Introduction

ShapeFusion (“we,” “us,” or “our”) operates the ShapeFusion fitness platform and related services (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform as a member, coach, or fitness center. Please read this policy carefully.

We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) in the European Union and European Economic Area, the UK GDPR, and the California Consumer Privacy Act (CCPA) where applicable. We do not sell your personal data. By using the Service, you consent to the practices described in this policy.

Information We Collect

Information you provide: When you register or use the Service, we collect account information (e.g., name, email address, username, password), profile information (e.g., gender, age, height, weight, goals, profile photo, bio), and where applicable payment and billing information. Coaches and fitness centers may provide business details, credentials, and branding materials. Members may log nutrition, workouts, progress photos, body measurements, and other health-related data.

Information collected automatically: We collect device and usage information such as IP address, browser type, operating system, pages visited, time and date of access, and referring URLs. We may use cookies and similar technologies as described below.

Information from third parties: If you sign up through a coach or fitness center, we may receive information they provide (e.g., your assignment to a plan). Payment processors provide transaction and fraud-related data in accordance with their privacy policies.

How We Use Your Information

We use the information we collect to:

  • Provide, operate, maintain, and improve the Service
  • Create and manage your account and authenticate you
  • Process payments and send related communications
  • Display your profile, progress, and content to your coach or fitness center as permitted by your role and settings
  • Send you service-related notices, updates, and support messages
  • Respond to your requests and communicate with you
  • Monitor and analyze usage and trends to improve the Service and user experience
  • Detect, prevent, and address fraud, abuse, or security issues
  • Comply with legal obligations and enforce our terms
  • Send marketing communications where you have opted in (you may opt out at any time)

Legal Basis for Processing (EEA/UK)

Where required by law (e.g., in the EEA and UK), we process your personal data on the following bases: (1) Contract—to perform our contract with you (e.g., to provide the Service); (2) Legitimate interests—to operate and improve the Service, prevent fraud, and communicate with you, where not overridden by your rights; (3) Consent—where you have given consent (e.g., marketing, optional features); (4) Legal obligation—where we must comply with law. You may withdraw consent where applicable without affecting the lawfulness of processing before withdrawal.

Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

  • Coaches and fitness centers: If you are a member assigned to a coach or fitness center, they may see your profile, nutrition, workouts, progress photos, measurements, and other data you enter or that we generate to provide the Service.
  • Service providers: We use third-party vendors for hosting, analytics, payment processing, email delivery, and support. They process data on our instructions and under agreements that protect your data.
  • Legal and safety: We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of ShapeFusion, our users, or the public.
  • Business transfer: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

International Transfers

We operate in North America and Europe. Your information may be transferred to and processed in countries other than your country of residence. Where we transfer data from the EEA, UK, or Switzerland to countries not deemed to provide adequate protection, we use appropriate safeguards such as standard contractual clauses approved by the European Commission or equivalent mechanisms. You may request details of these safeguards by contacting us.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account or request erasure, we will delete or anonymize your personal data within a reasonable period, except where we must retain it for legal, regulatory, or legitimate business purposes (e.g., fraud prevention, tax records).

Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit and at rest where applicable, access controls, and regular security assessments. No method of transmission over the Internet or electronic storage is 100% secure; we cannot guarantee absolute security. You are responsible for keeping your password and account credentials confidential.

Your Rights

EEA/UK (GDPR): You have the right to access, rectify, erase, restrict processing, object to processing, data portability, and to lodge a complaint with a supervisory authority in your country.

California (CCPA/CPRA): You have the right to know what personal information we collect and how it is used and disclosed, to delete your personal information, to correct inaccuracies, to opt out of the “sale” or “sharing” of personal information (we do not sell personal information as defined under CCPA), and to non-discrimination for exercising your rights. You may designate an authorized agent to make requests on your behalf.

Other regions: We honor similar rights where required by local law. To exercise any of these rights, contact us at info@shapefusion.ca or through the contact details below. We will respond within the time required by applicable law.

Cookies and Similar Technologies

We and our service providers use cookies, web beacons, and similar technologies to collect information about your use of the Service. Cookies are small data files stored on your device. We use them to maintain your session, remember your preferences, analyze traffic, and improve the Service. You can control cookies through your browser settings; disabling certain cookies may limit some features of the Service. For more information, see our cookie notice or your browser’s help section.

Children

The Service is not intended for individuals under the age of 16 (or higher where required by local law). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the “Last updated” date, and where appropriate by email or in-product notice. Your continued use of the Service after the effective date of changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, or wish to exercise your rights, please contact us:

ShapeFusion
Email: info@shapefusion.ca
Website: https://www.shapefusion.ca

If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.