Fitmore Privacy Policy

Your privacy matters. Here's how we protect it.

Last updated: December 26, 2025

1. Who We Are

Fitmore B.V. (“Fitmore,” “we,” “us,” or “our”) is a technology company organized under the laws of the Netherlands, with its principal place of business in Amsterdam. We operate a fitness instructor marketplace platform (the “Platform”) available at fitmore.co, serving users in the United States, Canada (excluding Quebec), the Netherlands, the United Kingdom, Ireland, and Australia.

This Privacy Policy describes how we collect, use, disclose, and otherwise process your personal information in connection with your use of the Platform, and explains your rights and choices regarding your personal information.

2. Information We Collect

We collect personal information in the following categories:

2.1 Information You Provide

  • Account Information: Email address, name, password (stored in encrypted form), and account preferences.
  • Profile Information (Instructors): Professional qualifications, certifications, services offered, pricing, location (city), biographical description, photographs, and videos.
  • Payment Information: Payment details are processed securely through Stripe. We retain only transaction records and do not store complete credit card numbers.
  • Communications: Messages exchanged between users (including text content, timestamps, read receipts, and typing indicators), file attachments (images, PDFs, documents), booking requests, and customer support interactions.

2.2 Information Collected Automatically

  • Device and Usage Data: IP address, browser type and version, device identifiers, operating system, pages viewed, referring URLs, and interaction logs.
  • Cookies and Tracking Technologies: We use essential cookies for authentication and security, Google Analytics 4 for usage analytics, and Meta Pixel for advertising measurement. See Section 6 for details on cookie consent.

2.3 Identity Verification Data

If you choose to verify your identity, you will be redirected to our third-party provider, Stripe. Fitmore receives only a verification result (pass/fail), your verified legal name as shown on your identification, and metadata such as the verification date. We do not collect, store, or have access to your government identification images or facial scan data.

2.4 Sensitive Personal Information

Under California law (CCPA/CPRA), “sensitive personal information” includes certain categories of data subject to additional protections. The categories of sensitive personal information we may collect include:

  • Account credentials: Login credentials (email and password) used to access your account.
  • Precise geolocation (if enabled): With your consent, we may collect precise location data to help users find nearby instructors.

We use sensitive personal information only for purposes permitted under applicable law, such as providing the services you request and maintaining Platform security. We do not use or disclose sensitive personal information for purposes other than those specified in this Privacy Policy.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

  • Platform Operations: Creating and managing accounts, facilitating connections between clients and instructors, processing bookings and payments.
  • Communications: Sending transactional emails (account verification, booking confirmations, message notifications), Platform updates, browser push notifications (with your permission), and optional marketing communications.
  • Service Improvement: Analyzing usage patterns, improving features, and enhancing user experience.
  • Security and Fraud Prevention: Protecting against abuse, verifying identities, and maintaining Platform integrity.
  • Advertising Measurement: Measuring the effectiveness of our advertising campaigns through Meta Pixel.
  • Legal Compliance: Meeting regulatory requirements and responding to lawful requests from governmental authorities.

3.1 Public Nature of Instructor Profiles

If you create an Instructor account, you acknowledge that your profile information (name, photographs, biographical description, city, pricing, and services offered) is intended for public viewing. This information will be indexed by search engines (such as Google and Bing) and viewable by non-registered visitors. By creating an Instructor profile, you consent to this public disclosure as a core function of the Platform.

4. Legal Basis for Processing

We process your personal information on the following legal bases:

  • Contractual Necessity: Processing necessary to perform our contract with you (providing the Platform services).
  • Legitimate Interests: Processing necessary for our legitimate business interests (security, fraud prevention, service improvement, and basic analytics), where those interests are not overridden by your rights.
  • Consent: Processing based on your consent (marketing communications, optional cookies, precise geolocation). You may withdraw consent at any time.
  • Legal Obligations: Processing necessary to comply with applicable laws and regulations.

5. How We Share Your Information

We do not sell your personal information for monetary consideration. However, under California law (CCPA/CPRA), we may “share” limited data with advertising partners for cross-context behavioral advertising (see Section 10).

We use the following service providers to operate the Platform. Each provider processes data only according to our instructions and is contractually required to protect your information:

  • Authentication: Clerk (user authentication and account management)
  • Payments: Stripe (payment processing and subscription billing)
  • Email Delivery: Resend (transactional and marketing emails)
  • File Storage: UploadThing (profile photos, videos, and message attachments)
  • Real-Time Messaging: Pusher (instant message delivery, typing indicators, read receipts)
  • Mapping Services: Mapbox (location search and display)
  • Hosting: Vercel (website hosting)
  • Database: Supabase (PostgreSQL database hosting)
  • Caching: Upstash (Redis caching for performance)
  • Analytics: Google Analytics 4 (Google LLC) — website usage and visitor behavior tracking
  • Advertising Analytics: Meta Pixel (Meta Platforms, Inc.) — tracks page views and user actions to measure ad effectiveness. Data is hashed before transmission.

We may also disclose your information: (i) to comply with legal obligations; (ii) to protect and defend our rights or property; (iii) to prevent fraud or other illegal activity; (iv) to protect the personal safety of users or the public; or (v) in connection with a merger, acquisition, or sale of assets.

