Who this policy covers

fi8 is a fitness tracking tool used by gyms and their members. There is no public sign-up: every account on fi8 exists because a gym invited that person, either as a trainee or as a coach. This policy explains what we collect from gyms, coaches, and trainees who use fi8, and what we do with it.

What we collect

• Account information: your name, email address, and profile photo, obtained through Google Sign-In. fi8 does not create or store a separate password for your account.
• Workout data: the exercises, sets, reps, and weights you log, including anything logged by voice and transcribed to text.
• Body composition data: weight, body fat percentage, muscle mass, visceral fat, and an estimated "bio age," entered manually based on a scan from a device like Evolt. fi8 does not currently connect directly to scanning hardware; these numbers are typed in by you or your coach after a scan.
• Coach-trainee connections: if you connect with a coach, we store that connection and the fact that you granted access, so it can be shown, managed, and revoked.
• Basic usage information: things like login timestamps and app version, used for troubleshooting and keeping the service running.

fi8 does not collect payment or insurance information directly. Billing is handled through Stripe (see "Third parties" below), and fi8 never sees or stores your card details.

Why we collect it

We collect this data to run the core product: showing you your own workout history, calculating your progress, displaying body composition trends over time, and letting a gym manage its own members. We don't collect data for advertising, and fi8 doesn't run ads.

Who can see your data

• You can always see your own workout and scan history.
• A coach you've explicitly connected to can see the sessions and scan data of the trainees connected to them, and may log sessions or add scan results on a trainee's behalf. You can remove a coach's access at any time from your profile, which immediately ends their visibility into your data.
• Your gym's admin can see membership and activity data for people enrolled at that gym, for the purpose of managing their own roster.
• fi8 staff can access account data only when needed to provide support (for example, troubleshooting a login issue), and only as far as necessary to resolve the issue.

Data is isolated per gym. One gym's admins and coaches cannot see another gym's members or data.

What we don't do

fi8 does not sell your data to third parties, and does not share it with advertisers or data brokers. We don't use your workout or body composition data to train external models or share it outside of fi8's own service.

How long we keep your data

We keep your data for as long as your account is active. If your gym's fi8 subscription ends, member data is retained for a limited window (see the Terms of Service for specifics) so the gym has time to export it, then it is deleted. If you personally leave a gym but the gym stays on fi8, your gym admin controls whether your account is deactivated or transferred.

Your rights: export and deletion

You can request a copy of your own data, or request that it be deleted, at any time by contacting us at hello@fi8.app. A gym admin can request an export or deletion of their gym's full member data set the same way. We'll respond to these requests within a reasonable timeframe and confirm once completed. Some minimal records may be retained briefly after deletion where required for legal, security, or accounting reasons.

Third parties we work with

• Firebase / Google Cloud: fi8 is built on Firebase, and your data is hosted on Google Cloud infrastructure (most likely in the us-central1 region). Firebase provides authentication, database, and file storage for the app. Google processes this data on our behalf under its own data processing terms.
• Stripe: fi8's billing is being built on Stripe and is not yet live. Once billing launches, gyms will enter payment details directly with Stripe, and fi8 will never receive or store raw card numbers. This section will be updated with specifics once billing goes live.

We don't currently use any other third-party analytics, advertising, or data-sharing services.

Security, in plain language

• You sign in with Google. fi8 never asks for or stores a password of its own.
• Each gym's data is kept isolated from every other gym's data.
• A coach only ever sees a trainee's data after that trainee has explicitly granted access, and that access can be revoked by the trainee at any time.
• Data is hosted on Google Cloud infrastructure, which Google secures to industry-standard practices for encryption and access control.

Not a medical service

fi8 is a fitness and wellness tracking tool. It is not a medical device, and the body composition numbers and "bio age" estimate it displays are wellness estimates, not medical or diagnostic information. fi8 is not a HIPAA-covered entity, and using fi8 is not the same as receiving care from a medical provider. If you have health concerns, talk to a qualified healthcare professional.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top and, where appropriate, notify gym admins directly.

Contact

Questions about this policy, or requests to export or delete data, can be sent to hello@fi8.app.