Effective date: April 16, 2026

1. Who We Are

Infitivy ("we", "us", or "our") is a global marketplace platform that connects fitness clients with personal trainers and wellness coaches. Our registered address and data controller details are available upon request at [email protected].

2. What Information We Collect

Account data: your full name, email address, password (stored as a bcrypt hash — never in plain text), and user role (Client or Trainer).

Profile data: for Trainers, this includes your bio, specialties, hourly rate, location (city and country), availability, certifications, and profile photo.

Location data: with your permission, we collect your approximate location (city-level) to show you nearby Trainers. You can use Infitivy without granting location access by entering your city manually. We do not track your precise GPS coordinates continuously or share your location with Trainers without your consent.

Transaction data: booking details, session dates, payment amounts, and Stripe payment intent IDs. We do not store full card numbers — Stripe handles all payment data under PCI-DSS Level 1 compliance.

Communication data: messages sent through our in-app AI coaching feature, reviews you write, and support tickets.

Usage data: device type, operating system, app version, session duration, feature interactions, and crash reports collected via anonymous analytics.

3. How We Use Your Information

We use your information to: (a) create and manage your account; (b) facilitate bookings and process payments; (c) display Trainer profiles to Clients; (d) send booking confirmations, reminders, and receipts; (e) power AI features such as trainer matching and goal coaching; (f) detect and prevent fraud, abuse, and unauthorised access; (g) comply with legal obligations including tax reporting and anti-money-laundering requirements; and (h) improve our product through aggregated, anonymised analytics.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal bases for processing are:

• Contract performance — processing necessary to provide you with the Infitivy service you signed up for.
• Legitimate interests — fraud prevention, platform security, and product improvement, balanced against your rights.
• Legal obligation — tax records, dispute resolution, and regulatory compliance.
• Consent — optional features such as marketing emails and session recording, which you may withdraw at any time.

5. How We Share Your Information

We do not sell your personal data. We share it only with: