Privacy Policy
Last updated: 24 October 2026
This Privacy Policy explains how Ofeasy (Pvt) Ltd ("Ofeasy", "we", "us") collects, uses and protects your personal data when you use the Fitility mobile application, the website at fitility.ofeasy.lk and related services (together, "Fitility").
1. Who we are
Fitility is a product of Ofeasy (Pvt) Ltd, a company based in Sri Lanka. Ofeasy is the controller of the personal data described in this policy. You can contact us at info@ofeasy.lk.
2. Data we collect
Account data. Your name and email address. Fitility has no passwords: you sign in with a one-time code we email you, or with Google. If you sign in with Google, we receive your name, email address, Google account ID and profile picture from Google.
Profile data. Details you choose to add to your profile, such as title, first and last name, gender, date of birth, nationality, identification number, contact details and your role (member or instructor).
Fitness and health data. Goals, body measurements and targets, workout plans and workout logs, diet plans, meal and nutrition logs, progress reviews and, if you are linked to a gym, attendance records.
Device data. A push notification token from Firebase Cloud Messaging so we can send you reminders and alerts, and basic technical information needed to keep the service running.
Crash and diagnostic data. If the app crashes or hits an error, Firebase Crashlytics sends us a crash report: the error details, app version, device model, operating system version, an app installation identifier and your Fitility user ID. We use it only to find and fix problems. It does not include your email address or your fitness and health data.
Activity data. Records of actions taken in your account (for example creating or updating a plan), used for security and troubleshooting.
Website data. If you join our waitlist or register gym interest on our website, we collect the details you submit, such as your name, email address, gym name and city.
3. How we use your data
- To create and secure your account and let you sign in, including with Google.
- To provide Fitility's features: tracking goals, measurements, workouts and diet.
- To let instructors and gyms you choose to connect with see and manage the plans and progress you share with them.
- To send you notifications you have enabled, such as reminders.
- To respond to your requests and send service-related emails.
- To maintain, secure and improve Fitility, and to comply with legal obligations.
We process your data on the basis of your consent, to perform our contract with you, and for our legitimate interests in running a secure and reliable service. Health-related data is processed only to provide the features you use.
4. Google user data
When you choose "Continue with Google", we request only your basic profile and email address. We use this data solely to create your Fitility account and sign you in. We do not use Google user data for advertising, we do not sell it, and we do not share it with third parties except as needed to provide the service or as required by law. Fitility's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Sharing your data
We do not sell your personal data. We share it only with:
- Instructors and gyms you connect with, limited to the plans, goals and progress needed for them to work with you.
- Service providers that help us run Fitility, such as Google (Google Sign-In, Firebase Cloud Messaging and Firebase Crashlytics), hosting providers and email delivery services. They may process data only on our instructions.
- Authorities, when required by law or to protect the rights and safety of our users and others.
6. Data storage and security
Your data is stored on secured servers used by Ofeasy and its hosting providers. We use encrypted connections (HTTPS), short-lived one-time sign-in codes and access controls to protect it. No system is completely secure, but we work to protect your data and will notify you and the relevant authorities of a breach where required by law.
7. How long we keep your data
We keep your data for as long as your account is active. When you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep certain records to meet legal obligations or resolve disputes.
8. Your rights
Under the Personal Data Protection Act No. 9 of 2022 of Sri Lanka and other applicable laws, you can:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your account and personal data.
- Withdraw consent, for example by turning off notifications or disconnecting Google sign-in.
- Object to or restrict certain processing.
You can delete your account and its data at any time in the app, under You → Security → Delete account. To exercise any of the other rights, or to delete your account without the app, email info@ofeasy.lk from the email address linked to your account. We will respond within 30 days.
9. Children
Fitility is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and update the date above. If the changes are significant, we will notify you in the app or by email.
11. Contact us
Ofeasy (Pvt) Ltd, Sri Lanka
Email: info@ofeasy.lk