Privacy Policy

Last updated: November 2025

FitVire LLC ("FitVire," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website fitvire.com (the "Site") and use our services.

By accessing or using our Site, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not access or use our Site.

Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide when you:

Join our waitlist: Full name, email address, phone number (optional), user type (professional/client), specialty or fitness goals
Contact us: Name, email address, message content, and any other information you include
Create an account: Name, email, password, profile information
Make a payment: Payment card information (processed by Stripe), billing address
Use our services: Scheduling data, client/trainer communications, business information

Information Collected Automatically

When you visit our Site, we may automatically collect certain information, including:

Device information: Browser type, operating system, device identifiers
Usage data: Pages visited, time spent, click patterns, referring URLs
Location data: Approximate location based on IP address
Cookies and tracking technologies: See our Cookie Policy for details

How We Use Your Information

We use the information we collect for the following purposes:

Service delivery: To provide, maintain, and improve our platform and services
Communication: To send you updates, marketing materials (with your consent), and respond to inquiries
Account management: To manage your account, process transactions, and provide customer support
Analytics: To understand how users interact with our Site and improve user experience
Security: To detect, prevent, and address fraud, abuse, and security issues
Legal compliance: To comply with applicable laws, regulations, and legal processes
Business operations: To manage our business, including billing, accounting, and auditing

Legal Basis (GDPR): We process your personal data based on: (a) your consent, (b) performance of a contract, (c) compliance with legal obligations, or (d) our legitimate business interests, where such interests do not override your fundamental rights.

Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service providers: With third-party vendors who perform services on our behalf (e.g., hosting, payment processing, analytics, email delivery). These providers are contractually obligated to protect your information.
Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, where your information may be transferred as a business asset.
Legal requirements: When required by law, subpoena, court order, or government request, or to protect our rights, property, or safety.
With your consent: When you have given us explicit consent to share your information for a specific purpose.
Between users: Certain information (e.g., trainer profiles, availability) may be visible to other users as part of our platform functionality.

Third-Party Service Providers

Provider	Purpose	Data Shared
Stripe	Payment processing	Payment info, billing address
Vercel	Hosting & CDN	Usage data, IP address
Appwrite	Backend services	Account data, app data
Google Analytics	Website analytics	Usage data (anonymized)

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Active accounts: Data retained while your account is active
Inactive accounts: Data may be deleted after 2 years of inactivity
Waitlist data: Retained until you unsubscribe or request deletion
Transaction records: Retained for 7 years for legal/tax compliance
Marketing preferences: Retained until you withdraw consent

When data is no longer needed, we will securely delete or anonymize it.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

TLS/SSL encryption for data in transit
Encryption at rest for sensitive data
Secure authentication and access controls
Regular security assessments and penetration testing
Employee training on data protection
Incident response procedures

Important: While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

All Users

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal exceptions)
Opt-out: Unsubscribe from marketing communications at any time

European Economic Area (EEA) Residents - GDPR

Portability: Receive your data in a structured, machine-readable format
Restriction: Request restriction of processing in certain circumstances
Objection: Object to processing based on legitimate interests
Withdraw consent: Withdraw consent at any time (without affecting prior processing)
Lodge complaint: File a complaint with your local data protection authority

California Residents - CCPA/CPRA

Know: Request disclosure of personal information collected, used, and shared
Delete: Request deletion of personal information
Opt-out of sale: We do not sell personal information
Non-discrimination: We will not discriminate against you for exercising your rights

To exercise any of these rights, please contact us at privacy@fitvire.com. We will respond within 30 days (or as required by applicable law).

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and other countries where our service providers operate. These countries may have different data protection laws.

When we transfer data internationally, we implement appropriate safeguards such as:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data Processing Agreements with our service providers
Adequacy decisions where applicable

Children's Privacy

Our Site and services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@fitvire.com, and we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Posting the updated policy on our website with a new "Last updated" date
Sending you an email notification (for significant changes)
Displaying a prominent notice on our Site

We encourage you to review this Privacy Policy periodically. Your continued use of the Site after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Controller: FitVire LLC

Email: privacy@fitvire.com

Address: Colombo, Sri Lanka

For GDPR-related inquiries, you may also contact your local data protection authority.

By using FitVire, you acknowledge that you have read, understood, and agree to this Privacy Policy. For information about how we use cookies, please see our Cookie Policy.