Privacy Policy
This Privacy Policy applies to the FitCity mobile application for Android and iOS, together with any related services operated by "NEXTBRAIN" MCHJ (collectively, the "Application"). "NEXTBRAIN" MCHJ is hereby referred to as the "Service Provider".
FitCity is the membership application of the FitCity network of sports clubs. It lets members manage their subscription, book and follow their training plan, contact their trainer, find club branches, and track their daily physical activity.
Information We Collect
Information you provide
- Phone number, used to create and sign in to your account
- First name, last name, date of birth and gender
- Profile photo, if you choose to upload one
- A facial photograph, if you choose to enable Face ID entry at club turnstiles. This is optional; you can use the club without it
- Messages you send to your trainer or to club support
- Feedback and ratings you submit
Information collected automatically
- Your device's Internet Protocol (IP) address
- Mobile operating system and device model
- Screens of the Application you visit, and the date and time of your visit
- Your approximate or precise location, only while you are using the branch map to find a nearby club, and only if you grant location permission. Location is not collected in the background
- Club visit history and subscription and payment records
Health and Fitness Data
With your explicit permission, the Application reads a limited set of health and fitness data from Health Connect on Android and from Apple Health (HealthKit) on iOS, in order to show you your own activity inside the Application.
| Data type | Access | Why it is needed |
|---|---|---|
| Steps | Read | To display your daily step count, your progress toward your daily step goal, and your weekly and monthly step history |
| Active calories burned | Read | To display the calories burned through activity on the activity card and in your activity statistics |
| Exercise sessions | Read | To calculate and display your daily active minutes |
| Hydration | Read and write | To display how much water you drank today and to save the amount you enter in the Application, so it stays in sync with your other health apps |
Health data stays on your device. The health and fitness data listed above is read on your device and displayed to you only. It is not transmitted to the Service Provider's servers, is not shared with any third party, is not sold, and is not used for advertising, marketing, or any form of profiling. Hydration is the only data type the Application writes, and it is written back to Health Connect or Apple Health on your own device.
Your daily step goal, your daily water goal and the water amounts you enter are stored locally on your device so that the Application works when a health provider is unavailable.
How to withdraw access to health data
You can revoke access at any time, without affecting the rest of the Application:
- Android: open the Health Connect app, go to App permissions, select FitCity, and turn off the permissions or remove all access
- iOS: open Settings, go to Health, then Data Access & Devices, select FitCity, and turn off the categories
When access is revoked, the Application stops reading health data immediately. Because health data is never uploaded, there is nothing for the Service Provider to delete on its side. Any hydration records the Application wrote remain in Health Connect or Apple Health, where you can delete them yourself. Uninstalling the Application removes the goals and water amounts stored locally on your device.
How We Use Your Information
- To create and maintain your account and your club membership
- To grant access to club branches and, if enabled, Face ID entry
- To show your training plan, schedule and trainer
- To process subscription payments and keep payment history
- To send you notifications about your subscription and training
- To respond to your messages, feedback and support requests
- To improve the Application using aggregated, anonymized statistics
Third Party Access
Only aggregated, anonymized data is periodically transmitted to external services to help the Service Provider improve the Application and its services. Health and fitness data is never included in such transmissions.
The Service Provider may disclose information you provided or that was automatically collected:
- as required by law, such as to comply with a subpoena or similar legal process;
- when the Service Provider believes in good faith that disclosure is necessary to protect its rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
- with trusted service providers that work on the Service Provider's behalf, do not have independent use of the information disclosed to them, and have agreed to adhere to the rules set out in this Privacy Policy.
Cookies and Tracking Technologies
The Application or its third-party SDKs may use cookies, SDKs, pixels and similar technologies to support functionality, analytics or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies. Health and fitness data is never used by these technologies.
Your Rights
You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider using the details in the "Contact Us" section below.
International Data Transfers
The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions or other legally recognized transfer mechanisms
- Your consent, where required and legally permitted
Opt-Out Rights
You can stop all further collection of information by uninstalling the Application. You can also turn off individual permissions (health, location, camera, microphone, notifications) in your device settings at any time; the rest of the Application will continue to work.
Uninstalling stops the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider. To request deletion of your account and personal data, contact the Service Provider using the details below.
Data Retention
- Health and fitness data: never stored on the Service Provider's servers. Goals and water amounts are stored on your device until you uninstall the Application or clear its data
- Account and profile data: retained for the duration of your membership plus 12 months, unless longer retention is required by law
- Facial photograph for Face ID entry: retained until you disable Face ID entry or delete your account
- Automatically collected data: retained for up to 24 months from collection, unless longer retention is required for legal compliance
- Aggregated and anonymized data: retained indefinitely, as it no longer identifies you
Children
The Application is not intended for children under 18 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly collect personally identifiable information from children and does not market the Application to them. If you have reason to believe that a child has provided personal information through the Application, please contact the Service Provider so that the necessary action can be taken. If you are under 18, your parent or guardian must provide consent on your behalf where permitted by law.
Security
The Service Provider is concerned about safeguarding the confidentiality of your information and provides physical, electronic and procedural safeguards to protect the information it processes and maintains. Data transmitted between the Application and the Service Provider's servers is encrypted in transit.
Data Breach Notification
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, information about the nature of the breach and the steps being taken to address it.
Changes
The Service Provider may update this Privacy Policy from time to time and will notify you of material changes by posting the updated Privacy Policy with a new effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect. Previous versions are available on request.
Your Consent
Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature — for example, by granting health permissions in Health Connect or Apple Health. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.
Contact Us
If you have any questions about this Privacy Policy or about how your data is handled, please contact the Service Provider:
- Website: fitcity.uz
This Privacy Policy is effective as of 2026-09-01.