Data Protection & DPDP Act Compliance

Our Commitment

Fit Future Program ("FFP", "we", "us", "our") conducts structured physical, anthropometric and neuro-cognitive fitness assessments in partnership with schools, sports academies, clubs and other sporting institutions (each a "Partner Institution"). Because our work often involves the personal data of children and young athletes, we treat data protection as a core operating principle — not a formality.

This page explains how we handle personal data in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), notified by the Ministry of Electronics and Information Technology (MeitY) on 13 November 2025.

1. Legal Framework & Timeline

The DPDP Act governs how organisations ("Data Fiduciaries") process the personal data of individuals ("Data Principals") in India. As a Data Fiduciary, Fit Future Program is committed to meeting its obligations under this framework, regardless of whether an assessment is conducted through a school, a sports academy, or a club.

2. What Personal Data We Collect

• Anthropometric data — height, weight, BMI, and relevant growth indicators
• Physical performance data — speed, power, endurance and flexibility test results
• Neuro-cognitive data — reaction time, decision-making and response-accuracy metrics
• Institutional data — Partner Institution name, and grade/class/section (for school participants) or squad/age-group (for academy or club participants)
• Contact information — limited parent/guardian or, for adult participants, direct contact details, used only for consent and reporting

We do not collect financial information, health records beyond what is necessary for safe assessment administration, or any data unrelated to the stated purpose of the assessment.

3. Why We Collect This Data

• Conducting structured physical and neuro-cognitive performance assessments
• Generating individual participant reports and institution-level cohort analytics
• Identifying participants who may require additional observation or support
• Identifying participants demonstrating promising physical or cognitive characteristics for further evaluation
• Supporting coaching, PE or performance staff with actionable, data-driven insights
• Tracking a participant's development over time through periodic re-assessment

We do not use participant data for any purpose beyond what has been communicated to the Partner Institution and the participant (or their parent/guardian) at the point of consent.

4. Consent — Especially for Children's Data

Under Section 9 of the DPDP Act and Rule 10 of the DPDP Rules, organisations processing a child's personal data must obtain verifiable consent from a parent or lawful guardian before processing, and are prohibited from any processing likely to cause harm to the child, including behavioural tracking or targeted advertising.

• No participant under 18 is assessed without the Partner Institution first obtaining consent from a parent/guardian, through our consent process.
• Where a participant is 18 or older — as may be the case at some academies and clubs — consent is provided directly by the participant.
• Consent can be withdrawn at any time by contacting the Partner Institution or Fit Future Program.
• We do not track, monitor, profile, or serve targeted advertising to any child whose data we process.

5. How We Protect Your Data

• Restricted, role-based access to participant data within our team and technology systems
• Secure storage of assessment data with access controls
• Purpose-limited handling — data collected for assessment is not repurposed without fresh consent
• Contractual data-protection obligations placed on any third-party technology or service vendor we work with

6. Data Sharing & Disclosure

• Participant data is shared only with the relevant Partner Institution for reporting, cohort analysis, and development planning
• We do not sell participant data, and never share it with third parties for promotional or marketing purposes
• Data may be shared with technology or service vendors strictly to deliver the assessment service, under confidentiality obligations
• We do not transfer personal data outside India except where necessary for service delivery, consistent with applicable law

7. Your Rights as a Data Principal

• Right to Access — request a summary of the personal data we hold and how it's processed
• Right to Correction — request correction of inaccurate or incomplete data
• Right to Erasure — request deletion of data no longer necessary for its original purpose
• Right to Withdraw Consent — at any time, without affecting processing already carried out
• Right to Grievance Redressal — raise concerns and receive a timely response