What we collect, what we never receive, and what you can ask us to do about it. Effective [[EFFECTIVE_DATE]].
The three tools sold here never send us anything about the people you assess, sign up or review. Your setup lives inside your own link, and what a client enters stays in the browser on your tablet. The one exception is RenewKit, which stores client records so it can compare them over time — and those are encrypted on your device before they reach us, with a key we do not hold and cannot obtain.
We hold your email address because you gave it to us, and a payment record because you bought something. That is the whole list.
Both run entirely in the browser on your device. Starting weights, goal weights, calorie and macro figures, health screening answers, signatures, printed forms — none of it is transmitted to us, and none of it is stored on our servers. Closing the tab without printing or sending loses the record, which is a deliberate consequence of that design rather than a fault.
Your own setup — business name, colours, session rates, your terms — is carried in the part of your link after the # symbol. By the design of the web itself, that part of an address is never sent to a server. Not to ours, and not to anyone else's. It exists only in your browser and in whatever copy of the link you keep.
RenewKit compares a client against themselves over time, which means it has to remember them. Those records are encrypted in your browser, before they leave your device, using a key generated on your setup page that exists only inside your own link.
What arrives on our hosting is a block of scrambled characters filed under an anonymous identifier. No name, no measurements, no notes, nothing readable. We hold no key, we cannot decrypt it, and neither could anyone who obtained a copy of the storage.
The other side of that: if you lose your link you lose the key, and the records cannot be recovered by us or by anybody else. The setup page says so before a key is generated.
We keep the encrypted blocks for as long as you are a customer, and delete them on request.
If you add your own Web3Forms key during setup, that button sends the summary through Web3Forms to your own inbox. That is a service you signed up to and hold the key for; we are not in the path and never receive a copy. Web3Forms handles that data under their own terms.
Without a key, the button opens your device's own mail app instead, and nothing leaves your device except the email you then choose to send.
Stripe takes the payment and gives us a record of the transaction: your email address, the amount, the country, and the last four digits of the card. We never receive or store your full card number. Stripe handles your payment details under their own privacy policy.
We keep purchase records for as long as tax and accounting law requires, which is generally seven years in Canada.
If you download a free guide or opt into our list, we hold your email address and any name you gave us, along with which emails you opened and which links you clicked. We use it to send you the thing you asked for and, if you agreed, occasional emails about our products.
Our email is run through Kit (formerly ConvertKit). Every email has an unsubscribe link, it works immediately, and unsubscribing from marketing does not stop us replying to a support request.
Our web host keeps standard server logs — IP address, browser, pages requested, timestamps — which we use to keep the site running and secure. We do not run advertising trackers, we do not sell or rent your information to anybody, and we do not build advertising profiles.
Fonts on our pages are served by Google Fonts, which receives the request as a normal part of loading a page.
The short list, and what each one gets: Stripe (payment details and your email), Kit (your email address and engagement), our web host (server logs, and for RenewKit the encrypted blocks described above), and Google Fonts (the request that loads a font). Where you have added your own Web3Forms key, that is your account and your relationship with them, not ours.
Some of these process data outside Canada, including in the United States. Where that happens they are bound by contractual terms intended to keep your information protected to a comparable standard.
Everything you record about the people you train — measurements, health answers, signed forms, attendance — is yours. You are the data controller for it. You are responsible for collecting, storing, retaining, disclosing and disposing of it in line with the privacy law that applies where you practise, and for telling your clients what you hold.
We are not a party to that relationship, and for ConsultKit and IntakeKit we never hold the data at all. For RenewKit we hold it only in a form we cannot read.
You can ask us what we hold about you, ask for it to be corrected, ask for it to be deleted, or ask for a copy in a portable form. Write to [[SUPPORT_EMAIL]] and we will deal with it. We do not charge for this and we will not make it difficult.
Deleting your email address ends our ability to send you anything, including support replies to a thread already in progress. Deleting a purchase record is limited by the tax retention above.
These products are sold to fitness professionals, and our website is not directed at children. We do not knowingly collect information from anyone under 16. If a trainer using our tools records information about a client who is a minor, that is between the trainer, the client and their parent or guardian — and for two of the three tools it never reaches us in any form.
If we change this policy in a way that materially affects you, we will say so by email rather than quietly updating the page. The effective date at the top always reflects the current version.
Questions, requests or complaints: [[SUPPORT_EMAIL]]. It is one person, and it comes straight to me.