Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other operational reasons. When we make material changes, we will take appropriate steps to notify you in accordance with the significance of the changes. When we update the Privacy Policy, we will post the revised version on the Site and update the “Last Updated” date at the top of this document. This ensures you have access to the most current version of our privacy practices. If required by applicable law, or if the changes are material and significantly affect your rights, we may provide additional notice. Such notice may be provided through email, a prominent website notice, or other appropriate means. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of the Site after any changes constitutes your acceptance of such changes, unless otherwise required by applicable law.

The personal information we collect depends on how you interact with the Services. The categories of personal information we may collect include:

Account Information

We may collect your name, email address, password stored in hashed form, and optional account identifier if you choose to sign in through certain third-party log-ins.

Profile Data

We may collect information you provide during onboarding or while using the Services, such as age, gender, height, weight, training experience, equipment access, goals, injury notes, and other related information you choose to provide.

Assessment Data

We may collect your scores, responses, observations, and related outputs generated through movement assessments and other features of the Services.

Workout Videos and Related Media

We may collect videos, images, audio, and related metadata that you upload or submit through the Services for coach review or related functionality.

Coach Feedback and Communications

We may collect written feedback, follow-up questions, customer support communications, and issue reports or escalation submissions.

Payment and Transaction Data

Payment card information is entered directly with our payment processor and is not stored on our servers. We may retain limited payment-related data such as customer identifiers, subscription status, plan details, billing history, payment confirmations, and account credits or balances.

Usage, Device, and Log Data

We may automatically collect information about your interaction with the Services, such as pages viewed, features used, actions taken, timestamps, referral URLs, browser type, operating system, device type, device identifiers, IP address, and approximate location derived from IP address.

Inferences and Personalization Data

We may generate or infer information based on the data described above, including movement insights, recommendations, preferences, account settings, service optimization data, and internal fraud or security signals.

Sensitive Information

Some information you provide, such as injury notes, training limitations, body metrics, and workout videos, may be sensitive in nature. We process such information only as reasonably necessary to provide, secure, and improve the Services, communicate with you, comply with law, and protect our rights and the rights of others.

We and our service providers may automatically collect certain information through cookies, pixels, SDKs, local storage, server logs, and similar technologies. These technologies help us operate the Services, authenticate users, remember preferences, measure usage, improve performance, and detect fraud or misuse. Depending on how the Services are configured, these technologies may include:

• Strictly necessary technologies required for core functionality
• Analytics technologies that help us understand how users interact with the Services
• Functional technologies that help us remember settings and improve user experience

You may be able to control certain cookies through your browser settings or other tools made available through the Services. Blocking certain technologies may affect the availability or functionality of some features. The information automatically collected may include device identifiers, IP addresses, browser types, operating system details, referring URLs, clickstream data, pages viewed, time spent on pages, links clicked, and other usage statistics. This information helps us understand how users access and interact with our Services, identify technical issues, improve security, and enhance overall user experience. Mobile applications may also collect device-specific information such as unique device identifiers, mobile network information, and location data if you have granted permission. You can manage these permissions through your device settings at any time.

We may use your personal information for the following purposes:

• To provide, operate, maintain, support, and improve the Services;
• To manage accounts, subscriptions, transactions, and billing;
• To match you with an appropriate coach based on your submitted information, goals, and service needs;
• To generate movement insights, summaries, and related outputs;
• To communicate with you regarding your account, support requests, service updates, and administrative matters;
• To monitor, detect, investigate, and prevent fraud, abuse, unauthorized access, and violations of our terms or policies;
• To conduct internal analytics, testing, quality assurance, debugging, forecasting, and product development;
• To create aggregated or de-identified information for lawful business purposes, provided such information is not reasonably used to identify you;
• To comply with applicable law, legal process, regulatory requirements, and internal recordkeeping obligations;
• To protect the rights, property, safety, and security of SPYKFIT, our users, and others.

We do not sell your personal information for monetary consideration. We do not use your personal information for cross-context behavioral advertising or targeted advertising unless we expressly disclose that practice and provide any rights required by applicable law.

