Sign in

Privacy policy

ULTRAFIT · Denpasar · updated 6 October 2026

This policy covers the ULTRAFIT website (app.ultrafit.id) and the ULTRAFIT apps for iPhone and Android. It explains what we collect, why, who helps us run the service, and how to delete your account.

ULTRAFIT is run by CV Mitra Tangguh Besi, Denpasar, Bali, Indonesia. We are responsible for your data. Questions or requests go to contact@ultrafit.id.

What we collect

  • Account details. Your name, email address and phone number. You can also add a profile photo, a short bio, a date of birth and a division (men or women, for rankings).
  • Bookings and visits. The classes and events you book, cancel and attend, your check-ins, the packages and passes you hold, your FIRE points, challenges, goals, results and personal bests, the friends you add, and anything you post, cheer or comment in the feed. If you answer the welcome questions, your level and goals.
  • Payments. Top-ups, purchases and your wallet balance. When you pay by bank transfer we keep the amount, the reference and the transfer receipt photo you upload. We never see or store card numbers or bank logins.
  • Photos you upload. Your profile photo, transfer receipts and any photo you send as proof for a challenge.
  • Location, only if you turn on auto check-in. The app uses your location to check you in when you arrive at the gym. If you allow it in the background, your phone watches for the gym area and only then asks where you are. A location is saved only when it does something: a check-in, or a failed attempt on a day you have a class booked, so we can explain what went wrong. Away from the gym it is rounded to about 1 km. You can turn this off at any time in the app or in your phone's settings.
  • Notifications. If you allow notifications we store a push token for your phone and whether it is an iPhone or Android, so we can send booking and payment updates.
  • Camera and photos. The camera is used only to scan the check-in QR code; nothing is recorded. Photos you upload are ones you pick from your library.
  • How you use the app. Which days you open it, which screens you open and what you tap (for example "opened the shop" — never anything you type), and any error the app runs into, linked to your account, so we can see what works and fix what doesn't. Screens and taps are kept for 35 days, errors for four months.
  • Device basics on the website. The browser, platform, whether the site is installed on your home screen, and your notification setting. No IP address or location is stored for this.
  • Which advert brought you. If you arrive on the website from one of our adverts, we keep which advert it was with your account.
  • Before you have an account. On the booking page, a random number in a cookie lets us count how far visitors get: which steps they open, the answers to the four "which class is for me" questions, and whether they pick a class. No name, email or phone, and nothing you type. If you then make an account from that browser, it is linked to your account. Kept for six months. Your answers and language are also kept in a cookie on your own phone, so the page remembers you next time.
  • If you fill in the form in one of our adverts. The name, phone number, email and answers you send in the form on Instagram or Facebook, so a coach can message you on WhatsApp (or by email) about your first class. Only staff see it. If you then make an account, book, come to a class or pay, we tell Meta that the step happened, with the reference Meta gave your form (and your email and phone number only as scrambled codes), so our adverts reach people who will enjoy training with us. Kept for six months, then deleted; email contact@ultrafit.id to have it removed sooner.
  • If you design a gym in our gym builder (ULTRAFIT Gym Setup, rigasia.ultrafit.id). Building is anonymous: the layout stays in your browser. When you save it, ask for its pictures or its list, we keep your name, WhatsApp number, email, city and what describes you, with the layout, its pictures and any floor plan you upload, so we can send them to you and message you with a quote. We also keep a scrambled code of your IP address, only to limit how many layouts one connection can save in a day, and which advert brought you. This is separate from ULTRAFIT memberships: no account is made. Only staff see it. Kept for a year, or for as long as we are quoting or supplying your gym; email contact@ultrafit.id or message us to have it removed sooner.

Why we use it

  • To run your account: bookings, check-ins, packages, wallet, points and rewards.
  • To take payments, match your bank transfer to your order, and keep proper financial records.
  • To send you messages you need: booking confirmations, reminders, payment receipts and replies from staff.
  • To show your name and results on leaderboards and to friends, as far as your profile settings allow.
  • To see which of our adverts work, and who sees them (see Meta, below).
  • To keep the service safe and fix problems.

We do not sell your data. The apps contain no advertising and no advertising trackers.

Who helps us run it

We share data only with the services we need to run ULTRAFIT, and only what each one needs:

  • Supabase: our database, sign-in and file storage (servers in Sydney, Australia).
  • Vercel: hosts the website and its servers.
  • Expo, Apple and Google: deliver push notifications to your phone.
  • Resend: sends our emails.
  • Google: our bank's transfer alerts arrive in a Google mailbox, and we read them to match transfers to orders.
  • Vercel Analytics and, when switched on, the Meta Pixel: on the website only, to count page visits and measure our adverts. The Meta Pixel never runs on staff pages, and neither runs inside the phone apps.
  • Meta: when you sign up, book or pay on the website, our server tells Meta it happened, so we can measure our adverts. Your email and phone number are sent only as scrambled codes (hashed), with your browser's IP address and type. We keep the IP address and browser type only until your payment is confirmed, and never longer than a week. We may also upload members' emails and phone numbers, scrambled the same way, so Meta can show our adverts to members or leave them out; anyone who opted out of marketing emails is left out.

Your data may be stored or processed outside Indonesia by these providers. Staff at ULTRAFIT see member details only where their work needs it.

How long we keep it

We keep your account for as long as you have it. When you delete it we remove your personal details as described below. Payment and booking records are kept, without your name or contact details, because we are required to keep proper financial records.

Deleting your account

In the app: Profile → → Delete my account, at the bottom. On the web, or if you no longer have the app: app.ultrafit.id/api/mobile/account-deletion. You can also email contact@ultrafit.id.

Deleting removes your name, email, phone number, photos, bio, date of birth, friends, posts and comments, goals, push tokens, saved locations, usage history, the advert you came from and your visits from before you had an account, signs you out everywhere and stops you signing in again. Upcoming classes have to be cancelled first, and a payment the desk is still checking has to finish. Any remaining wallet balance and passes or class packs are forfeited; the app shows you what you would lose before you confirm. Records of money paid and classes attended stay, with your personal details removed.

Your choices and rights

  • See and change your details in the app or on the website.
  • Make your profile private, or unsubscribe from emails with the link in any email.
  • Turn off location or notifications at any time.
  • Opt out of the advert tracking above (the advert you came from, what we tell Meta, and the advert lists) by emailing contact@ultrafit.id.
  • Ask for a copy of your data, or for us to correct or delete it, by emailing contact@ultrafit.id.

Children

ULTRAFIT is not meant for children to use on their own. For kids' classes a parent or guardian holds the account and makes the bookings.

Changes

If we change this policy we will update the date at the top of this page, and tell you in the app if the change matters.

Terms · Back to the app