Effective date: 2026-04-27
This Privacy Policy explains how AllFitUp collects, uses, discloses, stores, protects, and deletes personal information. It is drafted for a fitness coaching SaaS platform where coaches and studios may process client information, including health-adjacent and sensitive fitness data.
This Privacy Policy applies to visitors to our website, Customers, Coaches, team members, Clients invited by Customers or Coaches, prospective customers, job applicants if applicable, and anyone who contacts us or interacts with the Services.
For account, billing, website, marketing, security, and AllFitUp business operations, AllFitUp generally acts as an independent data controller or equivalent responsible party.
For Client data processed inside a Customer workspace at the instruction of a Coach, studio, or gym, AllFitUp generally acts as a data processor or service provider, and the Customer acts as the controller or business responsible for deciding what data is collected and how it is used.
Customers are responsible for giving Clients legally sufficient notices, obtaining valid consents where required, and honoring client rights requests related to their coaching services.
AllFitUp may process information that can be sensitive depending on context and law, including health-related information, body measurements, progress photos, injury notes, dietary restrictions, and client check-ins. Customers and Coaches must collect sensitive information only when necessary for their coaching services, with appropriate client consent or another valid legal basis, and must not request medical records or information they are not qualified or authorized to handle.
Where laws such as GDPR, UK GDPR, Korean PIPA, or similar frameworks apply, we rely on appropriate legal bases such as performance of a contract, legitimate interests, consent, compliance with legal obligations, protection of vital interests in rare cases, and explicit consent or another permitted basis for sensitive information where required. Customers are responsible for selecting and documenting their legal basis for Client data they collect and use through AllFitUp.
AllFitUp does not sell personal information in the ordinary meaning of selling personal data for money. If a law defines “sale,” “sharing,” or “targeted advertising” broadly to include certain advertising or analytics technologies, we will provide applicable notices and opt-out controls where required.
AllFitUp may process and store personal information in South Korea and other countries where we or our service providers operate. Where required, we use appropriate safeguards for international transfers, such as contractual protections, data processing agreements, adequacy mechanisms, transfer impact assessments, or standard contractual clauses.
We retain personal information for as long as necessary to provide the Services, maintain accounts, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, maintain security, and support legitimate business operations. Retention periods vary by data type. See the Data Deletion Policy for more detail.
Depending on your location, you may have rights to access, correct, delete, export, restrict, object to, withdraw consent for, or appeal decisions about your personal information.
Clients should first contact their Coach or Customer for data inside a coaching workspace. AllFitUp will assist Customers in responding to valid requests where required by law and the Data Processing Agreement.
Customers and website visitors may contact support@allfitup.com to exercise rights related to data controlled by AllFitUp.
We may need to verify your identity before responding. We may deny or limit requests where permitted by law, such as for security, legal, fraud prevention, tax, accounting, or dispute reasons.
Customers and Coaches must not upload client information unless they have lawful authority to do so. They must provide their own privacy notices where required, obtain valid consent for progress photos and sensitive information, avoid collecting unnecessary data, respect client deletion requests, maintain appropriate confidentiality, and use client data only for legitimate coaching purposes.
AllFitUp is not intended for children under 18. Coaches and Customers may not invite minors unless they have obtained legally valid parental or guardian consent and are legally permitted to provide services to that minor. AllFitUp may delete accounts or data if we learn that information has been collected from a minor without required consent.
We use administrative, technical, and organizational safeguards designed to protect personal information. No system is perfectly secure. You are responsible for using strong passwords, controlling team access, maintaining device security, and promptly notifying us of suspected unauthorized access.
You may opt out of marketing emails by using the unsubscribe link or contacting us. We may still send non-marketing service messages, billing notices, security alerts, and account communications.
We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and provide additional notice where required by law.
Privacy questions or requests may be sent to support@allfitup.com or founders@allfitup.com.