FitMatch

Privacy policy

Last updated 27 September 2026

FitMatch is an iPhone app that helps people find a personal trainer in Singapore and plan sessions with them. It is operated by Vishal Sinha, trading as Zephy Studio ("we", "us"), Singapore.

This policy explains what we collect, why, where it is kept, who it is shared with, and your choices. It is written to meet Singapore's Personal Data Protection Act 2012 (PDPA).

The short version

Your health answers never leave your phone. If you're a client, your health questions (conditions, injuries, medications, body measurements, pregnancy, health notes and your exact date of birth) are stored only on your iPhone, encrypted, and excluded from backups. We never receive them.
You see exactly what a trainer will get before you send a request, and nothing is shared until you tap Send.
No ads, no analytics, no tracking. FitMatch contains no advertising, analytics or crash-reporting software, and we don't sell personal data.
You can delete your account in the app at any time, and we delete your data from our servers straight away.
Messages are checked on your iPhone before they're sent, to keep conversations safe; they're stored on our servers so both people can read them.

1. What we collect

Everyone

Data	Why
Email address, or your Apple ID sign-in (Sign in with Apple, which can hide your real email)	To create your account and sign you in
The name you choose to show, and whether you're a client or a trainer	To run your account and show your name to the people you plan sessions with
Your phone's time zone	To show dates in your own time in our emails
Session plans: dates, times, length, repeats, the venue you pick, logistics items, the chosen offer, cancellations and their reason	To let you and the other person arrange sessions
Messages you write to the person you train with, and when they were read	To let you talk to each other
Training plans a trainer sends, and workouts a client chooses to share with them	To plan and follow training together
Your activity inbox (for example, "session confirmed" or "new message")	To show you what's happened and to email you about it
Blocks and reports you make, including the reported message if you report one	To keep people safe and handle reports
Your subscription status (active, trial or ended), from Apple	To give you access; Apple handles the payment itself

Messages are free text between you and the person you're matched with. Before a message is sent, your iPhone checks it for abuse (harassment, threats, sexual content, scams) using a word list and, on iPhones with Apple Intelligence, Apple's on-device model; the message isn't sent anywhere for this check. Our server repeats a word-list check. Messages are stored on our servers so both of you can read them; they are not end-to-end encrypted. Please don't send health details you wouldn't want stored: your health answers in the app are never added to messages for you.

Clients

On your phone only (never sent to us): your health answers listed above, your goals, preferences, and the consent record for this policy.

Sent to us only when you send a request, after you've reviewed it on screen, and only to the trainer you choose:

a short goals summary you've approved;
session type (one-to-one or small group);
an age band (for example, 25–34), never your date of birth;
your preferred areas and a budget band;
when you'd like to train (weekdays, weekends, mornings, afternoons, evenings) and whether you have a gym membership;
only if you tick them, areas your trainer should go easy on (for example knees or lower back) or a limit such as "low-impact only". These say where, never why. Nothing is ticked unless you tick it, for each request.

Apple Health (optional): if you allow it, FitMatch reads your workouts (with heart rate and calories during them) and your weight to fill in your training log on your iPhone. FitMatch never writes to Apple Health. Weight never leaves your phone. A workout summary (type, date, duration, distance, calories and heart rate) is shared with a trainer only if you switch sharing on for that trainer; you can switch it off at any time, and shared workouts are deleted when you do or when training together ends.

Matching happens on your iPhone: the app ranks trainers using your answers, including your health answers, without sending them anywhere.

Trainers

Your public profile: photo, headline, bio, rates, years of experience, languages, gender (optional), specialisations, service areas and certifications. Profiles you publish are visible to signed-in users.

If you send a certificate for verification, the photo or PDF is stored privately; only you and FitMatch's reviewer can see it. Clients see the certification's name, issuer and a Verified badge, never the file. We don't ask for NRIC or other identity documents.

If you choose to share your free times, your iPhone reads busy times from the calendars on your phone and sends us only the resulting free start and end times, for your accepted clients to see. Your calendar events' titles and details never leave your phone.

2. What stays on your device

Health answers (clients): on your iPhone only, as described above.
Calendar: if you tap "Add to calendar", FitMatch writes the session into your iPhone's calendar. That calendar is yours; we don't receive it.
Pre-written headline and bio (trainers): built on your iPhone from your own profile answers by a template. No AI service is used.
AI features run on your iPhone only: matching by meaning (Apple's built-in language model), the message check (Apple's on-device model where available) and the trainer's "Draft a plan" (fixed rules). No personal data is sent to any AI provider.

3. Who we share data with

The other person in a match. A trainer sees what you chose to send with your request. Once a trainer accepts, you both see each other's display name, and the session plans, messages, training plans, any workouts the client chose to share, and (for clients) the trainer's shared free times between you.
Service providers who process data for us:

Provider	What it does	What it receives	Where
Supabase	Hosts our database, sign-in and photo storage	Everything in section 1 except on-device data	Singapore
Resend	Sends sign-up codes and activity emails	Your email address and display name, and the email's content. Activity emails say only that something is waiting in the app: no names of others, times, venues or request content	United States
Apple	Sign in with Apple; Apple Maps venue search	Your Apple sign-in; the text you type when searching for a venue	Per Apple's privacy policy
Apple	Push notifications, if you allow them	A device token for your iPhone and the notification text, which is always generic (never names, times, places or message text)	Per Apple's privacy policy
Apple	Subscriptions and payments through the App Store	Your purchase, handled by Apple; we receive only whether a subscription is active	Per Apple's privacy policy

When Resend processes data outside Singapore, we require protection comparable to the PDPA. Payments for training sessions happen directly between you and your trainer, outside FitMatch; we don't receive them.

We don't sell, rent or trade personal data. We disclose data to authorities only when the law requires it.

4. How long we keep it

Account and profile data: until you delete your account. A login that never finishes setting up (no profile after 7 days) is deleted automatically.
Requests, session plans, messages, training plans and activity: until either person deletes their account, when they're deleted. Shared workouts are also deleted when the client stops sharing or training together ends.
Certificate files sent for verification: until the trainer deletes the certification or their account.
Reports: kept for safety records after an account is deleted, with the deleted person's link removed.
Emails held by Resend: per Resend's retention policy.
On-device data: until you delete it in the app, delete your account, or remove the app.

5. Your choices and rights

See and correct your data: most of it is visible and editable in the app. For anything else, email support-fitmatch@zephystudio.com.
Withdraw consent / delete: delete your account in the app (Account → Delete account). This removes your data from our servers and erases the health data on your phone. Clients can also delete just their health answers in the app.
Access requests under the PDPA: email support-fitmatch@zephystudio.com. We reply within 30 days.
Emails: activity emails are part of the service. Push notifications, when available, can be turned off in iPhone Settings.

6. Security

Data travels encrypted (HTTPS). Our database enforces who can see each record at row level. Trainer photos are private and shown through links that expire after an hour. Health data on your phone uses iOS's strongest file protection and is excluded from iCloud backups.

7. Age

FitMatch is for people aged 18 and over. We don't knowingly collect data from anyone younger.

8. Changes

If we change this policy in a way that matters, we'll tell you in the app before the change applies.

9. Contact and Data Protection Officer

Vishal Sinha, Data Protection Officer, Zephy Studio, Singapore. Email: vishal@zephystudio.com

If you're not satisfied with our response, you can contact Singapore's Personal Data Protection Commission (www.pdpc.gov.sg).

Back to FitMatch · support-fitmatch@zephystudio.com