MegaFit Privacy Policy
This Privacy Policy explains how your personal data is collected, used, shared and protected when you use the MegaFit Athlete app and the MegaFit Trainer app (together, the “Apps”) and the related services provided through login.me-ga-fit.com (the “Service”).
- Who we are
- Athletes and trainers
- What data we collect
- How we use your data
- Legal bases (GDPR)
- How your data is shared
- Third-party services
- International data transfers
- How long we keep data
- Security
- Your rights
- Deleting your account and data
- Device permissions
- Push notifications
- Children
- Changes to this policy
- Contact us
1. Who we are
The Service is operated by MegaFit Platform (“MegaFit”, “we”, “us”, “our”), Porta Castra 5, 3995 ZG Houten, the Netherlands. MegaFit is the data controller responsible for your personal data.
For any privacy question, or to exercise your rights, contact us at info@me-ga-fit.com.
2. Athletes and trainers
The Service connects two types of users:
- Athletes use the MegaFit Athlete app to follow training programmes, communicate with their trainer, and manage their subscription.
- Trainers use the MegaFit Trainer app to publish training offerings, manage their athletes, communicate with them, and run their subscription with MegaFit.
Because the Service is built around this relationship, some information you provide is intentionally shared between a connected athlete and trainer (for example, your name, profile photo, training programme, activity progress and the messages you exchange). Section 6 explains this in detail. Where the Apps differ in what they collect, this is noted explicitly below.
3. What data we collect
3.1 Information you provide
| Category | Examples | Applies to |
|---|---|---|
| Account details | Name, email address, password (stored only in encrypted/hashed form), user role (athlete or trainer) | Both apps |
| Profile information | Profile photo, phone number, gender, and postal address (street/house number, postcode, city, province) | Both apps |
| Training content | Workout programmes, schedules, exercises, training logs and progress you or your trainer record | Both apps |
| Messages | Content of messages exchanged between athletes and trainers through the in-app chat | Both apps |
| Photos / images | Images you upload from your camera or photo library (for example a profile picture) | Both apps |
| Support communications | Information you send us when you contact support | Both apps |
3.2 Additional information collected from trainers (Trainer app)
When you use the Trainer app, we also process the following, so you can operate as a trainer on the Service:
| Category | Examples |
|---|---|
| Business details | Company name, chamber-of-commerce (KvK) number, and any certificates or qualifications on your trainer record |
| Payout details | The bank account used to pay you |
| Date of birth | Held on your trainer record |
| Public profile | Website and social-media links (e.g. Instagram, TikTok) you add to your profile |
| Training listings | The offerings you create — title, description, price, category, and the address/location where the training takes place |
Some of these details (such as your business, certificate and bank details) may be set up during onboarding rather than typed into the app, but the Trainer app displays and uses them. The address you attach to a training listing is business location information, not your device’s location.
3.3 Payment information and subscriptions
Payments are processed by our third-party payment provider, Mollie B.V. This applies to athlete purchases in the Athlete app and to the trainer subscription package in the Trainer app. Your full card or bank details are entered directly with Mollie and are not stored on our servers. We receive and store only transaction and subscription data such as payment status, the plan or package purchased, a Mollie customer reference, invoices, and dates. Purchases may alternatively be handled through Apple or Google in-app billing, in which case the store processes the payment under its own privacy policy.
3.4 Information collected automatically
| Category | Examples | Purpose |
|---|---|---|
| Device & technical data | Device model, operating system version, app version, language, and network state | Operating and troubleshooting the Apps |
| Identifiers | A push-notification token and an app-instance identifier generated by Firebase | Delivering notifications and analytics |
| Usage & analytics data | Screens viewed, features used, session information, collected via Google Analytics for Firebase | Understanding and improving the Apps |
| Diagnostics / crash data | Crash reports and error logs, collected via Firebase Crashlytics | Detecting and fixing stability problems |
| Approximate IP-based location | Derived from your IP address by our infrastructure and analytics providers | Security and basic analytics |
We do not collect special-category (sensitive) health data such as body measurements, medical information or biometric data through the Apps.
4. How we use your data
We use personal data to:
- create and manage your account and authenticate you;
- provide the core Service — delivering training programmes, recording progress, and enabling athlete–trainer communication;
- help athletes find and connect with a trainer (for example, by training category or the postal area you enter);
- process subscriptions and payments;
- send you push notifications and service messages you have not opted out of;
- maintain security, prevent fraud and abuse, and diagnose technical problems;
- analyse and improve the Apps and develop new features;
- comply with our legal obligations and enforce our terms.
