Privacy Policy

1. Information We Collect and Access

Depending on how you use Resarv and R-Fit, we collect and process the following categories of personal and health information:

• Account & Profile Information: Full name, public username, email address, phone number, profile photo, account role (Trainee, Trainer, Match Official, or Service Provider), and whether you set your profile to Public or Private.
• Bookings, Payments & Rewards Information: Appointments and event tickets booked, service history, mobile money (such as M-Pesa) and card payment confirmation references, and your R-Fit Rewards points balance and discount vouchers. We do not store your credit/debit card numbers or mobile money PINs.
• Physical Profile & Fitness Logs: Height, weight, biological sex, date of birth, body measurements, workout session logs (exercises, sets, repetitions, and weights), daily water intake, meal and nutrition logs, and wellness notes you record in the app.
• Exercise Readiness Questionnaire (PAR-Q): Answers you voluntarily provide to our Physical Activity Readiness Questionnaire regarding your physical readiness for exercise (such as general questions about heart health, blood pressure, joint comfort, or dizziness) so your chosen fitness coach can tailor safe workout routines for you.
• Health Connect & Apple Health Data (R-Fit Trainee App Only): With your explicit permission, the R-Fit Trainee app reads the following data from Android Health Connect or Apple Health:
  • Daily Step Counts: Your daily step totals, used to automatically fill in your daily activity log, progress charts, and step challenges you choose to join.
  • Sleep Duration: Your nightly hours of sleep, used to automatically fill in your daily recovery log.
  • Background Health Updates: If you grant background access, the app periodically refreshes your step and sleep totals while the app is closed so your daily logs stay up to date without you having to open the app first.
• Communities, Social Activity & Messaging:
  • Communities & Connections: Public and private communities or groups you create or join, your group role (such as administrator, moderator, or member), invitation links, followers and people you follow, and accounts you choose to block or mute.
  • Posts, Reactions & Comments: Status updates, workout achievements, photos, and videos you share to your feed or community groups, as well as comments and emoji reactions.
  • Private & Group Messages: Direct messages and private group chats are protected with end-to-end encryption so that only you and the intended recipients can read them. The security keys that unlock your private messages remain securely on your device and are never accessible to us.
  • Challenges & Leaderboards: Fitness challenges you join, digital achievement badges you earn, and your ranking on activity leaderboards (such as steps, active minutes, or workout volume).
• Tournaments, Match Officiating & Player Registration:
  • Tournament Organizers: Organization details, venue locations, tournament categories, and match scoring rules.
  • Player Registrations & Doubles Teammate Matching: Tournament registrations, team names, and teammate invitations. If you register for a Doubles tournament category and need a partner, your display name, tournament category, and partner invite code are shown to other registered players searching for a doubles partner, or sent by email if you invite a specific partner directly.
  • Referees & Match Brackets: Email addresses or phone numbers used by tournament hosts to invite match officials (referees), court assignments, match schedules, live scores, and match results.
• Device Permissions (Camera, Location & Notifications):
  • Camera: Used only when you choose to take a profile photo, workout progress photo, meal photo, or community post photo inside the app.
  • Location: Used to help you find nearby fitness trainers, gyms, local fitness communities, and sporting tournaments or events in your area.
  • Notifications: Used to send you appointment reminders, tournament match updates, community alerts, and messages from your trainer.
• Device & Diagnostic Information: Basic technical information such as device type, operating system version, IP address, and crash reports so we can keep the app stable and secure.

2. How We Use Your Information

We use your information only for clear, legitimate purposes that directly support your experience on Resarv and R-Fit:

• Personal Fitness Tracking & Coaching: To display your workout, nutrition, water, step, and sleep progress, calculate challenge milestones and reward points, and—only when you grant permission—allow your chosen fitness coach to review your logs and customize your training plan.
• Community, Messaging & Member Safety: To deliver your encrypted messages, share your posts with the communities or followers you select, update leaderboards, honor your block and mute preferences, and review user-submitted reports of abusive behavior or spam.
• Tournament Hosting & Live Scoring: To register players and teams, pair doubles partners, coordinate match officials, schedule court times, and publish tournament brackets and scores.
• Appointments, Payments & Account Security: To manage bookings, process payments, send service updates, prevent fraud, fix technical bugs, and comply with legal obligations.

3. Health Connect Data & Limited Use Commitment

Our use of information received from Android Health Connect strictly complies with the Google Play Health Connect Permissions Policy, including its Limited Use requirements:

• Read-Only & Minimum Necessary Access: R-Fit only reads your daily step counts and sleep duration to display your activity and recovery logs, update step challenges you join, and award fitness points. R-Fit never writes, edits, or deletes data in Health Connect.
• Never Sold or Shared with Advertisers: Your Health Connect data (and any other health or fitness data in R-Fit) is never sold, rented, or transferred to advertising platforms, data brokers, or information resellers.
• Never Used for Ads, Credit, or Insurance: We never use your health or fitness data for personalized or interest-based advertising, nor to evaluate creditworthiness, lending eligibility, employment suitability, or insurance coverage.
• Strict Access Control: No other person—including any fitness trainer—can view your health logs or Health Connect data unless you explicitly grant them access in your in-app privacy settings, or unless required by law.

