Privacy Policy

This Privacy Policy describes how Flint Digital (Pty) Ltd (“we”, “us”, “our”) collects, uses, stores, and protects personal information when you use the MyFitHub platform (the “Service”) at myfithub.app. We are committed to protecting your privacy in line with the Protection of Personal Information Act, 2013 (“POPIA”).

1. Who we are

MyFitHub is operated by Flint Digital (Pty) Ltd, a company registered in South Africa.

• Address: Johannesburg, South Africa
• Contact / Information Officer: support@myfithub.app

2. Personal information we collect

The Service is used by two categories of people: studio owners and their staff (our direct customers) and members of those studios (end users invited or registered through their studio). We collect:

• Account information: name, email address, phone number, password (hashed), profile photo.
• Studio information: studio name, location, contact details, instructor profiles, class schedules, packages and pricing.
• Member information: name, contact details, membership package, attendance history, booking history, signed contracts.
• Financial information: invoice records, payment status, package fees. We do not store card numbers — payment processing is handled by third-party payment gateways.
• Technical information: IP address, browser type, device information, log data, cookies (see our Cookie Policy).

3. How we use personal information

We process personal information for the following purposes:

• To provide, operate, and maintain the Service.
• To enable studios to manage their members, classes, bookings, and billing.
• To send transactional emails (invoices, booking confirmations, class reminders, password resets).
• To respond to support requests and communicate with you.
• To improve the Service, troubleshoot issues, and prevent abuse.
• To comply with legal obligations.

4. Lawful basis for processing

We process personal information based on (a) the contract between you or your studio and us, (b) your consent where required, (c) our legitimate business interests in operating and improving the Service, and (d) compliance with legal obligations.

5. How members give consent

Members of fitness studios using MyFitHub are added to the platform by their studio. By signing up at a studio that uses MyFitHub, members agree to receive transactional communications (such as invoices, booking confirmations, and class reminders) related to their membership. Members may unsubscribe from non-essential communications at any time, and may request deletion of their account by contacting their studio or us directly.

6. Email delivery, bounces, and complaints

We use Amazon Simple Email Service (Amazon SES) to send transactional emails. We monitor bounce and complaint rates and automatically suppress addresses that hard-bounce or generate spam complaints, in line with industry best practice. If you receive an email from us that you did not expect, please reply to the email or contact us at support@myfithub.app.

7. Sharing with third parties

We do not sell personal information. We share personal information only with the third parties necessary to operate the Service, including:

• Amazon Web Services (AWS): hosting, database, and storage. Data is stored in the AWS Africa (Cape Town) region.
• Amazon SES: transactional email delivery.
• Payment gateways: when payment processing is enabled, your studio's chosen gateway (e.g. PayFast, Yoco) handles payment data directly.
• Authorities: where required by law or court order.

8. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service. After account closure, we may retain certain records (such as financial records) for the period required by applicable law.

9. Your rights under POPIA

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information where retention is no longer required.
• Object to processing in certain circumstances.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact us at support@myfithub.app.

10. Children

The Service is not directed at children under the age of 18. If a member under 18 is registered at a participating studio, the studio is responsible for obtaining parental or guardian consent.

11. International data transfers

Personal information is stored primarily in the AWS Africa (Cape Town) region. Backups or operational copies may be transferred to other AWS regions in the future, in accordance with POPIA and AWS's data protection commitments.

12. Security

We use industry-standard security measures, including encryption in transit (TLS), encryption at rest for the database, secure password hashing, role-based access controls, and audit logging. No system is 100% secure, however, and we cannot guarantee the security of information transmitted to or stored on the Service.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or via a notice on the Service. The “Last updated” date at the top of this page reflects the most recent revision.

14. Contact

Questions or requests about this Privacy Policy can be sent to support@myfithub.app.