and attendance processing.

4.2 Notification Permission

Notification permission is optional.

You may:

• Disable reminders inside the application

• Disable notification permission through Android settings

Some app functions may still work even when notifications are disabled, although you may not receive phone alerts.

4.3 Information Stored Temporarily on Your Device

Firebase may store authentication-session information on your device so that you can remain signed in.

Application screens may temporarily hold:

• Loaded information

• Unsaved edits

in device memory while you are using the app.

The application does not maintain its own custom offline database containing your full membership or fitness records.

Notifications that have already been delivered may remain visible on the device until dismissed or removed through the device's notification settings.

4.4 Permissions We Do Not Request

The application does not currently request access to:

• Contacts

• Microphone

• Continuous location tracking

• Health Connect

If this changes in a future version, this Privacy Policy will be updated where appropriate.

5. Data Retention and Account Deletion

Account and gym-related information is generally retained while an account remains active or until deletion is requested by the account holder or initiated by an authorized gym owner.

Signing out of the application or uninstalling the application does not automatically delete your backend account or records.

5.1 Delete Your Account From the App

Members, pending members, and eligible account holders can request account deletion from within the app.

Open:

Account and Privacy → Delete My Account

You will be asked to:

1. Confirm the deletion request.

2. Type DELETE.

3. Enter your password.

Account holders who have not yet verified a phone number may also use the available deletion process where supported.

If phone registration was interrupted before a password was successfully created, you may need to complete phone registration before password-confirmed deletion becomes available.

5.2 Owner-Initiated Member Deletion

An authorized gym owner may select Delete Account from the member-management area.

The owner must confirm the request using the owner's own password.

5.3 Information Removed During Account Deletion

Account deletion is designed to remove the user's active application records, including:

• Firebase Authentication account

• Member profile

• Membership records

• Payment history linked to the member

• Attendance records

• Workout schedules

• Workout-completion records

• Weight-journal information

• Food and calorie records

• Intake-goal history

• Notification inbox records

• Device notification registrations

• Associated invitations

Deleting your application account does not automatically provide a refund or cancel any separate agreement that may exist between you and the gym.

5.4 Owner Collection Notes

Separately entered owner collection notes are not automatically matched to a member account based only on a person's name.

Therefore, they may not automatically disappear when a member account is deleted.

The owner may delete these notes manually.

You may also request deletion of a relevant collection note by contacting:

yoursmultifitnesscenter@gmail.com

Where possible, provide the name and collection date so the record can be identified.

Deleting the owner's account removes that owner's collection notes.

5.5 Individual Food-Entry Deletion

Members may delete individual food entries.

When an entry is deleted, information such as its:

• Food description

• Date

• Meal category

• Calorie value

is removed from the active database.

A minimal entry-ID marker may temporarily remain under the user's account to prevent a delayed synchronization or save retry from accidentally recreating the deleted entry.

These markers are also removed when the entire account is deleted.

5.6 Deleting an Owner Account

Deleting a gym owner's personal account does not automatically delete:

• Other members' accounts

• Other members' records

• The gym's general business information

When an owner account is deleted:

• That owner's access is removed

• References to the deleted owner may be cleared from related records

• A replacement owner may need to be assigned by trusted administration

Other users' own records remain associated with their accounts.

5.7 Deletion Processing

Account deletion starts after the deletion request has been confirmed.

If processing is interrupted:

• Access may be blocked

• The backend may retry the deletion process

A minimal user-ID marker may remain for approximately 24 hours after deletion is completed.

This marker is used to reject previously issued authentication tokens and is then removed through scheduled cleanup.

Pending deletion jobs may temporarily retain the identifiers required to complete the deletion process.

If deletion does not complete successfully, contact support.

5.8 Information That May Remain Temporarily

Some information may not disappear immediately from every system.

This may include:

• Operational logs

• Notifications already delivered to your phone

• Provider-managed backups

• Recovery copies maintained by service providers

Such information may remain according to applicable provider retention practices or your device settings.

We do not deliberately include passwords or private journal content in application logs.

Any information independently maintained by the gym outside this application is controlled separately by the gym.

For deletion of such information, contact the gym directly.

6. Request Account Deletion Without the App

You do not need to reinstall the application to request account deletion.

Send an email to:

yoursmultifitnesscenter@gmail.com

Use the subject:

Delete my Yours Multi Fitness account

Include enough information for us to identify your account, such as:

• Registered phone number or registered email address

• Your name

For older accounts registered using email, use the registered email address when possible.

We may request additional verification to confirm that you are the legitimate account holder before processing deletion.

Important

Never send your password or SMS verification code by email.

After identity verification, the deletion request will be processed.

You may contact the same email address for support or status information if you cannot access your registered phone number or email address.

7. Your Choices

Depending on the feature, you may:

• Choose not to enter body-weight information

• Choose not to write journal notes

• Choose not to record food or calorie information

• Delete individual food entries

• Remove or change intake goals where available

• Turn reminders off

• Change your workout plan

• Request correction of inaccurate information

• Request deletion of your account

Certain account and membership information is necessary for the application to provide membership-management and gym-access services.

8. Calorie and Fitness Information

Food calorie values are manually entered by the user.

Daily intake goals may be selected by you or configured by your gym owner.

The application does not calculate or prescribe a medically recommended calorie intake.

Fitness tracking information provided through the application is intended for organization and general fitness tracking only.

Medical Disclaimer

The application is not a medical service and is not intended to:

• Diagnose medical conditions

• Treat illnesses or injuries

• Replace professional medical advice

• Provide medical prescriptions

For medical or health concerns, consult an appropriately qualified healthcare professional.

9. Data Security

We use technical and organizational measures intended to protect application information.

These include measures such as:

• HTTPS encrypted connections

• Authentication controls

• Backend authorization controls

• Restricted administrative access

• Temporary login-attempt limits

However, no internet service, application, network, or data-storage system can guarantee absolute security.

Users should keep their passwords and verification codes private and should not share account credentials with unauthorized persons.

10. Children and Young Users

The application is primarily intended to provide gym membership and fitness-management services.

If you believe that a child has provided personal information through the application without appropriate permission, please contact us.

We will review the request and take appropriate steps regarding the information where necessary.

11. International Data Processing

Some service providers used by this application operate infrastructure outside Nepal.

As described above, the application's current primary database and backend functions are hosted in India, while other Google/Firebase services may process information through Google's service infrastructure in other locations.

By using the application, information may therefore be processed on infrastructure located outside your country.

12. Changes to This Privacy Policy

We may update this Privacy Policy when:

• Application features change

• Data-processing practices change

• Service providers change

• Security practices change

• Legal or operational requirements change

When this policy is updated, the Effective Date at the top of the policy will also be updated.

Material changes may also be communicated through the application or another appropriate service notice.

13. Contact Us

For questions about privacy, account information, account deletion, or application support, contact:

Yours Multi Fitness Center

Email: yoursmultifitnesscenter@gmail.com

Last Updated: 14 September 2026