Last updated: June 15, 2026
Fitup ("the Company") collects and uses personal information for the following purposes:
| Type | Items | Purpose |
|---|---|---|
| Required | Email or phone number, nickname, credentials (password/PIN) | Member identification and service delivery |
| Required | Date of birth | Age verification (e.g., confirming the user is 14 or older) and service operation (see Section 10) |
| Optional | Profile photo, phone number | Service convenience |
| Health (optional) | Height, weight, body composition, InBody results (score, BMR, body fat, etc.), fitness goals and activity level | Health and meal-recommendation features (entered manually or auto-filled via OCR of an InBody result sheet photo) |
| Diet (optional) | Meal goals (calories/macros), recommended meals, actual intake logs, food-search history, water intake | Meal recommendations and nutrition logging |
| Community (optional) | Post/comment content, attached images/videos, like/block/report records, chat messages | Community and messaging features |
| Automatic | Device information, app usage logs, push token (FCM), advertising identifier | Service improvement, analytics, notifications, and ad delivery (see Section 8) |
The Company stores health and body-composition data that you enter or that is extracted via optical character recognition (OCR) from an InBody result-sheet photo, together with your meal recommendations, actual intake, food-search, and water-intake logs, in your account to provide health-management features. Health and body-composition data may constitute sensitive information; the Company collects and uses it only where you have entered and consented to it in order to use the relevant feature, and uses it solely for the purpose of providing health-management features.
Health and diet information is shown only to you, and is deleted when you delete your account (see Section 11).
Posts, comments, images, and videos you publish in the community may be visible to other users. Attached image and video files are stored on Cloudflare R2.
The Company sends push notifications such as reservation, attendance, community, and meal reminders. Some notifications, including meal reminders, are sent only if you opt in, and can be turned off at any time in the app or device settings.
The Company does not provide personal information to third parties without your consent. To deliver the service, the Company uses the following subprocessors:
Personal information may otherwise be disclosed where you have consented in advance, where required by law, or to provide member information to the branch manager/instructor of your branch for service delivery.
The Company may display in-app advertisements through Google AdMob to operate the service.
To provide the service, personal information may be transferred to (processed and stored in) locations outside your country as set out below. By agreeing to this policy you consent to the international transfers below; you may refuse, but service use may then be restricted.
| Recipient | Country | Items transferred | Purpose | Retention period |
|---|---|---|---|---|
| Google LLC (Firebase) | United States, etc. | Account/authentication data, usage data, push token | Authentication, data storage, notifications | Until account deletion or termination of the processing agreement |
| Cloudflare, Inc. (R2) | United States, etc. | Community image and video files | File storage | Until post deletion or account deletion |
| Google LLC (AdMob) | United States, etc. | Advertising identifier, device information | In-app ad delivery | Per Google's policies |
This service is available only to users who are 14 years of age or older. The Company does not knowingly collect personal information from children under 14. The Company verifies age via date of birth at sign-up, and registration is restricted for anyone determined to be under 14. If the Company learns that it has collected personal information from a child under 14, it will delete such information without delay.
Deleted: Upon withdrawal, your profile, health/InBody/diet records, community posts/comments/attachments (including on R2), chats, notifications, and attendance/reservation/coupon data are deleted.
Retained: Accounting records such as payment and settlement may be retained for the periods below, in a separated/anonymized form, where retention is required by applicable law.
Reports of community content are handled as follows:
When the retention period expires or the processing purpose is achieved, the Company destroys the personal information without delay.
You may at any time request access to, correction of, deletion of, or suspension of processing of your personal information, via the in-app settings or customer support.
To seek redress for personal-information infringement, you may contact the following Korean authorities for dispute resolution or consultation:
Email: kywoon07@bearto.studio
This policy may change in line with laws and policy updates; changes will be announced within the app.
Β© 2026 BEARTO. All rights reserved.