Privacy Policy
Last updated 22 July 2026
Two different relationships. If you run a gym on FitRaj, we handle your
account data directly. If you're a member of a gym that uses FitRaj, your gym decides
what to record about you — we hold and process that on their behalf. Section 2 explains which
applies to you.
1. Who we are
FitRaj is operated by PSTK Holdings LLC, a Michigan limited liability company.
Contact us about privacy at
privacy@pstkholdings.com.
2. Which role we play
3. What we collect
- Account details — name, email address, and a password (stored only as a hash, never in readable form).
- Gym records — your gym's locations, staff, membership tiers, classes and schedules, and who belongs to which.
- Training data you enter — workouts and sets, body measurements, nutrition entries, goals and programs.
- If you sign in with Google or Microsoft — your name, email address and profile picture from that provider. We never receive your password.
- Technical data — IP address and basic request logs, kept for security and troubleshooting.
We do not ask for payment card numbers. When paid plans begin, card details will be handled by
our payment processor and will not be stored on FitRaj's servers.
4. What we don't do
- We do not sell your personal data, or your members' data, to anyone.
- We do not use your training data to target advertising at you.
- We do not share one gym's data with another gym. Each gym's data is isolated.
5. Who we share it with
Only the service providers needed to run FitRaj:
- Hosting and infrastructure — servers located in the United States.
- Email delivery — to send things like password resets and notifications.
- Google / Microsoft — only if you choose to sign in with them.
- A payment processor — once paid plans begin.
We may also disclose data if we are legally required to, or to protect the safety of people
using FitRaj.
AI coaching
FitRaj includes an optional AI coaching feature. It is currently switched off, and no
training data is sent to any AI provider. If it is ever enabled for your account, this
policy will be updated first to say what is sent and to whom.
6. How long we keep it
- While your account is active — we keep your data so the service works.
- If you leave a gym — that gym's membership records for you are deleted. Training data recorded under that gym is deleted once you have no remaining membership with them. Data you own personally, and any membership at another gym, is untouched.
- If you delete your account — your training data is deleted across every gym, your memberships are anonymised, and the account itself is removed.
- If a gym closes its FitRaj account — that gym's operational data and the training data recorded under it are deleted. Member accounts themselves are not deleted, because they belong to the person and may be in use at another gym.
- Financial records — payment records are retained for roughly seven years to meet tax obligations. These are kept in a form that carries no personal identifying information: once an account is deleted, what remains is an amount and a date with no name, email or route back to a person.
- Backups — routine backups are overwritten on their normal rotation, so deleted data clears from them in the ordinary course.
7. Your rights
You can ask us to:
- Give you a copy of your data, or export it.
- Correct anything inaccurate.
- Delete your data, subject to the financial-records retention above.
Email privacy@pstkholdings.com. If you're a gym
member, your gym may be able to action it faster — but you're welcome to come to us and we'll
coordinate with them. Depending on where you live you may also have the right to complain to
a data protection authority.
8. Security
- All traffic is encrypted in transit (HTTPS).
- Passwords are hashed. Sensitive credentials are encrypted at rest.
- Each gym is isolated: sessions are scoped to a single host, and queries are restricted to the gym they belong to.
No system is perfectly secure, but we will tell you promptly if a breach affects your data.
9. Children
FitRaj is not designed for children under 16. Where a gym enrols a minor, that gym is
responsible for obtaining whatever parental consent local law requires.
10. Where your data is held
FitRaj is hosted in the United States. If you use it from elsewhere, your data is transferred
to and processed in the US.
11. Changes
If we change this policy we'll update the date above, and we'll tell you directly if the change
materially affects you.
12. Contact
PSTK Holdings LLC — privacy@pstkholdings.com
← Back to FitRaj