6. Cookies and Tracking Technologies

Essential Cookies: Required for Platform functionality (authentication, security, user preferences). These cannot be disabled.

Analytics Cookies: Google Analytics 4 collects anonymized usage data to help us understand how users interact with the Platform.

Advertising Cookies: Meta Pixel tracks conversions and user actions to measure advertising effectiveness.

Cookie Consent: For users in the European Union, we require explicit consent before loading non-essential cookies (analytics and advertising). For users in the United States, Canada, and Australia, analytics and advertising cookies load by default (opt-out model), but you may decline via our cookie banner or browser settings.

Global Privacy Control (GPC): We honor Global Privacy Control signals. If your browser sends a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of your personal information.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this Privacy Policy or as required by law:

  • Account Data: Retained while your account is active and for up to 90 days after account closure.
  • Profile Information: Public profiles remain visible while accounts are active; deleted within 30 days of account closure.
  • Messages and Attachments: Retained while the conversation exists; deleted within 30 days of both participants closing their accounts.
  • Transaction Records: Retained for 7 years for tax and legal compliance.
  • Marketing Preferences: Retained until you unsubscribe.
  • Security Logs: Retained for up to 12 months (longer only if required for legal proceedings).

After account deletion, we may retain anonymized data for analytics and minimum necessary records for legal compliance.

8. International Data Transfers

As a company based in the Netherlands using global cloud providers, your data may be processed in the European Union and the United States. If you are located in Australia, you acknowledge and consent to this transfer of your personal information to the Netherlands and the United States, which may have different data protection laws than Australia.

Data Transfer Mechanisms: We transfer data to service providers in the United States relying on the EU-U.S. Data Privacy Framework (DPF) for certified vendors, or Standard Contractual Clauses (SCCs) for vendors not certified under the DPF. These mechanisms ensure your data remains protected to GDPR standards.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Right to Know/Access: Request information about the categories and specific pieces of personal information we have collected about you in the preceding 12 months.
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Portability: Request a copy of your personal information in a portable, machine-readable format.
  • Right to Opt-Out of Sale/Sharing: Direct us not to sell or share your personal information for cross-context behavioral advertising.
  • Right to Limit Sensitive Information: Limit the use and disclosure of your sensitive personal information to what is necessary to provide the services.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

9.1 How to Exercise Your Rights

  • Unsubscribe from Marketing: Use the unsubscribe link in promotional emails.
  • Update Profile Information: Edit directly in your account settings.
  • Submit Privacy Requests: Email privacy@fitmore.co (Privacy Officer) with your request.
  • Opt-Out of Sale/Sharing: Click “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” in the footer of our website, or enable Global Privacy Control (GPC) in your browser.

We will respond to verifiable requests within 45 days (or 30 days for EU/UK residents). We may request additional information to verify your identity before processing your request.

9.2 EU/UK Residents

If you are a resident of the European Union or United Kingdom, you have additional rights under the GDPR, including the right to lodge a complaint with your local data protection authority. Our lead supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. California Privacy Notice

This section provides additional information for California residents pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA”).

10.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

  • Identifiers: Name, email address, IP address, account name.
  • Customer Records: Name, payment information (processed by Stripe).
  • Commercial Information: Transaction history, subscription records.
  • Internet Activity: Browsing history on our Platform, search history, interaction data.
  • Geolocation Data: City-level location (from IP address); precise location only with consent.
  • Professional Information: Certifications, qualifications, services offered (Instructors only).
  • Audio/Visual Information: Profile photos, videos.
  • Inferences: Preferences and characteristics derived from the above.

10.2 Sale and Sharing of Personal Information

We do not sell personal information for monetary consideration. However, we may “share” certain personal information with advertising partners for cross-context behavioral advertising, which constitutes “sharing” under the CCPA. Specifically, we share:

  • Identifiers: Hashed email addresses, IP addresses
  • Internet Activity: Page views, conversion events

This sharing is conducted with Meta Platforms, Inc. through Meta Pixel solely to measure the effectiveness of our advertising campaigns. Data is hashed before transmission.

10.3 Your California Rights

As a California resident, you have the following rights:

  • Right to Know: Request the categories and specific pieces of personal information we collected, the sources, purposes, and third parties with whom we shared it.
  • Right to Delete: Request deletion of your personal information.
  • Right to Correct: Request correction of inaccurate information.
  • Right to Opt-Out of Sale/Sharing: Direct us not to sell or share your personal information.
  • Right to Limit Sensitive Information: Limit the use of your sensitive personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

To exercise your right to opt-out of the sharing of your personal information, click the “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” link in the footer of our website, or enable Global Privacy Control (GPC) in your browser. We honor GPC signals as valid opt-out requests.

11. Children's Privacy

The Platform is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately at privacy@fitmore.co, and we will take steps to delete such information.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS) and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this page indicates when the Policy was last revised. We will notify you of material changes by posting a prominent notice on the Platform or by sending you an email. Your continued use of the Platform after any changes indicates your acceptance of the updated Privacy Policy.

Contact

Email: privacy@fitmore.co (Privacy Officer)

Postal address for privacy requests:
Fitmore B.V.
Van Breestraat 110H
1071ZT Amsterdam, NL

KvK: 98122614 • BTW: NL868365920B01

View Terms of ServiceView Cookie PolicyJoin Fitmore