Privacy policy
How GLOBAL IETA FIT (FIT) uses information in this website, its demo, and connected gym workspaces.
Updated 23 October 2026
Who operates FIT
FIT is a product of GLOBALIETA EDUCATE TECHNOLOGY PRIVATE LIMITED. This notice describes FIT-specific data handling. The Global IETA website and Central Identity service are separate connected services; their notices also apply when you visit or use them.
Information in your workspace
A connected gym workspace stores the information entered by its users: member contact details, memberships, attendance, class bookings, staff and branch records, invoices, recorded payments, and activity history. Optional wellness features store nutrition preferences and food exclusions, weight check-ins, goals, meal completion, and portion reviews. Only enter information you are authorized to share with your gym.
Why information is used and who can see it
FIT uses these records to run gym operations, display progress, maintain access permissions, and record workspace changes. Access depends on the gym role and member assignment: owners manage their workspace, trainers see assigned member information, and members see their own member experience. Your gym administers its staff and member access. AURA currently generates insights from business rules; an external AI model is not used for these insights.
Sign-in and service providers
IETA Central Identity verifies your account and supplies identity and session information to FIT. FIT uses Cloudflare hosting and database services to deliver and store the workspace. Hosting and security systems may process request and diagnostic information. Google Fonts is loaded from Google's servers. FINOS and Razorpay are used in the separate test billing flow; checkout and payment references are retained to verify test activation. Do not put real payment or member information into demo or sandbox records.
Public gym pages and enquiries
Gym owners choose the branding, contact details, pricing, images and staff profiles published in discovery. Public information can be indexed by search engines. Trial and membership enquiry forms share the submitted contact details and message with that gym after your consent; a request does not confirm a booking or payment. Your location is optional, used in this browser session to sort gyms by distance, and is not saved to FIT. Opening an external map, WhatsApp or Instagram shares request information with that service.
Telegram visit and enquiry alerts
The FIT platform operator receives public-website alerts through the existing IETA visitor-alert Telegram bot. Separate operator controls select page title, public URL and session landing page, safe campaign tags, public referrer and traffic source, event time, device/browser category, network IP address and approximate city, region and country when available. When the hosting network does not provide a city, FIT routes a signed, IP-only request through the existing IETA server at ieta.in to IPWHOIS (ipwhois.io / ipwho.is) over HTTPS, with direct lookup as a fallback, to obtain approximate city, region and country. Complete IP/location results may be cached on the IETA server for twelve hours, with partial results cached for thirty seconds. The lookup is enabled only with the approximate-location control; page addresses, contact details and account data are not sent to this provider. IPWHOIS processes the lookup under its own privacy practices. Location is network-based and may be inaccurate; precise device location is not requested for these alerts. Optional visitor history uses a random first-party cookie to report new/returning status, first and previous session times and total sessions; a new session starts after 30 minutes of inactivity. History expires after 90 inactive days, and clearing cookies starts a new visitor identity. An HMAC temporarily suppresses repeated alerts. Private pages, signed-in account visits, contact details, arbitrary query parameters, authentication secrets and fragments are excluded. Do Not Track and Global Privacy Control signals suppress visit alerts and visitor-cookie creation. Enquiry alerts contain only the published gym name, request type, public page address and selected event time; visitor names, contact information, message text and payment information stay out of Telegram alerts. Delivery records, including selected IP/location details, are removed on the next alert or settings request after seven days; anonymous history is cleaned up after 90 inactive days. Telegram retains delivered messages according to the recipient's actions and its own service terms and privacy practices. Contact support@globalieta.com about visitor-data requests.
Independent stores and setup requests
Gym catalog data, variants, SKUs, stock, add-on requests, onboarding contact details and test calculation quotes are stored within the gym. Store setup requests do not constitute payment-provider verification. FIT does not collect raw card credentials, government identity documents or bank account details in this release. Personal Recall has separate opt-in controls at /personal-recall; its memories are not automatically shared with gyms or used by the public gym guide.
Demo data and browser storage
The public demo starts with fictional records. Changes you make in the demo are saved in this browser, separate from a connected gym workspace. Theme preferences and installation caches can also remain on the device. Read Cookies & storage for details and removal options.
Access, correction, and deletion requests
Ask your gym administrator about access to or correction of gym-held records. For FIT privacy questions or deletion requests, contact support@globalieta.com and identify the gym and the type of request; do not send passwords or payment credentials. Identity and authorization may need to be checked. Clearing browser data removes local demo records but does not delete connected workspace or Central Identity records. Retention and deletion for connected records must be handled with the gym and Global IETA; this notice does not promise an automatic deletion schedule.