Privacy Policy
Last updated 25 September 2026 · ByteeCraft Studios, Tamil Nadu, India
Who we are
FitPay is a fee-management service run by ByteeCraft Studios, Tamil Nadu, India. Gyms, dance, music, yoga, skating and martial-arts classes (“partners”) use FitPay to record the fees their members or students pay them. This policy explains what information FitPay handles and how.
Two roles, clearly split
For the members and students a partner adds to FitPay, the partner decides what is recorded and why; under India’s Digital Personal Data Protection Act, 2023 the partner is the Data Fiduciary and ByteeCraft Studios processes that data on the partner’s behalf. For partner accounts and demo requests made on this website, ByteeCraft Studios is the Data Fiduciary.
What we collect
- Partners: business name, type, address, phone, email, optional GSTIN and UPI ID, login ID, and FitPay subscription records (plan, amounts, invoices).
- Members / students (entered by partners): name, phone number, plan, joining date, notes, fee payments (amount, date, method, reference number) and receipts.
- Demo requests: the name, business, type, city, phone and message you type into the “Book a demo” form.
- Support messages partners send us through “Need help?”.
- Technical data: if a signed-in screen hits an error, the error message, page and browser type (kept 60 days) so we can fix it.
What we do not do
We do not sell or rent personal data, show ads, or use analytics or advertising trackers. FitPay does not collect card numbers or bank details and does not handle anyone’s money: UPI links in fee reminders pay the partner directly through the member’s own UPI app.
How it is used
Only to run FitPay: keeping fee records and balances, producing receipts and verified receipt links, reminders the partner chooses to send, partner support, billing partners for FitPay, answering demo requests, security and fixing errors.
Where it is stored and who helps us
- Supabase — the database and logins, hosted in Mumbai, India.
- Cloudflare — hosts this website.
- Brevo — sends emails (welcome emails to new partners, alerts and nightly backups to ByteeCraft Studios).
- WhatsApp — receipts and reminders are sent by the partner from their own WhatsApp; FitPay only prepares the message.
- Have I Been Pwned — when a password is set, only the first five characters of a one-way fingerprint of it are checked against known data breaches; the password itself never leaves your browser.
Security
Every partner can see only their own business’s records; this is enforced by the database itself. Connections are encrypted (HTTPS). Passwords must be strong and are checked against known breaches, the ByteeCraft Studios console requires two-step verification, and idle sessions sign out automatically. Verified receipt and payment links use long random codes that cannot be guessed.
How long we keep it
Records stay while the partner uses FitPay. Payments are never silently changed: a wrong entry is cancelled with a reason and stays visible as cancelled. When a partner leaves, we delete their business and members’ records within 30 days of their request (after they have downloaded a copy if they want one). Nightly backups are kept by ByteeCraft Studios and are deleted on the same request. Error reports are deleted after 60 days.
Children
Some classes teach students under 18. Partners must add a child’s details only with a parent’s or guardian’s consent and should use the parent’s or guardian’s phone number. FitPay does not track or profile anyone.
Your rights
Members and students should first contact their gym or class, which controls their record and can correct or remove it. Anyone may also write to us to access, correct or erase their data, to withdraw consent, to nominate someone to act for them, or to raise a grievance. We reply within 7 days and aim to resolve requests within 30 days.
Browser storage
FitPay stores your sign-in session and small preferences (for example dismissed announcements) in your browser. There are no tracking cookies.
Contact and grievances
ByteeCraft Studios · bytecraftstudios1@gmail.com · +91 63804 95460. If you are not satisfied with our reply you may approach the Data Protection Board of India.