Privacy Policy

Last updated: 12 November 2026

Fitel is software for gyms and coaches: a web dashboard for the gym, an iOS and Android app for athletes, a Fitel TV screen for the gym floor and the fitelapp.com website (together, the “Service”). This policy explains what personal data we process, why, how long we keep it and what rights you have, under the EU General Data Protection Regulation 2016/679 (“GDPR”) and Greek Law 4624/2019.

1. Who we are

The Service is run by Georgios Tsirakos, Arvis 19, 713 05 Heraklion, Crete, Greece (“Fitel”, “we”, “us”).

For any privacy matter: tech@fitelapp.com · +30 697 770 7894.

2. Your gym and Fitel

When a gym or coach uses Fitel for its members, the gym is the controller of its members’ data (member details, memberships, bookings, programs, workouts, measurements). Fitel processes that data as a processor (Article 28 GDPR), only on the gym’s behalf and on its instructions, as set out in the Terms of Use. For that data, please contact your gym first; if you write to us, we will forward your request and help the gym answer it.

Fitel is the controller of the data it needs to run itself: the gym’s or coach’s account, subscription billing, security and sign-in, technical data and error reports, support requests and demo requests from the website.

3. What data we collect

Account details

• First name, last name, email, mobile number, age or date of birth, gender and, if you add one, a profile photo.
• When you verified your email and phone, and the one-time codes we send you to sign in and verify.
• For gyms: the gym’s name, phone, email, website and location, and the Fitel plan you chose.

Memberships and bookings

• Your gym membership, its expiry, your remaining credits, your class bookings, cancellations, no-shows and check-ins by QR code.
• If you buy a program from your gym’s online shop, the shop sends us your name, email and what you bought, so we can give you access. The payment is handled by the gym’s shop, not by Fitel.

Training

• Programs assigned to you, the workouts you complete, sets, reps, weights, times, records per exercise, and your coach’s comments and notes.

Body measurements

• Height, weight and body fat percentage, when you or your coach enter them. These may count as health data. They are optional, only you and your gym can see them, they are used for nothing else, and you can delete them at any time. A gym that enters them is responsible for having your explicit consent.

Payments

• Gyms pay their Fitel subscription through Stripe. We never see or store card numbers; Stripe only tells us the subscription status, amounts and billing details.

Technical data

• IP address, device type and operating system, app version, language, and the time and kind of requests to our servers (logs).
• Error reports when the app crashes or fails (what happened, on which screen, on which device).
• Your device’s push notification token, if you allow notifications.

Support and contact

• Whatever you send us in a problem report (description, screenshots and the technical details you choose to attach) or by email.
• From the website’s demo form: name, phone, email, role and your message.

4. App permissions

The app asks for a permission only when a feature needs it, and you can revoke it in your device settings:

• Camera: to scan QR codes when checking in at the gym. The image is neither stored nor sent.
• Photos: to pick a profile photo or a background for a workout share card. Only the profile photo you choose is uploaded; the card background stays on your device.
• Calendar (write only): to add the classes you book to your device calendar. We never read your calendar.
• Notifications: for booking reminders, messages from your gym and account updates.

When you choose to share a workout (for example to Instagram Stories), the image is handed to the app you pick, and that app’s policy applies from there. Fitel sends no other data to Meta.

5. Why we use it and on what legal basis

We do not sell data, show ads, track you across other apps or websites, or make automated decisions that legally affect you.

6. Who we share it with

• Your gym and its coaches see your data as a member. The gym’s Fitel TV screen may show your name and photo in classes you have booked.
• Providers that process data for us, under contracts that bind them to use it only to provide their service to us:

• Authorities, when the law requires it or to defend legal rights.
• A successor, if Fitel is transferred, under the same commitments and after we tell you.

7. Transfers outside the EU

The database and files are stored in the EU. Where a provider processes data in the USA, the transfer relies on the EU–US Data Privacy Framework, where the provider is certified, or on the European Commission’s Standard Contractual Clauses. The United Kingdom is covered by a Commission adequacy decision.

8. How long we keep it

• Account and training data: for as long as the account exists. If you delete it, or your gym does, the data is removed from the database within 30 days and from backups within a further 30 days.
• Gym accounts: while the subscription is active and for 90 days after it ends, so it can be reactivated without loss; then deleted together with its members’ data. The gym can ask for a copy or for immediate deletion.
• Invoices and payment records: as long as tax law requires (normally 5 years from the end of the financial year).
• Logs and error reports: up to 90 days.
• One-time codes: a few minutes, until used or expired.
• Problem reports and demo requests: up to 12 months.

9. Security

All traffic is encrypted (HTTPS/TLS) and data is encrypted at rest. Sign-in uses one-time codes and short-lived tokens, access to data is limited per gym and per role, and requests are rate-limited to prevent abuse. If a breach affects you, we will notify the authority and you or your gym as the GDPR requires.

10. Your rights

You have the right to access, correct and delete your data, to restrict or object to its processing, to data portability, and to withdraw any consent you gave at any time (without affecting processing done before).

• Correct your details in the app’s Profile or the dashboard’s Settings.
• Delete your account in the app: Profile → Delete account, or by emailing tech@fitelapp.com.
• For anything else, write to tech@fitelapp.com. We reply within one month and may ask you to confirm your identity.

If you believe your rights have been breached, you can complain to the Hellenic Data Protection Authority, 1–3 Kifisias Ave., 115 23 Athens, Greece, www.dpa.gr, or to the authority where you live.

11. Minors

The app is meant for people aged 15 and over. Children under 15 may use it only with the consent of a parent or guardian (Article 21 of Greek Law 4624/2019), which the gym that creates the account collects. If we learn that an account belongs to a child under 15 without that consent, we will delete it.

12. Cookies and local storage

The website uses no tracking or advertising cookies. The app and the dashboard store on your device only what they need to work: your sign-in, language and appearance (light or dark theme). These are strictly necessary and need no consent.

13. Changes

If we change this policy, we will update the date at the top of this page. For material changes we will notify you in the app or by email before they take effect.

14. Contact

Georgios Tsirakos (Fitel), Arvis 19, 713 05 Heraklion, Crete, Greece
tech@fitelapp.com · +30 697 770 7894

See also the Terms of Use.