Privacy Policy

Introduction

Fitlo helps gyms manage fitness competitions and provides AI-powered tools to streamline communication. This Privacy Policy explains how we collect, use, and protect your information.

Data We Collect

Account Information

• Email address
• Name and profile information
• Notification preferences (countries, cities, frequency, etc.)

Gmail Integration (Optional)

If you connect your Gmail account to use our AI receptionist features, we access and store:

• Email messages (subject, body, sender, recipient, date)
• Email metadata (labels, thread information)
• OAuth access tokens (encrypted)

How We Use Your Data

Competition Notifications

• Send notifications about competitions based on your preferences
• Improve our service and prevent abuse

AI Receptionist Features

When you connect Gmail, we use your email data to:

• Display your emails in a unified inbox
• Analyze email content using AI to determine if a response is needed
• Generate suggested email responses using AI
• Send email responses on your behalf when you approve them
• Organize emails by status (unread, needs response, sent, archived)

Third-Party Services

We use the following third-party services:

• Gmail API: To access your emails when you connect your Gmail account. We use Gmail API to read, send, and organize your emails.
• OpenAI: Email subject, sender, and body content are sent to OpenAI to:
  • Determine if an email requires a response
  • Analyze email sentiment (positive/neutral/negative)
  • Generate suggested response drafts
  • Extract structured information from emails
  OpenAI does not retain or train on your data per their enterprise privacy policy. No email content is shared with other users or third parties.
• Supabase: To securely store your data with encryption at rest
• Mailgun: To send notification emails (no email content stored)

Google API Services User Data Policy

Fitlo's use of information received from Gmail APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Gmail data to provide and improve our AI receptionist features. We do not transfer Gmail data to others except as necessary to provide the service, comply with applicable law, or as part of a merger or acquisition.

Data Security

We implement industry-standard security measures to protect your data:

• OAuth access tokens are encrypted at rest
• All data transfers use HTTPS encryption
• Database access is restricted and monitored
• We regularly review and update our security practices

Data Retention and Deletion

Email data is retained only as long as your Gmail account remains connected. When you disconnect your Gmail account:

• We immediately stop accessing your Gmail account
• Your stored emails and access tokens are deleted from our systems
• AI-generated suggestions are removed

Your Rights and Control

You have the following rights:

• Access: Request a copy of your data
• Correction: Update or correct your information
• Deletion: Delete your account and all associated data
• Disconnect Gmail: Revoke Gmail access at any time from the Integrations page
• Opt-out: Unsubscribe from notifications using the link in our emails

To exercise these rights, contact us at hello@fitlo.co or manage your settings in your account.

Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: hello@fitlo.co