Fitmore Privacy Policy

Account data: email address, name, password (encrypted), and account preferences

Profile information (instructors): professional qualifications, certifications, services offered, pricing, location, bio, photos, and videos

Payment information: processed securely through Stripe (we store only transaction records, not full card details)

Communication data: messages between users, booking requests, and customer support interactions

Device/usage data: IP address, user agent, pages viewed, and interaction logs for security and performance

Cookies/analytics: We use Plausible Analytics (cookieless) for usage statistics. Essential cookies for authentication and security.

Platform operations: create and manage accounts, facilitate connections between clients and instructors, process bookings and payments

Communications: send transactional emails (account verification, booking confirmations), platform updates, and optional marketing communications

Service improvement: analyze usage patterns, improve features, and enhance user experience

Security & fraud prevention: protect against abuse, verify identities, and maintain platform integrity

Legal compliance: meet regulatory requirements and respond to lawful requests

For marketing emails: We rely on your consent. You can unsubscribe anytime using the link in our emails.

For site operations: We rely on legitimate interests to ensure security, prevent abuse, and perform basic analytics.

Your rights: You can request access, correction, export, or deletion of your data at any time (see Section 9).

We don't sell personal data or share it for behavioral advertising. We use these vetted service providers to operate the platform:

• Authentication: Clerk (user authentication and account management)

• Payments: Stripe (payment processing and subscription billing)

• Email delivery: Resend (transactional and marketing emails)

• File storage: UploadThing (profile photos and videos)

• Mapping services: Mapbox (location search and display)

• Hosting & infrastructure: Vercel (website hosting)

• Database: Supabase (PostgreSQL database hosting)

• Caching: Upstash (Redis caching for performance)

• Analytics: Plausible (privacy-focused, cookieless analytics)

We contractually require all processors to protect your data and use it only according to our instructions.

Active account data: Retained while your account is active and for up to 90 days after closure

Profile information: Public profiles remain visible while accounts are active; deleted within 30 days of account closure

Transaction records: Retained for 7 years for tax and legal compliance

Marketing preferences: Retained until you unsubscribe

Security logs: Retained for up to 12 months (longer only if required for legal reasons)

After account deletion, we may retain anonymized data for analytics and minimum necessary records for legal compliance.

• Unsubscribe from marketing: Use the link in promotional emails (transactional emails cannot be disabled while account is active)

• Access your data: Request a copy of your personal data by emailing privacy@fitmore.co

• Correct your data: Update profile information directly in your account settings or email privacy@fitmore.co

• Export your data: Request a machine-readable export of your data at privacy@fitmore.co

• Delete your account: Close your account and request data deletion at privacy@fitmore.co

• EU/UK residents: Full GDPR rights apply (access, erasure, portability, objection, restriction)

• California residents: CCPA/CPRA rights apply (see Section 10 below)

We'll process your requests within 30 days. Some data may be retained for legal compliance even after account deletion.

What we collect: Account information, profile data, payment records, communications, and usage analytics

Why: Platform operations, payment processing, communications, service improvement, and security

How long: See Section 7 above

Your California rights: Access, deletion, correction, data portability, and opt-out of sales/sharing

No sale or sharing: We don't sell your personal information or share it for cross-context behavioral advertising