Privacy Policy
Privacy Policy
Last updated: 2026-05-19
Myfitnessapp ("we", "us") connects guests with fitness hosts (trainers, gyms, studios). This Privacy Policy explains what personal information we collect, how we use it, and your rights.
Information We Collect
- Account information: name, email, phone number, date of birth, gender, password (hashed with Argon2).
- Profile information: bio, home city, preferred language and currency, profile photo, hobbies, interests.
- Booking and transaction data: booking history, messages with hosts, payment metadata (we do NOT store full card numbers — payments are processed by Stripe).
- Host information (if you list a service): business details, government-issued ID for verification, payout banking details (processed by Stripe Connect), session schedule.
- Health Information: see dedicated section below.
- Device and usage data: IP address, device type, pages visited, referral source. Used for fraud prevention and product improvement.
How We Use Your Information
- Deliver the booking platform (matching, payments, messaging, calendar).
- Verify host identity and qualifications for trust and safety.
- Process payments via Stripe and disburse host payouts via Stripe Connect.
- Send transactional notifications (booking confirmations, cancellations, payment receipts).
- Comply with legal obligations (tax reporting for hosts, court orders, regulatory requests).
Health Information
We collect a limited set of self-reported health disclosures during signup to match you with hosts who can safely serve your specific needs. This includes: heart attack history, current injuries, fractures or recent surgery, other medical conditions, and chronic pain.
How we store it: This data is encrypted at rest using industry-standard AES-256-GCM. It is never shared with third parties except under legal requirement (e.g. court order) or in the event of an insurance claim where disclosure is strictly limited to the insurer.
Who can see it: Only you (when viewing/editing your profile) and our backend systems (when computing matches). Platform administrators CANNOT view your health information in their normal admin tools.
Right to erasure: You may request deletion of your health profile at any time via account settings. This will affect your search results but does not delete historical booking snapshots, which are retained for insurance/liability reasons per our data retention policy.
Data retention: Active profile data is retained while your account is active. Booking snapshots that include your disclosure at booking time are retained for 7 years per statutory limitation periods for personal injury claims.
Sharing
We share information with:
- Hosts you book with: your name and contact details necessary to fulfil the session.
- Payment processors (Stripe): payment and payout information.
- Identity verification providers: only for hosts undergoing verification, and only the data the provider requires.
- Legal authorities: when required by court order, subpoena, or applicable law.
We never sell your personal data.
Your Rights
You can:
- Access, update, or download your data from your account settings.
- Delete your account (account self-deactivation begins a 30-day recovery window).
- Request erasure of your health profile.
- Withdraw consent for non-essential processing.
Email privacy@myfitnessapp.com to exercise any right we don't surface in-app.
Cookies and Tracking
We use session cookies for authentication and persistence of preferences (language, currency). We use no third-party advertising trackers.