Privacy Policy

1. Data we collect

• Account data: name, email, phone, password (hashed), date of birth, business details.
• Fitness & health data (End Users): bookings, workouts, fitness assessments, body metrics, and similar information you or your business enter.
• Payment data: processed by our payment providers (Stripe, Square). Flex stores limited identifiers and status, not full card numbers.
• Usage & device data: pages viewed, approximate location from IP, and analytics identifiers set via cookies (see our Cookie Policy).
• Communications: emails, SMS, and support messages you send or receive through the Service.

2. How we use data

• provide, operate, secure, and improve the Service;
• process subscriptions and payments, and send service and transactional messages (e.g. verification, receipts, reminders);
• provide AI-assisted features you or your business enable;
• understand usage through analytics. In the EEA, UK, and Switzerland we do this only with your consent; in other regions (including the U.S.) analytics run by default and you may opt out at any time, and we honor Global Privacy Control (GPC) signals (see our Cookie Policy);
• comply with legal obligations and enforce our terms.

3. How we share data

We share data with vendors who process it on our behalf under contract, in categories such as: payment processing, application and database hosting, transactional email and text messaging, AI-assisted features, in-app support chat, and error monitoring. Business customers can request our current list of subprocessors by emailing privacy@flexonline.net.

We also share data to comply with law, to protect rights and safety, or in connection with a merger or acquisition. We do not sell personal data.

4. Your business’s role (End Users)

If you are a member of a gym or studio that uses Flex, that business decides what data to collect and how to use it. Direct requests to access, correct, or delete your data to that business; we will assist them as their processor.

5. Your rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to opt out of certain processing. To exercise these rights, contact privacy@flexonline.net (or the business you interact with, for End-User data). We will respond as required by applicable law.

You can opt out of analytics at any time using the cookie banner or your browser settings, and we honor Global Privacy Control (GPC) signals as an opt-out where applicable. We do not sell your personal data or share it for cross-context behavioral advertising.

6. Data retention

We retain personal data for as long as your account is active and as needed to provide the Service, then delete or anonymize it within a reasonable period unless a longer period is required by law. When a subscription is cancelled, data is handled as described in our Cancellation & Refund Policy.

7. Security

We use technical and organizational measures to protect personal data, including encryption in transit, hashed passwords, encrypted storage of sensitive third-party tokens, and tenant isolation. No method of transmission or storage is completely secure.

8. International processing

Flex is operated from the United States, and your data is processed in the U.S. and other countries where our service providers operate. By using the Service you understand your data may be transferred to and processed in the United States.

9. Children

The Service is not directed to children under 13. Minors may use a business’s services only with verifiable parental or guardian consent obtained by that business.

10. Changes

We may update this Policy from time to time and will post the new effective date above. Material changes will be communicated as required.

11. Contact

Flex is operated by DF Consulting LLC, 6644 Sagefield Ave, Radford, VA 24141, USA. Email privacy@flexonline.net.