fitting

Privacy Policy

Last updated September 30, 2026

1. Introduction

Fitting In LLC (“Fitting In,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website and related services (collectively, the “Service”).

This Privacy Policy is incorporated by reference into our Terms of Use. By using the Service, you agree to the collection and use of information as described here. If you do not agree, please do not use the Service.

We may update this Privacy Policy from time to time. Material changes will be communicated as described in Section 15.

2. Information We Collect

2.1 Information You Provide Directly

  • Account information: email address, password hash, and, if applicable for Gym Partners, gym affiliation, pricing, amenities, equipment, photos, and any other representations made to users.
  • Profile and preference information: saved/favorite gyms and similar settings.
  • Gym Partner information: business name, address, contact information, day-pass and membership fees, amenities, equipment, hours of operation, photos, purchase URLs, and other listing details.
  • Communications: messages you send to us, including support requests or copyright notices.

2.2 Information Collected Automatically

  • Device and usage data: IP address, browser type and version, device identifiers, operating system, referring URLs, and interactions with the Service (e.g., favorites, searches, clicks).
  • Location data: as described in Section 6.
  • Cookies and similar technologies: we use cookies, local storage, session storage, and similar technologies to operate the Service, maintain authentication, remember preferences, and understand usage patterns. You can control cookies through your browser settings; disabling cookies may limit some features.

2.3 Information From Third Parties

  • Gym Partners: may submit Gym Information relating to their business.
  • Third-party integrations: if you connect a third-party service, we may receive information from that service consistent with the permissions you grant, as described in our Terms of Use.
  • Publicly available sources: we may aggregate publicly available Gym Information as described in our Terms of Use.

3. How We Use Information

We use the information we collect to:

  • Operate, maintain, and improve the Service, including displaying gym comparisons and search results;
  • Create and manage your account;
  • Enable Gym Partner listings, verification, and analytics described in Section 5;
  • Communicate with you, including responding to inquiries and sending administrative or transactional messages;
  • Personalize your experience, including location-based search results;
  • Monitor, detect, and prevent fraud, abuse, and violations of our Terms of Use;
  • Comply with legal obligations and enforce our agreements;
  • Analyze usage trends in the aggregate to improve the Service.

4. Legal Bases for Processing (For Users in Jurisdictions That Require This)

Where applicable law requires a legal basis for processing personal information, we rely on one or more of the following: your consent (including the consent described in Section 5), performance of a contract with you (e.g., providing the Service you signed up for), our legitimate interests (e.g., improving and securing the Service), and compliance with legal obligations.

5. Email Address Sharing With Gyms

This section describes a specific, mandatory data practice and requires your affirmative agreement before you can use the Service.

5.1 What We Share

If you create an account, Fitting In shares your email address in unredacted form, with gyms that you interact with through the Service (for example, gyms you view, favorite, or that appear connected to your activity), so that those gyms can:

  • Match your email address against their own memberships or lead records; and
  • Compare their internal data against activity and analytics generated through the Service (for example, to see whether someone who viewed or reviewed their gym on Fitting In is a current member, a former member, or a prospect).

This is different from aggregated, anonymized, or hashed data. Gyms that participate in this program will be able to see your actual email address.

5.2 Why We Do This

This data sharing allows Gym Partners to evaluate the effectiveness of their listing, measure engagement, and reconcile Fitting In activity with their own business records. It is a core part of how Fitting In provides value to Gym Partners and, in turn, funds and operates the Service.

5.3 Your Consent is Required to Create an Account

By creating a Fitting In account, you expressly consent to the sharing of your email address with gyms as described in this Section. Agreeing to this practice is a condition of creating an account. If you do not want your email address shared with gyms in this manner and do not wish to use the opt-out described in Section 5.4, do not create an account or use the Service.

5.4 Opting Out After You’ve Created an Account

After you create an account, you may opt out of future email-sharing under this Section at any time. Opting out will not require you to delete your account or stop using the Service, though certain gym-side analytics or matching features may no longer include your activity going forward.

To opt out, email us at contactfittingin@gmail.com with the subject line “Email Opt-Out” from the email address associated with your account.

We will process opt-out requests within the time required by applicable law (within 15 business days for California users). An opt-out applies prospectively; it does not retroactively un-share information already shared with a gym before your request was processed.

5.5 What This Does Not Cover

This section addresses email-sharing with gyms specifically. It does not, by itself, authorize sharing your email address with unrelated third parties for their own independent marketing purposes; see Section 7 for our broader disclosure practices.

5.6 A Note for California and Other State-Law Residents

Some state privacy laws (including California’s) treat this type of disclosure as a “sale” or “share” of personal information. If you are a resident of a state with such laws, Section 5.4 above and Section 11.2 below describe how to exercise your opt-out rights. We will not deny you access to your account or to the core Service for exercising this opt-out.

6. Location Services & Data

As described in our Terms of Use, the Service may collect precise (GPS-based) or approximate (IP-based) location data, with your consent, to show nearby gyms, improve search relevance, analyze aggregate usage trends, and support fraud prevention. You may disable location permissions through your device settings at any time; doing so may limit certain features but will not prevent you from using the Service by manually searching by city or zip code. We do not sell your precise location data to third parties. We may share location data with service providers who help operate the Service (e.g., hosting or mapping providers), subject to confidentiality obligations.

7. How We Share Information

In addition to the email-sharing described in Section 5, we may share information as follows:

  • Gym Partners: Gym Information you interact with and (as described in Section 5) your email address, may be visible to or shared with the relevant Gym Partner.
  • Service providers: we share information with vendors who perform services on our behalf, such as hosting, analytics, and customer support, under contractual confidentiality and use restrictions.
  • Legal and safety reasons: we may disclose information if required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of Fitting In, our users, or the public.
  • Business transfers: if Fitting In is involved in a merger, acquisition, financing, or sale of assets, information may be disclosed or transferred as part of that transaction, subject to standard confidentiality protections.
  • With your direction or consent: we may share information for other purposes with your consent or at your direction (for example, if you connect a third-party integration).

We do not sell your precise location data to data brokers. Email-sharing with gyms is addressed specifically in Section 5.

8. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we will delete or de-identify your personal information within a reasonable period, except where retention is required for legal, tax, security, or record-keeping purposes, or as described in our Terms of Use.

9. Your Right to Deletion

You have the right to request deletion of the personal information we hold about you, subject to certain exceptions described below. This right is provided to all users regardless of location, though the specific legal guarantee, timeline, and exceptions may vary depending on the law that applies to you.

9.1 How to Request Deletion

You can request deletion by emailing contactfittingin@gmail.com with the subject line “Data Deletion Request,” from the email address associated with your account.

9.2 Verification

To protect against fraudulent deletion requests, we will verify your identity before processing a request–typically by confirming the request comes from the email address on file, or, where that isn't possible, by requesting additional identifying information. We will not require more information than is reasonably necessary to verify your identity.

9.3 What Happens When You Request Deletion

Once a deletion request is verified, we will:

  • Delete or de-identify your account information and profile data;
  • Direct any relevant service providers who process your personal information on our behalf to do the same;
  • Notify Gym Partners who have received your email address under Section 5 that a deletion request has been made, and request that they delete it from their own records, to the extent required by applicable law (we cannot guarantee third-party compliance once information has already been lawfully shared, but we will make the request and document it);
  • Remove or anonymize your User Content where feasible, or, where removal is not feasible without affecting the integrity of the Service (for example, an aggregate rating that includes your review), anonymize your association with that content.

9.4 Exceptions to Deletion

We may retain certain information notwithstanding a deletion request where necessary to:

  • Complete a transaction or provide a service you requested before your deletion request;
  • Comply with a legal obligation (e.g., tax or financial recordkeeping requirements);
  • Detect, prevent, or investigate security incidents, fraud, or illegal activity;
  • Exercise or defend legal claims;
  • Enable internal uses that are reasonably aligned with your expectations and compatible with the context in which you provided the information (for example, retaining minimal records solely to honor your deletion request itself and avoid re-contacting you); or
  • Comply with another exception recognized under applicable law.

Where we retain information under an exception, we will limit its use to the purpose of the exception and will not use it for any other purpose.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and/or relevant authorities as required by applicable law.

11. Your Privacy Rights

11.1 General Choices

  • Account information: you may review and update your account information, including password and whether to delete your account, at any time through account settings.
  • Marketing communications: you may opt out of promotional emails using the unsubscribe link in those emails; you may still receive transactional or administrative messages.
  • Cookies: you may control cookies through your browser settings.
  • Location: you may disable location permissions through your device settings.
  • Account deletion: you may deactivate or delete your account at any time, as described in our Terms of Use.

11.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, disclose, and (where applicable) sell or share;
  • Request deletion of your personal information, subject to certain exceptions;
  • Request correction of inaccurate personal information;
  • Opt out of the "sale" or "sharing" of personal information, where applicable, including the email-sharing practice described in Section 5 (see Section 5.4 for how to opt out of that specific practice);
  • Limit the use of "sensitive personal information," where applicable;
  • Not receive discriminatory treatment for exercising these rights.

To exercise these rights, contact us at contactfittingin@gmail.com. We will verify your request using information associated with your account before responding.

11.3 Other U.S. State Privacy Rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, or another state with a comprehensive privacy law, you may have similar rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing (such as targeted advertising or profiling). You may exercise these rights by contacting us at contactfittingin@gmail.com.

12. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Consistent with our Terms of Use, users between 13 and 18 (or the applicable age of digital consent in their jurisdiction) may only use the Service with the involvement and consent of a parent or legal guardian. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete that information.

