Privacy Policy

• Account and profile information: email address, display name, avatar, authentication identifiers, sign-in provider, weekly activity goal, account status, and role.
• Fitness information: with device permission, daily step totals, workout duration, workout end timestamps, source record identifiers, verification timestamps, and FitPoints eligibility derived from that activity. FitPerk stores normalized verification records, not complete copies of the underlying Apple Health or Health Connect records.
• Rewards and service activity: FitPoints transactions, challenge progress, claimed rewards, redemption codes and status, merchant interactions, suspected abuse signals, and account restrictions.
• Merchant information: business and contact details, addresses, websites, staff assignments, listings, rewards, membership status, agreement acceptance, and Stripe customer, subscription, and invoice-period identifiers.
• Technical and support information: device platform, app version, privacy-minimized error and health-sync events, support messages, email-delivery and opt-out records, and security events. We do not use an advertising ID.

FitPerk does not intentionally read or collect heart rate, precise workout routes, clinical records, medications, reproductive information, or health categories unrelated to the FitPoints features. We do not write information to Apple Health or Health Connect.

We receive information from you, your use of FitPerk, Apple Health or Health Connect after you grant permission, authentication providers you choose (such as Apple or Google), merchants and their authorized staff, Stripe for merchant billing, and service providers operating FitPerk. We may derive balances, eligibility, fraud indicators, and aggregate service statistics from those records.

• Authenticate accounts and provide requested app, website, and merchant features.
• Verify activity, calculate FitPoints, prevent duplicate awards, and display progress.
• Issue, activate, validate, refund, and support rewards and redemptions.
• Review merchants, publish approved listings, and administer merchant memberships.
• Detect fraud, enforce limits, secure the service, diagnose errors, and prevent abuse.
• Send transactional messages and communications you request or may opt out of.
• Comply with law, resolve disputes, and protect users, merchants, FitPerk, and others.

We do not sell personal information or consumer health data. We do not use health or fitness information for targeted advertising, advertising measurement, data brokerage, or determining eligibility for insurance, employment, credit, or healthcare.

We disclose only what is reasonably needed for these purposes:

• Infrastructure providers: Supabase hosts authentication, application data, storage, and scheduled jobs. Lovable provides website hosting, connector, transactional-email, and website error-reporting infrastructure.
• Platform providers: Apple and Google provide authentication, health permissions, maps or address geocoding, notifications, fonts, and app distribution when you use those features. Expo/EAS provides mobile build and release tooling. FitPerk notifications are currently scheduled locally on your device and do not use a FitPerk push-token service.
• Payment provider: Stripe processes merchant membership payments. FitPerk does not store full payment-card numbers.
• Merchants: the merchant providing a reward receives the redemption credential, reward title, points spent, validation result, and validation time needed to honor it. Merchant dashboards also show aggregated issued, scanned, points-redeemed, sell-through, and quota statistics by reward, day, and month. Merchants do not receive your name, health records, step totals, workout history, email address, or FitPoints earning history through the redemption flow.
• Legal and safety recipients: authorities, advisers, insurers, or affected parties when reasonably necessary to comply with law, investigate misuse, or protect rights and safety.
• Business transactions: a successor may receive information under confidentiality protections during a merger, financing, acquisition, or sale of assets.

Service providers may use information only to provide contracted services or as otherwise permitted by law. A list of material providers is available by emailing the address below.

Our detailed categories, sources, purposes, disclosures, and health-data rights appear in the Consumer Health Data Privacy Notice, which is incorporated into this policy. Health access is optional. You can disconnect synchronization in FitPerk and revoke permissions in Apple Health or Health Connect. Revocation stops future access but does not automatically delete information already processed; use the deletion controls described below for that.

• Account, activity, FitPoints, challenge, and redemption records remain while your account is active because they are needed to provide and protect the service.
• Privacy-minimized operational events are deleted after 90 days. Local device settings and scheduled notifications remain on your device until changed, cleared, or uninstalled.
• An account-deletion request starts a 30-day recovery period. After it ends, FitPerk deletes the authentication account and associated user data from active systems through its automated deletion process, except records that must be retained for security, fraud prevention, dispute resolution, tax, accounting, or other legal obligations.
• De-identified deletion audit records, redemption records stripped of user identity, and email suppression records may remain when needed to prove deletion, prevent reuse or fraud, or honor an unsubscribe request.
• A merchant must cancel an active membership before deleting the owner account. Public business listings, reward records, and legally required billing records may be retained or transferred to another authorized merchant owner separately from the personal account.

Use Profile → Request account deletion in the app or the public account-deletion page. Backup copies are protected from ordinary use and are removed or overwritten under the applicable backup lifecycle.

Depending on where you live, you may request access, correction, deletion, or a portable copy; withdraw consent; restrict or object to certain processing; or appeal a denied request. We will not discriminate against you for exercising a privacy right. We may verify your identity and may decline or limit a request where the law allows.

To make a request or appeal, email privacy@joinfitperk.com. You may also use an authorized agent where applicable; we may request proof of authority. FitPerk does not currently sell or share personal information for cross-context behavioral advertising, so there is no sale or targeted-advertising opt-out to process.

The website uses storage and similar technologies necessary for authentication, security, preferences, and core operation. It also loads web fonts from Google, which can cause your browser to send ordinary request information such as an IP address and user agent to Google. We do not currently deploy behavioral advertising cookies. If we add non-essential analytics or advertising technology, we will update this policy and provide consent or opt-out controls where required.

We use measures designed to protect information, including encrypted network transport, access controls, database row-level security, restricted administrative access, backups, logging, and abuse controls. No system is completely secure. If an incident requires notice, we will notify affected people and regulators as required by applicable health, privacy, and breach-notification laws.

FitPerk is intended only for people who are at least 18 years old and is not directed to children. Do not create an account if you are under 18. The service is operated from the United States. Information may be processed in the United States and other places where our providers operate, subject to applicable safeguards.

We may update this policy as FitPerk or the law changes. We will post the revised version and effective date and provide additional notice when legally required. Material changes will apply prospectively unless the law permits otherwise.

FitPerk · Privacy inquiries: privacy@joinfitperk.com · General support: hello@joinfitperk.com.