PRIVACY POLICY

Last Updated: January 2026

1. INTRODUCTION

Flex Fit Tek Ltd. (doing business as FITHAUS, “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.fithaus.io or use our services (collectively, the “Platform”).

This Policy applies to two categories of users:

• “Trainees”: Individuals requesting fitness services.
• “Trainers”: Independent third-party fitness professionals providing services.

BY USING THE PLATFORM, YOU CONSENT TO THE DATA PRACTICES DESCRIBED IN THIS POLICY. IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS THE PLATFORM.

2. COLLECTION OF INFORMATION

We collect information in three ways: (A) Information you provide to us, (B) Information collected automatically, and (C) Information from third parties.

A. Information You Provide to Us

Registration Data: Name, email address, phone number, and password.

Identity Verification (Trainers Only): Driver’s license or government ID, date of birth, social security number (SSN) or SIN (for tax purposes), insurance documentation, and certification proof.

Payment Data:

• Trainees: Credit card information (processed securely by Stripe/Third-Party; we do not store full card numbers).
• Trainers: Banking information (for payouts) and tax identification.

Fitness Profile (Trainees): Physical goals, health limitations, injuries, and training preferences. Note: This is considered Sensitive Personal Information and is used solely to facilitate safe training.

Communications: Feedback, support queries, and training notes.

B. Information Collected Automatically

When you access the Platform, we may automatically collect:

Device Data: IP address, browser type, operating system, and device identifiers.

Usage Data: Pages viewed, time spent on pages, clicks, and search queries.

Location Data: With your permission, we may collect precise geolocation data to match Trainees with nearby Trainers. You can disable this in your device settings, though it may affect service functionality.

Cookies: We use cookies and pixel tags to improve user experience and analyze traffic.

C. Information from Third Parties

Background Checks (Trainers): We receive reports on criminal history and identity verification from third-party screening services.

Social Media: If you log in via Facebook or Google, we receive your basic profile information.

3. USE OF INFORMATION

We use the information we collect to:

• Facilitate Services: Connect Trainees with Trainers, schedule sessions, and process payments.
• Safety & Vetting: Verify Trainer credentials, conduct background checks, and ensure insurance compliance.
• Communication: Send appointment confirmations, receipts, technical notices, and security alerts.
• Marketing: Send promotional emails (only with your consent, which you can withdraw at any time).
• Improvement: Analyze trends to improve our website and training offerings.
• Legal Compliance: Comply with tax laws (IRS/CRA) and legal requests.

4. SHARING OF INFORMATION

We do not sell your personal information. We share information only in the following circumstances:

Between Users:

• To Trainers: We share the Trainee’s name, general location, and fitness goals/limitations to facilitate the session.
• To Trainees: We share the Trainer’s name, bio, photo, certification status, and rating.

Service Providers: We share data with third-party vendors who perform services on our behalf, including:

• Payment Processing: (e.g., Stripe)
• Background Checks: (e.g., Checkr or similar)
• Hosting & Analytics: (e.g., AWS, Google Analytics)

Legal Obligations: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Business Transfers: If FITHAUS acts as a party in a merger, acquisition, or sale of assets, your data may be transferred.

5. INTERNATIONAL DATA TRANSFERS

FITHAUS operates in both Canada and the United States.

For Canadian Users: Your information may be transferred to, stored, and processed in the United States. You acknowledge that while your data is in the U.S., it is subject to U.S. laws and may be accessible to U.S. law enforcement.

For U.S. Users: Your information may be processed in Canada.

6. DATA SECURITY

We implement appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please remember that we cannot guarantee that the internet itself is 100% secure. Transmission of personal information to and from our Platform is at your own risk.

7. YOUR PRIVACY RIGHTS

Depending on your location, you have certain rights regarding your data:

A. For Residents of Canada (PIPEDA)

• Access: You have the right to request access to the personal information we hold about you.
• Correction: You have the right to request correction of inaccurate information.
• Withdrawal of Consent: You may withdraw consent for data processing (e.g., marketing) at any time.

B. For Residents of the United States (including California - CCPA/CPRA)

• Right to Know: You may request details about the categories of personal information we have collected about you.
• Right to Delete: You may request that we delete your personal information, subject to certain legal exceptions (e.g., tax records or trust/safety retention).
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Shine the Light: California residents may request a list of third parties to whom we disclosed personal information for direct marketing purposes (Note: FITHAUS does not share data for third-party direct marketing).

To exercise these rights, please contact us at contact@fithaus.io.

8. DATA RETENTION

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy.

Trainee Data: Retained while the account is active.

Trainer Data: Tax and background check records may be retained for up to 7 years to comply with IRS/CRA regulations and insurance requirements.

9. CHILDREN'S PRIVACY

The Platform is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such data, we will delete it immediately.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

11. CONTACT US

If you have questions or comments about this Policy, you may contact us at:

Email: contact@fithaus.io

Phone: 1-888-682-0724

Mailing Address: 53 Dolomite Crt, Vaughan, ON, L4H 3J6