We may use artificial intelligence and machine learning tools to support certain features of the Services, such as generating movement insights, summarizing submitted information, supporting coach workflows, and personalizing aspects of the user experience. When we use third-party artificial intelligence (“AI”) service providers, we seek to limit the information shared with those providers to what is reasonably necessary to provide the applicable feature. Unless expressly stated otherwise, we do not provide your name, email address, or payment card information to third-party AI model providers for AI processing. AI-generated outputs may be probabilistic and may not always be accurate, complete, or appropriate. AI-generated outputs are intended to support, and not replace, human judgment, coaching judgment, or appropriate professional advice. We use reasonable administrative, technical, and contractual measures designed to govern our use of AI-enabled tools, which may include vendor diligence, access controls, quality review, output monitoring, abuse monitoring, and periodic evaluation of AI-supported features.

We may disclose personal information to the following categories of recipients as reasonably necessary for the purposes described in this Privacy Policy:

• Service providers and processors, including hosting providers, database providers, payment processors, analytics providers, authentication providers, customer support providers, and AI service providers;
• Coaches and internal personnel authorized to access information in connection with delivering the Services;
• Professional advisers, such as lawyers, auditors, insurers, and accountants;
• Government authorities, regulators, courts, law enforcement, or other third parties when required by law or reasonably necessary to protect rights, safety, and security;
• Successors, counterparties, and transaction participants in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets.

Our current service providers may include payment processors, cloud hosting providers, database providers, application hosting providers, AI tools providers, and optional authentication providers. These providers process personal information on our behalf subject to contractual and operational safeguards as applicable. We may also disclose personal information when necessary to comply with legal obligations, enforce our terms, protect our rights and property, or safeguard the rights and safety of others. This includes exchanging information with other companies for fraud protection purposes.

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to maintain your account, provide the Services, resolve disputes, enforce our agreements, prevent fraud and abuse, and comply with legal, tax, accounting, and recordkeeping obligations. The criteria used to determine retention periods may include the nature of the information, the purpose for which it was collected, the sensitivity of the information, applicable legal requirements, and operational needs. We may also retain information in backup systems for a limited period consistent with our backup, disaster recovery, and record retention practices. As a general matter:

• Account and profile information may be retained while your account remains active;
• Workout videos and reviews may be retained during the life of your account so you can access prior feedback;
• Payment-related records may be retained as needed for tax, accounting, and compliance purposes;
• If you request deletion of your account, we will delete or de-identify your personal information within a commercially reasonable period, except where retention is required or permitted by law or reasonably necessary for legal, security, backup, or operational purposes.

Depending on where you live, you may have some or all of the following rights, subject to applicable exceptions and limitations:

• The right to request access to the personal information we hold about you;
• The right to request correction of inaccurate personal information;
• The right to request deletion of personal information;
• The right to request a portable copy of certain personal information;
• The right, in some circumstances, to restrict or object to certain processing;
• The right to withdraw consent where we rely on consent for processing;
• The right to appeal a denial of your request where required by applicable law.

We will not discriminate against you for exercising your privacy rights. To exercise your rights, please contact us using the contact information below. We may need to verify your identity before responding to your request. You may also designate an authorized agent to act on your behalf where permitted by applicable law, subject to verification requirements. We will respond within the time required by applicable law, subject to any lawful extension.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. While we use commercially acceptable means to protect your personal information, we cannot ensure or warrant the security of any information you transmit to us. You should not use unsecured channels to send us sensitive or confidential information. If we are required by applicable law to notify you of a security incident involving your personal information, we will do so in accordance with applicable law. In the event of a data breach, we will notify affected individuals through email or other appropriate means, providing details about the breach nature, information types involved, and remedial steps. We will also report incidents to relevant regulatory authorities when required by data protection laws.

The Services are not intended for children under 18, and we do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18 without legally sufficient authorization, we will take commercially reasonable steps to delete that information. Parents or legal guardians who believe their child under 18 has provided personal information to us may contact us to request deletion of that information. We will verify the identity of the requesting party and promptly delete any verified child information from our systems.

We are committed to protecting your privacy and ensuring the security of your personal information. Our team is available to address any concerns regarding how we collect, use, and protect your data. Whether you wish to access your information, request corrections, or exercise your right to deletion, we will respond promptly in accordance with applicable privacy laws. For security incidents, please use the same contact email with the subject line “Security Incident” to ensure priority handling. We take all security concerns seriously and investigate any reported issues thoroughly. If you have any questions about this Privacy Policy or would like to exercise your privacy rights, please contact us at: support@spykfit.com.