13. International Users and the GDPR

The Service is designed, hosted, and operated in the United States. This Section describes how we approach the additional obligations that arise if individuals located in the European Economic Area ("EEA"), the United Kingdom ("UK"), or Switzerland use the Service, including under the EU General Data Protection Regulation, the UK GDPR, and the Swiss Federal Act on Data Protection (collectively, "European Data Protection Law").

13.1 A Threshold Note

Fitting In is a U.S.-based service focused on U.S. gyms, and is not currently designed to actively market to, or be used by, individuals in the EEA, UK, or Switzerland. If you are located in one of those regions and use the Service, this Section explains how we intend to handle your information, but we encourage you to contact us at contactfittingin@gmail.com before creating an account, since some features (particularly the mandatory email-sharing described in Section 5) may need to be adjusted or made unavailable to comply with European Data Protection Law before we can appropriately serve users in your region.

13.2 Roles

For purposes of European Data Protection Law, Fitting In acts as the "controller" of personal information collected directly through the Service (such as account and usage data), and Gym Partners act as independent controllers of any information they receive directly from you or through the sharing described in Section 5.

13.3 Legal Bases for Processing

We rely on the following legal bases under European Data Protection Law:

  • Consent: for the email-sharing described in Section 5, optional cookies/tracking technologies, and marketing communications. Where consent is our legal basis, you may withdraw it at any time (see Section 5.4 for the email-sharing opt-out; withdrawing consent for the Service overall will generally require you to stop using it, since it is a condition of the account relationship).
  • Contractual necessity: for processing needed to create your account and provide the core features of the Service you request.
  • Legitimate interests: for limited purposes such as securing the Service, preventing fraud, and improving functionality, where those interests are not overridden by your rights and interests. You have the right to object to processing based on legitimate interests, as described in Section 13.5.
  • Legal obligation: where we must process information to comply with applicable law.

13.4 International Data Transfers

Because the Service is operated in the United States, your personal information will be transferred to, and processed in, the United States, which the European Commission and UK authorities have not recognized as providing an "adequate" level of data protection equivalent to the EEA or UK. Where we transfer personal information out of the EEA, UK, or Switzerland, we intend to rely on one or more legally recognized transfer mechanisms, such as:

  • The EU Standard Contractual Clauses approved by the European Commission (and, for UK transfers, the UK International Data Transfer Addendum) with relevant service providers and, where applicable, Gym Partners; and/or
  • Your explicit consent to the transfer, where consent is the appropriate legal basis for the underlying processing (for example, the email-sharing described in Section 5).

We will supplement these mechanisms with additional safeguards as needed and as our practices mature (for example, encryption in transit and contractual limits on government access requests).

13.5 Your Rights Under European Data Protection Law

If European Data Protection Law applies to you, you have the right to:

  • Access the personal information we hold about you and receive a copy of it;
  • Rectify inaccurate or incomplete personal information;
  • Erase your personal information ("right to be forgotten")–see Section 9 for our deletion process, which we apply consistently to GDPR erasure requests, subject to the exceptions listed there and any additional exceptions under Article 17(3) GDPR;
  • Restrict processing of your personal information in certain circumstances;
  • Data portability–receive personal information you provided to us in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible;
  • Object to processing based on legitimate interests or for direct marketing purposes;
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
  • Lodge a complaint with a supervisory authority in your country of residence, place of work, or the place of the alleged infringement. A list of EU supervisory authorities is available from the European Data Protection Board; UK residents may contact the Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at contactfittingin@gmail.com. We will respond within one month of a verified request, extendable by a further two months for complex or numerous requests, with notice to you of the extension and reasons for it.

13.6 Data Protection Officer / EU Representative

As a small, pre-formation company, Fitting In does not currently have a designated Data Protection Officer or an Article 27 GDPR representative in the EU or UK. If our processing of EEA/UK personal information becomes regular or large-scale, we will appoint one and update this Section accordingly. In the interim, all privacy inquiries from EEA/UK/Swiss individuals should be directed to contactfittingin@gmail.com.

13.7 Sensitive Data

We do not intentionally collect "special category" data under Article 9 GDPR (such as health data, beyond general fitness preferences you voluntarily provide, or biometric data) and ask that you not submit such information through the Service (for example, in reviews or messages) beyond what is necessary to use core features.

14. Third-Party Links and Integrations

The Service contains links to, or integrations with, third-party websites and services, as described in our Terms of Use. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies before providing them with information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service with a new "Last Updated" date, and, where appropriate, by providing a notice displayed on the Service. Your continued use of the Service after the updated policy takes effect constitutes acceptance of the changes. If you do not agree to the updated policy, you must stop using the Service.

16. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to report a concern, contact us at:

Email: contactfittingin@gmail.com