Privacy Notice

1. Personal data we collect

• Account data — name, email address and login credentials (or Google sign-in identifier).
• Profile and health inputs you provide — age, sex, height, weight, goal, activity level, training experience, available equipment, diet preference, allergies and travel patterns.
• Activity data — workouts completed, daily food, water and step logs, body measurements, weekly check-ins and course progress.
• Support messages — the content of any enquiry you send us.
• Technical data — IP address, device and browser identifiers, and usage/telemetry needed to run and secure the service.

2. Why we use it and our legal basis

• Creating your account, generating your plans and delivering the service — performance of a contract.
• Storing the health-related details you choose to enter so we can calculate targets and recommend workouts and meals — your explicit consent, which you may withdraw at any time by deleting the data or your account.
• Security, fraud prevention, debugging and improving the product — our legitimate interests in running a safe, reliable service.
• Customer support and service announcements — contract performance.
• Marketing emails, where offered — consent, withdrawable at any time via the unsubscribe link.
• Meeting accounting, tax and other legal duties — legal obligation.

3. Who we share data with

• Service providers and subprocessors — hosting, database, authentication, email and analytics providers acting on our instructions.
• Payment providers — Paystack Payments Limited, which processes card payments and recurring subscriptions in South African rand, and Paddle.com Market Limited, Merchant of Record for orders placed through Paddle, handling payment, subscription management, tax compliance and invoicing.
• Professional advisers — legal, accounting and audit advisers where necessary.
• Authorities — where we are required to disclose by law or to protect our legal rights.

We do not sell your personal data.

4. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

We keep account, profile and training data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 90 days, except where we must retain records longer for tax, accounting or legal reasons.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to receive a portable copy, and to withdraw consent at any time. You can also complain to your local data protection authority. Email us and we will respond within one month.

7. Security

We apply appropriate technical and organisational measures — encryption in transit, row-level access controls that restrict your records to your own account, and restricted administrative access — to protect personal data against loss, misuse and unauthorised access.

8. Cookies and similar technologies

We use strictly necessary cookies and local storage to keep you signed in and to keep the app secure. Any analytics or marketing cookies are only used with your consent, and you can manage or clear cookies at any time through your browser settings.

9. Contact

Questions or requests about this notice can be sent to RoamFit through the support contact shown in the app. Billing enquiries for South African rand payments are handled by RoamFit support; enquiries for orders placed through Paddle are handled by Paddle at paddle.net.