Privacy Policy

Fitplicity: The Gym Software is published on the App Store by Social Sips Inc. and operated by Debouillet Inc. This policy explains what the app collects, why, and the control you have over it. It applies to the iOS app and any companion web experience.

We collect only what the app needs to work:

• Account information (name, email address, gym or team affiliation, role)
• Membership, class booking and attendance records
• Workout programming, training logs and performance metrics
• Billing and membership payment information (processed by Stripe)
• Health and activity data you explicitly choose to share from Apple Health
• Device identifiers and basic analytics events

We do not sell your personal information, and we do not use it for third-party advertising or cross-app tracking.

Fitplicity uses your data to run gym operations — memberships, scheduling, programming and billing — and to show athletes and coaches accurate training and performance history.

Concretely, we process personal data to:

• Create and authenticate your account and keep it secure
• Deliver the features you ask for and save your work across devices
• Provide customer support and respond to your requests
• Process purchases, manage entitlements and prevent payment fraud
• Diagnose crashes, monitor abuse and keep the service reliable
• Send service messages such as receipts, security alerts and policy changes
• Comply with legal, tax and accounting obligations

We never use your content for behavioural advertising, we do not build advertising profiles, and we do not track you across other companies' apps or websites.

Fitplicity is built to collect the minimum needed to function. We do not collect:

• Card numbers or bank credentials (handled by Stripe and Apple)
• Precise background location
• Contacts or browsing history
• The advertising identifier (IDFA)

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract — operating your account and delivering the features you request
• Legitimate interests — securing the service, preventing abuse and improving reliability, balanced against your rights
• Consent — optional permissions such as notifications, camera, location and Apple Health, which you can withdraw at any time in iOS Settings
• Legal obligation — retaining tax, accounting and fraud records

Where Debouillet Inc. processes data on behalf of an organization that gave you access to the app, that organization is the controller and we act as its processor under a data processing agreement.

When you belong to a gym or team, that gym's staff can see your membership status, bookings, attendance, assigned programming and the training results you log — this is the core function of the product. Your Apple Health data is never shown to gym staff unless you explicitly share a metric with them. The gym is an independent controller of the membership records it holds, and its own policies apply alongside ours.

Athletes under the age of majority may only be enrolled by a parent, guardian or an authorized gym administrator with guardian consent on file. Guardians can request access to, correction of, or deletion of a minor's records at any time.

If you grant access, Fitplicity reads the specific Apple Health data types you approve, solely to display and analyze your training within the app. Health data is never sold, never used for advertising or marketing, and is never shared with third parties other than the processors required to sync it to your own account. You can revoke access in the Health app at any time.

In-app purchases and subscriptions are processed by Apple. We receive a purchase receipt and entitlement status; we never receive your payment card details. Card payments made outside the App Store are processed by Stripe, a PCI-DSS Level 1 provider. We store only the last four digits and card brand for your records.

We rely on a small set of vendors, each bound by a data processing agreement:

• Apple — App Store distribution, in-app purchases and push notifications
• Managed cloud platform — authentication, database and file storage
• Stripe — payment processing
• Resend — transactional email

If you enable notifications, Apple issues a push token we use only to deliver the alerts and reminders you configured; you can disable them in iOS Settings at any time. We also send transactional email — receipts, password resets, security notices and material policy changes. These are not marketing, and you cannot opt out of them while your account is active. Any product or marketing email is opt-in and has a one-click unsubscribe link.

We collect privacy-preserving product analytics — screen views, feature usage and crash reports — tied to a random installation identifier rather than to advertising IDs. We do not use the IDFA, we do not present an App Tracking Transparency prompt because we do not track you across other companies' apps or sites, and we do not sell or share data for cross-context behavioural advertising. Our companion web pages use no advertising cookies; we honour Global Privacy Control and Do Not Track signals where they are sent.

We keep your account data for as long as your account is active. When you delete your account, personal data is removed within 30 days. Specific schedules:

• Account and profile records — deleted within 30 days of account deletion
• Content you created — deleted within 30 days of account deletion, or immediately when you delete the item
• Support correspondence — up to 24 months so we can follow up on recurring issues
• Crash logs and security telemetry — up to 12 months
• Invoice, receipt and tax records — up to 7 years, as required by law
• Anonymised, aggregated statistics that can no longer identify you — retained indefinitely

Wherever you live, you can request access to your data, correction of it, export of it in a portable format, or its deletion. Residents of the EEA and UK have these rights under the GDPR; California residents have equivalent rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined by California law.

Email privacy@debouillet.com or use the account deletion page to exercise any of them. We respond within 30 days.

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas and other states with comprehensive privacy laws may request to know, access, correct, delete or port their personal data, and may opt out of targeted advertising, sale, or profiling with legal effects. We do not sell personal information, do not share it for cross-context behavioural advertising, and do not profile users in ways that produce legal effects — so there is nothing to opt out of, but you may still exercise every other right.

You may use an authorized agent, and we will never discriminate against you for exercising a right. If we deny a request, you can appeal by replying to our decision email within 30 days; we respond to appeals within 45 days and will tell you how to contact your state attorney general if you disagree.

If you are in the EEA or UK and believe we have mishandled your data, please contact privacy@debouillet.com first — we take complaints seriously. You also have the right to lodge a complaint with your local data protection authority or, in the UK, with the Information Commissioner's Office.

If a personal data breach occurs that is likely to affect you, we will notify affected users without undue delay, and notify supervisory authorities within 72 hours where the GDPR requires it, and within the deadlines set by applicable US state breach laws. Our notice will describe what happened, what data was involved and what you should do.

Fitplicity may link to sites and services we do not control, including the App Store, our providers' pages and your organization's own tools. This policy does not cover them; review their privacy notices before sharing data with them.

Fitplicity is not directed to children under 13, we do not knowingly collect personal information from them, and we do not serve ads or use child data for any secondary purpose. If you believe a child has provided us information, contact privacy@debouillet.com and we will delete it within 7 days and confirm in writing. Where a guardian has enrolled a minor, the guardian may access, correct or delete the minor's records at any time.

Data is encrypted in transit with TLS and at rest by our infrastructure providers. Access to production data is limited to the small number of staff who need it, and row-level security isolates each account's records. No system is perfectly secure, but we will notify affected users and regulators of any breach as required by law.

We operate from the United States, and our providers may process data in the United States and other countries. Where required, transfers rely on the European Commission's Standard Contractual Clauses.

We will post any change here and update the effective date. Material changes will also be announced in the app before they take effect.

Privacy questions and data requests: privacy@debouillet.com. Postal mail can be addressed to Social Sips Inc., c/o Debouillet Inc.