PRIVACY
POLICY.

Effective: April 5, 2026  ·  Last updated: April 8, 2026

FITR, Inc. ("FITR," "we," "our," or "us") operates joinfitr.com, sell.joinfitr.com, and the FITR mobile application (collectively, the "Services"). This Privacy Policy explains what personal information we collect, how we use it, and your rights. By using our Services you agree to the collection and use of information as described here.

1. Information We Collect — Shoppers

• Account information: Name, email address, and password when you register.
• Purchase information: Order history, cart contents, shipping address, and billing address.
• Payment information: Processed by Stripe, Inc. We do not store full card numbers or CVV codes. We may store the last four digits and card brand for display.
• Usage data: Pages visited, products viewed, search queries, and interaction data collected automatically.
• Device data: IP address, browser type, operating system, and device identifiers.
• Communications: Messages you send via our contact form or support email.
• Marketing preferences: Email opt-in status, only if you explicitly subscribe.

2. Information We Collect — Brand Sellers

If you create a Brand Seller Account, we additionally collect:

• Business information: Business name, website, social media handles, and business description.
• Contact information: Business email address and, where provided, phone number.
• Subscription data: Stripe subscription ID, customer ID, subscription status, and billing period dates. Stripe processes payment — we store only the subscription metadata.
• Product listings: Product names, descriptions, pricing, images, categories, SKUs, and stock levels you upload to the platform.
• Shipping settings: Your shipping address, handling times, carrier preferences, and shipping rate configuration.
• Sales and order data: Orders placed for your products, order statuses, and revenue data.
• Payout information: Payouts are processed through Stripe Connect. We do not store bank account numbers on our servers — Stripe handles all payout processing under their privacy policy.
• Compliance data: Tax identification information where required by law.

3. How We Use Your Information

• To process and fulfill orders and provide customer support.
• To create and manage your account and subscriptions.
• To send transactional emails (order confirmations, shipping updates, subscription receipts).
• To send marketing emails only if you have explicitly opted in. You may unsubscribe at any time.
• To display Brand Seller product listings to shoppers on the FITR platform.
• To calculate and remit seller payouts via Stripe.
• To improve our Services through analytics.
• To detect and prevent fraud and security threats.
• To comply with legal obligations including tax reporting.

4. Third-Party Services

We share your data with the following third parties, each subject to their own privacy policies:

• Google Firebase / Firestore — authentication, database, and cloud storage (Firebase Privacy).
• Stripe, Inc. — payment processing and seller payouts (Stripe Privacy).
• Brevo (Sendinblue) — transactional and marketing email delivery (Brevo Privacy).

We do not sell your personal information to any third party.

5. Sharing with Other Users

When you place an order as a Shopper, your shipping name and delivery address are shared with the Brand Seller fulfilling your order. Your payment information is never shared with Sellers.

Brand Seller business names, product listings, and shipping policies are visible to all Shoppers on the FITR platform. Personal contact details of Sellers are not publicly displayed.

6. Cookies and Local Storage

We use browser localStorage and session cookies to keep you signed in, remember your cart, and store your display preferences. See our Cookie Policy for full details. You can clear this data anytime through your browser settings.

7. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate data via your account settings.
• Deletion: Request deletion of your account and associated personal data. Email us or delete your account in Settings.
• Data Portability: Request a machine-readable export of your data.
• Opt-out of Marketing: Unsubscribe via any marketing email or account settings.
• California Residents (CCPA): You have the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.
• EU/UK Residents (GDPR): You have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, email app@joinfitr.com.

8. Children's Privacy (COPPA)

Our Services are intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13. If we learn we have collected data from a child under 13 without parental consent, we will delete it immediately. Contact us at app@joinfitr.com to report such cases.

9. Data Security

We use industry-standard security measures including TLS encryption in transit, Firebase Security Rules to restrict database access, server-side-only writes for subscription status (preventing client-side forgery), and access controls on sensitive admin functions. However, no internet transmission is 100% secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

10. Data Retention

• Account data is retained as long as your account is active or as needed to fulfill this policy's purposes.
• Order and transaction data is retained for 7 years for tax and legal compliance.
• Brand Seller data (listings, orders, subscription history) is retained for 7 years after account closure.
• You may request deletion of your account at any time; some data may be retained where legally required.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice at least 30 days before they take effect. Continued use of the Services after notice constitutes acceptance.

12. Contact Us