Trust
What access you give FitKliq - and the risks.
Specific rather than reassuring. If you are putting your members’ records into something, you should know exactly what it can reach and what could still go wrong.
The short version
FitKliq never receives your members’ data. When you set up, you give the FitKliq app on your own computer permission to create and manage a few files in your Google Drive. The company’s servers only ever see your licence. There is no path between the two, by design.
Permissions
Each one, and what it does not allow
Google shows these as a list of sentences. Here is what each actually means.
See and manage files created by this app
drive.file- What it allows
- Create and update your gym’s spreadsheets and folders in your Google Drive.
- What it does not
- See, open or touch any other file in your Drive. It is blind to everything it did not create.
Create and update Apps Script projects
script.projects- What it allows
- Create your gym’s backend script inside your own account at setup, and update it when you click Update backend.
- What it does not
- Run or read scripts belonging to anything else in your account.
Deploy that script
script.deployments- What it allows
- Publish the backend so your computers and phones can reach it.
- What it does not
- Deploy anything to anyone else’s account, or outside your gym’s project.
The second “Allow” - your gym’s backend
your own script- What it allows
- The script in your account to read and write your gym’s sheets and send data-free notification wake-ups.
- What it does not
- Any access by FitKliq. This consent is between you and your own script.
Website sign-in
openid email profile- What it allows
- Your FitKliq business account, your licence and your invoices.
- What it does not
- Any access to Gmail, Drive, Calendar or Contacts from this website.
The company
What FitKliq can and cannot do
We cannot
- Read your gym’s spreadsheet.
- Log in to your Google account.
- See a single member, payment or medical answer.
- See anything else in your Google Drive.
We can see
- Your account email and name from Google sign-in.
- Your gym name and billing details, for the invoice.
- Your licence status and which computer it is on.
- Which version of the app you are running.
The risks
What could actually go wrong
Every one of these is real. Each comes with the thing you can do about it.
Someone gets into your Google account
Whoever holds that account holds your gym’s data - FitKliq cannot help, because we have no copy.
- Use a dedicated Google account for the gym, not a personal inbox.
- Switch on 2-Step Verification and add a recovery phone.
- Use a long, unique password that is not shared on WhatsApp.
A computer or phone is lost or stolen
The device holds an encrypted local copy and a signed licence.
- Deactivate it in Settings → Devices straight away.
- Change the staff passwords it had access to.
- The local database is encrypted at rest and tied to that computer’s user account.
Sharing the Sheet with an accountant or partner
Editor access to your gym’s spreadsheet effectively means control of your gym’s backend.
- Share view-only, never editor.
- Never share the restricted (medical) sheet.
- Remove access the moment it is no longer needed.
Staff misuse
The people at your desk can see member contact details by the nature of the job.
- Give each person their own login with the smallest role that works.
- Check the audit log - it records who changed what.
- Change the super admin password if it has ever been shared.
Unofficial copies of the app
A tampered build could read everything your gym types.
- Download only from fitkliq.com.
- Check the installer's publisher reads AppSphere.
- Compare the published SHA-256 checksum if you are unsure.
FitKliq stops operating
Any software company can close. You should know what survives it.
- Your data stays in your own Google Sheet, readable without us.
- An escrowed perpetual-licence release is published if fitkliq.com stops operating.
- We do not promise continued development beyond that - see the terms.
Remove our access, any time
Go to your Google Account → Security → Third-party apps & services → FitKliq → Remove access. You do not need to ask us.
Afterwards your gym’s backend keeps running and your data stays exactly where it is. What stops is setup and backend updates - the app would need the permission again to change your gym’s script.
Found a security problem?
Tell us before you tell anyone else and we will work with you on it. We do not threaten people who report problems in good faith.
This page is general information about our service, not legal advice about yours. See also your data & the DPDP Act and our privacy policy.