We do not sell your personal data, and we do not use it for third-party advertising.
5. Legal bases for processing (GDPR)
Where the EU/EEA General Data Protection Regulation applies, we rely on the following legal bases:
- Performance of a contract — to provide the Service you sign up for (account, training programmes, messaging, payments).
- Consent — for push notifications, camera/photo access, and non-essential analytics. You can withdraw consent at any time.
- Legitimate interests — to keep the Apps secure, prevent abuse, and improve our Service, balanced against your rights.
- Legal obligation — to comply with applicable laws, including tax and accounting rules for payments.
6. How your data is shared
- Between athletes and trainers. When you are connected with a trainer or athlete, relevant information (name, profile photo, training programme, progress and messages) is shared with that connected user so the Service can function.
- With service providers (processors). We share data with the third parties listed in Section 7, who process it on our behalf under contract.
- For legal reasons. We may disclose data where required by law, to respond to lawful requests, or to protect the rights, safety and property of MegaFit, our users or others.
- In a business transfer. If MegaFit is involved in a merger, acquisition or asset sale, data may be transferred as part of that transaction, subject to this policy.
7. Third-party services
The Apps use the following third-party services, which may process limited personal data:
| Provider | Function | More information |
|---|---|---|
| Google Firebase – Cloud Messaging | Delivers push notifications | firebase.google.com/support/privacy · Google Privacy Policy |
| Google Analytics for Firebase | App usage analytics | |
| Google Firebase Crashlytics | Crash and error reporting | |
| Mollie B.V. | Processes payments | mollie.com/privacy |
8. International data transfers
Some of our providers (including Google/Firebase) may process data on servers located outside your country, including outside the EU/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision. You may request more information using the contact details in Section 17.
9. How long we keep data
We keep personal data only for as long as necessary for the purposes described in this policy:
- Account and profile data — for as long as your account is active.
- Training content and messages — for as long as your account is active or as needed to provide the Service.
- Payment and transaction records — for the period required by applicable tax and accounting law.
- Analytics and diagnostic data — for a limited period consistent with the retention settings of our providers.
When data is no longer needed, we delete or anonymise it. See Section 12 for how to have your account and data deleted.
10. Security
We use technical and organisational measures to protect your data, including encrypted transmission (HTTPS/TLS) between the Apps and our servers, hashed password storage, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to address vulnerabilities promptly.
11. Your rights
Subject to applicable law (including the GDPR), you have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- request erasure of your data (“right to be forgotten”);
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing already carried out;
- lodge a complaint with your data protection authority.
To exercise any of these rights, contact us at info@me-ga-fit.com. We will respond within the timeframe required by law. If we cannot resolve your concern, you may lodge a complaint with your local supervisory authority. As we are established in the Netherlands, the competent authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
12. Deleting your account and data
You can request deletion of your account and associated personal data in any of these ways:
- In the app: open your account settings and choose “Delete account”.
- On the web: submit a request at https://me-ga-fit.com/delete-account/.
- By email: write to info@me-ga-fit.com from the address on your account.
When you delete your account, we delete or anonymise your personal data, except where we are required to retain certain records (for example, payment records kept for legal and accounting purposes). Some data shared with a connected trainer or athlete, and backups, may take additional time to be fully removed.
13. Device permissions
The Apps ask for the following permissions. You can grant or revoke each of them in your device settings.
| Permission | Why it is used | Applies to |
|---|---|---|
| Camera | To take a photo to upload (for example a profile picture) | Both apps |
| Photos / media | To select and upload an existing image | Both apps |
| Notifications | To send push notifications (messages, reminders, updates) | Both apps |
14. Push notifications
With your permission, we send push notifications through Firebase Cloud Messaging — for example new messages, training reminders, or account updates. You can turn notifications off at any time in your device settings or within the app.
15. Children
The Apps are not directed to children under the age of 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
16. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of the Apps after an update means you accept the revised policy.
17. Contact us
If you have questions about this policy or how we handle your data, contact:
MegaFit Platform
Porta Castra 5, 3995 ZG Houten, the Netherlands
Email: info@me-ga-fit.com