Privacy Policy

This Privacy Policy explains how Fitnito, owned and operated by Wemble Development Corporation, collects, uses, and protects your information when you use our fitness business management platform.

1. Information We Collect

Information You Provide

• Account Information: Name, email address, phone number, business details
• Business Data: Client information, schedules, services, pricing, locations
• Payment Information: Billing details (processed securely by Stripe and other third-party payment processors)
• Communications: Messages you send to us for support or feedback

Information We Collect Automatically

• Usage Data: How you interact with our platform, features used, time spent
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: Session data, preferences, analytics information

2. How We Use Your Information

We use collected information to:

• Provide and maintain our fitness business management services
• Process bookings, payments, and client communications
• Send important account and service notifications
• Improve our platform and develop new features
• Provide customer support and respond to inquiries
• Ensure platform security and prevent fraud
• Comply with legal obligations and resolve disputes

3. Information Sharing and Disclosure

We do not sell your personal information. We may share information in these situations:

Service Providers

We work with trusted third-party providers for:

• Payment processing (primarily Stripe)
• Email delivery and communications
• Cloud hosting and data storage
• Analytics and performance monitoring

Legal Requirements

We may disclose information when required by law, to protect our rights, or in connection with legal proceedings.

Business Transfers

If Wemble Development Corporation or Fitnito is acquired or merged, user information may be transferred as part of that transaction.

4. Data Security

We implement industry-standard security measures to protect your information:

• SSL/TLS encryption for data transmission
• Encrypted data storage and regular security audits
• Access controls and authentication requirements
• Regular security updates and monitoring
• Employee training on data protection practices

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We keep your information only as long as we need it for the purposes in this policy. Each type of information has a retention period below. When a period ends, we remove the information from the Fitnito service and schedule it for deletion. It is hidden from the gym, its staff, and its members, and we no longer use it. Scheduled records are kept in restricted storage, with access limited to authorized Fitnito personnel, until our team deletes them on review or on request. We review scheduled records at least once a year and delete those we no longer need for legal, security, fraud prevention, or dispute purposes.

• Account and business data (your gym, members, schedules, bookings, passes): kept while your account is active. 90 days after you close your account, we remove it from the service and schedule it for deletion.
• Member profiles: kept while the member's gym keeps them on its account. The gym controls its member records. A member can ask their gym, or us, to remove their information.
• Payment and invoice records: kept at least 7 years to meet tax and accounting rules. Fitnito never stores card numbers; Stripe holds them under its own terms.
• Support messages: kept for 2 years after the conversation ends, then removed from the service and scheduled for deletion.
• Server and security logs: kept by our hosting and monitoring providers for a limited time (we aim for 90 days), longer only when needed to investigate abuse or a security issue.
• Usage analytics (page visits and events): deleted automatically after 13 months.
• Login sessions: cleared automatically after 180 days of inactivity.

We may keep specific information longer if the law requires it or to resolve a dispute. You can ask us to delete your information at any time by emailing [email protected]. We will delete it, except anything we must keep by law or to resolve a dispute, and confirm when it is done.

6. AI Agents and MCP Connections

You can connect AI tools such as Claude, ChatGPT, Muse, Grok, or Cursor to Fitnito using the Model Context Protocol (MCP). You connect by signing in to Fitnito and approving the connection (OAuth), and you choose which gyms the tool can use. You can allow full access or read only. Read only can look at those gyms and cannot book, email, or change anything.

What a connected tool can do:

• Gym owners and staff: the same everyday work as the Fitnito console and the in-app Assistant, such as viewing and changing the schedule, booking people, managing members, memberships and passes, updating booking-site settings, and issuing refunds. The tool is asked to confirm with you before it emails anyone, assigns or changes a paid plan, refunds, or cancels a membership or weekly series.
• Members: book or drop classes, see and manage family, see memberships and passes, pause or ask to cancel, open checkout, payment portal, or save-card links, update their profile, sign documents, and set email preferences.

A connected tool can only reach the gyms you approved, and only what your own login could already see or do. It never sees card numbers. Access tokens expire after 2 hours and are renewed while the connection stays in place.

Information is sent to the AI tool you connect so it can answer you. That tool's own privacy policy and terms apply to how it handles that information. Please review them before connecting.

To stop access:

• Gym owners and staff: go to Settings, then AI Agent Access, and disconnect the app. That app loses access for your login immediately, and Fitnito deletes that app's class-watch for your login.
• Members: disconnect Fitnito in the AI tool you used.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Export your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized content. You can control cookie settings through your browser, though some features may not function properly with cookies disabled.

9. Third-Party Services

Our platform may integrate with third-party services (payment processors, calendar apps, etc.). These services have their own privacy policies, and we encourage you to review them.

10. Who Can Use Fitnito

Fitnito is built for fitness businesses and their members. You must be an adult with the legal capacity to operate a business to run a gym account.

Member accounts are intended for people 13 and older. A parent or guardian can add a child to their family and book classes for them, and manages that child's information. Fitnito is not directed at children under 13, and we do not knowingly collect information directly from them. If you believe a child under 13 has given us information directly, contact [email protected] and we will delete it.

You must be 18 or older to connect an AI tool to Fitnito. Some AI tools set their own age requirements.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or through our platform. Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: