Privacy Policy

Last updated: July 23, 2026

1. Who We Are

FitHQ is a gym operations platform operated by MOAA TECH Nigeria Limited (“MOAA TECH,” “we,” “us”), Suite 307, Plot 307 The Kings Plaza, Ahmadu Bello Way, Kado, Abuja, Nigeria. This policy explains how personal data is handled across the FitHQ website, admin console, and member portal (the “Service”), in line with the Nigeria Data Protection Act 2023 (NDPA).

2. Gyms and Members: Two Roles

For data about gym owners and staff (account details, contact information, billing records), MOAA TECH is the data controller. For data about gym members entered into FitHQ by a gym (names, phone numbers, email addresses, membership and payment history, check-in records), the gym is the data controller and MOAA TECH processes that data only to provide the Service. If you are a gym member with questions about your data, please contact your gym directly; we support gyms in honouring those requests.

3. What We Collect

We collect account and contact details you provide when registering or requesting a demo; member records that gyms enter or import; usage records generated by the Service such as check-ins, invoices, and message logs; and technical data such as device and log information needed for security and troubleshooting. Card payments are handled by our authorized payment processors; we do not store card numbers.

4. How We Use Data

We use personal data to operate the Service: managing memberships and check-ins, processing subscription and member payments, sending service messages such as receipts, reminders, and one-time passcodes, providing support, keeping the platform secure and preventing fraud, and meeting legal obligations. We do not sell personal data.

5. Sharing

We share data only with service providers needed to run FitHQ, such as payment processors, SMS and email delivery providers, and hosting infrastructure, each bound to use it only for that purpose; and with authorities where the law requires it. In a merger or sale of assets, data may transfer with the business subject to this policy.

6. Retention and Security

We keep personal data for as long as the relevant account is active and as required for legal, accounting, or dispute purposes, then delete or anonymize it. When a gym leaves FitHQ it may request an export of its member data within 30 days of termination. We protect data with encryption in transit, access controls, and audit logging.

7. Your Rights

Under the NDPA you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. Gym owners and staff can contact us directly; members should start with their gym, as the controller of their records.

8. Cookies

The Service uses essential cookies to keep you signed in and secure. We do not use third-party advertising cookies.

9. Changes and Contact

We may update this policy from time to time; material changes will be announced in the console or by email before they take effect. For any privacy question or request, contact hello@fithq.ng. See also our Terms of Service.