Privacy Policy

1. Who we are

Workout Studio is the training-app and program-marketplace service within the fitbox iq platform. Depending on how you use the service, your data controller may be the gym or coaching business that invited you, or the operator of Workout Studio itself. For privacy inquiries related to your specific account, contact your gym administrator or reach out to us directly.

2. Information we collect

We collect information you provide directly, data generated through your use of the service, and limited information from connected third-party services.

• Account and profile data: name, email address, phone number, profile photo, gym affiliation, and role (athlete, coach, admin).
• Training data: workouts assigned or logged, programs and programming tracks you follow, workout results, personal records (PRs), benchmark scores, one-rep-max estimates, and movement history.
• Wellness and health data: wellness check-in responses, pain reports, readiness scores, sleep metrics, heart-rate data, and strain/recovery data when you choose to connect a wearable device.
• Scheduling data: class bookings, personal-training appointments, attendance records, and availability preferences.
• Marketplace data: program subscriptions, listing purchases, payout details for vendors, and billing history.
• Device and usage data: app interactions, feature usage, crash logs, and diagnostic data needed to keep the service reliable.

3. How we use your information

• To provide, operate, and improve the Workout Studio training and coaching features.
• To generate personalized workout programming, progress tracking, and analytics.
• To process marketplace transactions and vendor payouts.
• To communicate with you about your account, sessions, bookings, and service updates.
• To maintain security, prevent fraud, and enforce our terms.
• To comply with legal obligations and respond to lawful requests.

4. Legal basis for processing

Where applicable data-protection law requires a legal basis, we process personal data on the following grounds:

• Performance of a contract: providing the training, scheduling, and marketplace services you sign up for.
• Consent: health and wellness data, wearable connections, and optional marketing communications. You can withdraw consent at any time through your account settings or by contacting us.
• Legitimate interests: fraud prevention, service security, analytics, and product improvement, balanced against your privacy rights.
• Legal obligation: compliance with tax, accounting, and other applicable laws.

5. Data sharing and subprocessors

We do not sell your personal information. We share data only in the following limited circumstances:

• With your gym or coach: if you are a member of a fitbox iq gym, your coaches and gym administrators can access training and attendance data needed to manage your programming and bookings.
• Service providers: we use cloud hosting, authentication, payment processing, analytics, and email-delivery services. These providers process data on our behalf under contractual protections.
• Wearable and integration partners: when you connect a device or service (for example, Whoop, Strava, or Fitbit), we exchange data with that provider according to the permissions you grant. You can disconnect integrations at any time.
• Legal requirements: we may disclose data if required by law, regulation, or legal process.

6. Data retention

We keep your personal information for as long as your account is active or as needed to provide the service. After account closure, we retain certain data for legitimate business purposes (such as fraud prevention, tax and accounting, and dispute resolution) and as required by applicable law. When retention periods expire, we securely delete or anonymize the data.

7. Your rights

Depending on your location, you may have rights regarding your personal data, including:

• The right to access, correct, or delete your personal information.
• The right to restrict or object to certain processing.
• The right to data portability.
• The right to withdraw consent where processing is based on consent.
• The right to lodge a complaint with a data-protection authority.

To exercise these rights, contact us using the details below. We will respond within the timeframes required by applicable law.

8. Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit, access controls, and regular security reviews. Our backend infrastructure is provided by Lovable Cloud, which operates on a managed platform with built-in security features. No system is completely secure, and we cannot guarantee absolute security.

9. Children's privacy

Workout Studio is not directed at children under the age of 16 (or the minimum age required by local law). We do not knowingly collect personal information from children without appropriate parental or guardian consent. If you believe we have collected data from a child without proper consent, please contact us so we can delete it.

10. International transfers

Your data may be stored and processed in countries other than your country of residence. Where required, we rely on appropriate safeguards—such as standard contractual clauses—to protect data transferred across borders.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact us

If you have questions, concerns, or requests about this Privacy Policy or how we handle your data, please contact us at:

Workout Studio / fitbox iq

Email: privacy@fitbox.iq