Privacy Policy.
Last updated 24 August 2026
What we do not collect
This is the short list, and it is the important one. We do not store your home address. We do not store your live location, or any location at all. We do not do radius search on people. We do not import your contacts. We strip GPS data out of every photo you upload before we store it.
The only places in HeyFitt are gyms. Everything about who can see you follows from which gyms you listed, and nothing else.
What we collect
Your email address, the year you were born, the gyms you list and the hours you train, what you are looking for in a partner, your bio and photos, your training logs and circuits, and the sessions you arrange. Nothing else is required to use HeyFitt.
Who can see it
Members of the gyms you have listed, and nobody else. Someone who has never listed a gym you train at cannot see that you exist. Your email address is never shown to another member.
Feedback other members leave about a session is never shown to its subject, never appears on a profile, and is never counted in anything public. It is read only by a person reviewing a report.
How long we keep it
Session feedback for 24 months. Invitation email addresses only until the invitation is accepted or expires, at most 90 days. Your training logs for as long as you keep them.
One carve-out, stated plainly. When a report is filed we keep a pseudonymised record of it — the reason and the outcome, with the people involved reduced to one-way hashes — for five years. That record survives deletion of the account, because a member who deletes after a bad experience would otherwise erase the reports they filed about someone else. Our lawful basis is our legitimate interest in keeping members safe and our legal obligation to retain moderation records.
Your rights
You can download everything we hold about you, and delete your account, from your profile. Deletion is total and symmetrical: your data and every interaction between you and anyone else, in both directions. Nobody is told you left. Apart from the pseudonymised moderation records above, nothing survives.
Contact
Write to PRIVACY CONTACT ADDRESS. Our data controller is LEGAL ENTITY NAME.