4. How Information Is Shared

We do not sell your personal or health information. Information is shared or displayed only in the following ways:

• Your Authorized Fitness Coach (Controlled by You): Your workout logs, readiness questionnaire answers, and step/sleep totals are visible to a fitness trainer only if you explicitly grant that trainer access under Settings > Privacy & access grants. If you remove a trainer’s access, their ability to view your information ends immediately.
• Communities & Leaderboards: When you join a community, challenge, or leaderboard, other members can only see your public profile (your display name, username, profile photo, badges, and challenge or leaderboard score). Your phone number, email address, and personal health questionnaire answers are never shown to other community members. If your profile is set to Private, other users must request and receive your approval before following your personal updates.
• Sporting Tournament Brackets: When you enter a tournament on Resarv, your player or team name, match schedule, assigned court, and match scores are displayed on the tournament’s public bracket and shared with the tournament organizers and assigned referees so the event can be run fairly.
• Partner Store Reward Redemptions: When you redeem R-Fit Rewards points using a discount voucher at a participating partner store, the merchant only sees your voucher code, the points redeemed, and your public username—never your email address, phone number, or health records.
• Service Providers & Legal Requirements: We work with trusted cloud hosting and licensed payment providers under strict confidentiality obligations solely to run the Platform, and we may disclose information if required by a court order or applicable law. Health Connect data is never shared with third-party marketing or analytics services.

5. Data Security and Retention

We take strong technical and organizational measures to keep your information safe:

• Encryption & Secure Storage: All data sent between your device and our servers—including health data, login sessions, and live messages—is encrypted in transit using modern industry-standard security (HTTPS) and stored securely with strict access controls. Private chat histories and offline workout logs on your phone are also stored in encrypted form on your device.
• Temporary Delivery for Encrypted Messages: Because direct messages and private group chats are end-to-end encrypted, we cannot read them. If a recipient is offline, encrypted messages are held temporarily only until they are delivered to the recipient’s device, and are then automatically removed from our delivery queue.
• Deleting Messages & Data Retention: You can delete your own posts in public communities within 30 days, and you can delete private group or direct messages within 60 minutes of sending them. We retain your account and fitness information only for as long as your account remains active or as needed to provide our services and meet legal requirements.

6. Your Privacy Rights and Account Deletion

Under the Kenya Data Protection Act, 2019, and international privacy laws, you have the right to access, correct, export, or delete your personal information, and to withdraw your consent at any time:

• Disconnect Health Connect: You can turn off step and sleep syncing at any time inside the R-Fit app under Settings > Health Connect, or remove permissions directly in your phone’s Health Connect settings.
• Manage Trainer Access: You can grant or revoke any trainer’s access to your fitness logs at any time under Settings > Privacy & access grants.
• Manage Social Privacy: You can switch your profile between Public and Private, block or mute other users, and leave any community or group at any time in the app.
• Delete Your Account and Data: You can request complete deletion of your Resarv / R-Fit account and all associated personal and health data (including your imported steps, sleep logs, workouts, photos, readiness questionnaire answers, and profile information) through the app settings or by emailing support@resarv.com with the subject line “Account & Data Deletion Request”. Once verified, your account is deactivated and your personal and health records are permanently deleted within 30 days, except where minimal payment records or completed tournament bracket results must be kept for legal or sporting record purposes.

7. Medical Disclaimer

Resarv and the R-Fit applications are designed solely for general fitness, activity tracking, sporting tournaments, and wellness coaching. R-Fit is not a medical device and does not diagnose, treat, cure, or prevent any disease or medical condition. The Physical Activity Readiness Questionnaire (PAR-Q) and step, sleep, or body measurement tracking features do not provide medical advice or clinical clearance. Always consult a doctor or qualified healthcare professional before starting any new exercise, tournament competition, or nutrition program.

8. Cookies on Our Website

On our website, Resarv uses cookies to keep you signed in, remember your preferences, and understand how visitors use the site so we can improve it. You can control or disable cookies at any time through your web browser settings.

9. Changes to This Policy & Contact Us

We may update this Privacy Policy from time to time. When we make important changes, we will update the “Effective Date” at the top of this page and notify you by email or through an in-app notice.

If you have any questions, privacy concerns, or requests regarding your personal data, please contact our Data Controller, APP RESARV LTD (Nairobi, Kenya), at: support@resarv.com.