1. Roles
For creator and team accounts and for visitors of this website, FitCoUp is the controller. For student data inside a school, the creator is the controller and FitCoUp is the processor: we process student data on the creator's instructions, under the terms of service, and only to provide the service.
2. What we process
- Account data. name, email, language, password hash, role in a school, two factor settings.
- School data. programs, lessons, videos, offers, branding, team members, settings.
- Student activity. lessons started and completed, workout time, streaks, calendar, notifications, community posts, support messages.
- Purchases. orders, subscriptions, invoices, refunds and the payment references returned by Stripe; card numbers are never stored by FitCoUp.
- Health data, only with explicit consent. mood and pain notes after a session, measurements, progress photos, answers to health questions in a quiz. Consent can be withdrawn in the app at any time.
- Technical data. device and browser type, approximate location from the IP address, pages viewed, events needed for security and analytics.
3. Legal basis
Contract: providing the school, the app, payments and support. Consent: health data, marketing messages, cookies and tracking pixels. Legitimate interest: security, fraud prevention, product analytics on aggregated data and service messages about an account. Legal obligation: invoices and accounting records.
4. Cookies and pixels
This website and the student app use necessary cookies for login and preferences. Analytics and advertising pixels (for example Meta Pixel, Google Analytics, TikTok Pixel) load only after a visitor accepts them in the cookie bar, and the choice can be changed at any time. Creators decide which pixels run in their school.
5. Where data is stored and who sees it
Data is hosted in the European Union, in Frankfurt. Processors we use: Supabase for the database, storage and authentication; Stripe for payments; an email delivery service for transactional and consented marketing messages; push notification services of the browser platforms. Team members of a school see student data according to their role; support, analyst and content roles see masked email addresses.
6. Retention
Account data is kept while the account exists. Student progress is kept while access to a product is active and for a retention period after it ends that the creator sets (6 months by default), with warnings sent 30 and 7 days before deletion. Invoices are kept for the period required by accounting law. Message logs are kept for 12 months. Backups are deleted on a rolling schedule within 30 days.
7. Your rights
Students can export their data as a JSON file and request deletion of their account from the profile in the app; deletion is scheduled after a 30 day grace period during which it can be cancelled, after which the account is anonymized. Creators export students, progress and sales from the dashboard. Everyone can request access, correction, restriction or portability by writing to privacy@fitcoup.com, and can complain to the Belgian Data Protection Authority.
8. Security
Access is controlled by row level permissions in the database, every dashboard action is written to an audit log, team accounts can require two factor authentication, videos are served through signed links to students with access, and health data is stored only after consent with its purpose recorded.
9. Changes
Material changes are announced in the dashboard and by email to creators at least 30 days before they apply.