Privacy Policy
Last updated 14 September 2026
This Privacy Policy explains how AVEN.FIT collects, uses, and shares personal data. It is designed to meet the Singapore PDPA and the EU/UK GDPR. Creating an account is your informed agreement to this policy.
Who we are
AVEN.FIT operates the platform. For your own account, we are the organisation that decides why and how your data is processed. If a coach invites you, that coach also uses your training data to coach you. You can ask questions from your account or through the contact details published on the site.
Data we collect
Account data: email, password or Google sign-in, nickname, name, phone, country, language. Profile and health-related data: date of birth, sex, height, weight, personal records, workout logs, injuries, gym locations, photos you upload to extract a session. Usage and billing: login times, plan choice, Stripe payment references, support messages. We do not ask for government ID or payment card numbers ourselves — Stripe processes cards.
Why we use your data
We use your data to create and secure your account, send verification emails, run coaching and athlete features, personalise language, bill subscriptions, prevent abuse, and improve the product. Legal bases include performing our contract with you, your consent (especially for health and training data), and legitimate interests such as security and service operations.
Health and training data
Height, weight, sex, date of birth, injuries, and workout results can reveal health information. We process this only to provide training features you ask for. You can refuse by not creating an account, or later request deletion. Withdrawing consent may mean we can no longer offer the coaching product.
Who can see your data
Your linked coach can see the client profile, sessions, plans, and results needed to coach you. We use processors such as hosting, email delivery, and Stripe. We do not sell your personal data. We may disclose data if required by law or to protect users.
How long we keep data
We keep account and training history while your account is active. After closure or a valid deletion request, we delete or anonymise personal data unless a legal duty (for example tax or dispute records) requires a longer hold.
Your rights
Depending on where you live, you may request access, correction, deletion, a portable copy, or restriction of processing, and you may withdraw consent. You may complain to the Personal Data Protection Commission (Singapore) or your local EU/UK supervisory authority. Use account settings or contact us to exercise these rights.
Storage and transfers
Data may be stored or processed outside your country (for example by cloud hosting or Stripe). Where GDPR applies, we rely on appropriate safeguards such as standard contractual clauses.
Cookies
We use essential cookies for sign-in, language, and signup (invitation, referral, and legal acceptance). These are required for the service to work. We do not currently use advertising cookies.