Privacy Policy

Last updated: July 16, 2026

Fitness is Freedom LLC, DBA OTC Fitness Co ("OTC Fitness," "we," "us," and "our") provides fitness education, workout programming, and coaching services to help our users achieve their fitness goals. This Privacy Policy ("Privacy Policy") is designed to help you understand how we collect, use, and share your personal information and to assist you in exercising the privacy rights available to you.

Contents

  1. Scope
  2. Personal Information We Collect
  3. How We Use Your Information
  4. How We Disclose Your Information
  5. Connected Calendar Accounts and Google User Data
  6. Your Privacy Choices and Rights
  7. Security of Your Information
  8. International Data Transfers
  9. Retention of Personal Information
  10. Supplemental Notice for California Residents
  11. Children's Information
  12. Other Provisions
  13. Contact Us

1. Scope {#scope}

This Privacy Policy applies to personal information processed by us, including on our websites, mobile applications, and other online or offline offerings. To make this Privacy Policy easier to read, our websites, mobile applications, and other offerings are collectively called "Services."

By accessing our Services, you agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Personal Information We Collect {#information-we-collect}

The categories of personal information we collect depend on how you interact with us, our Services, and the requirements of applicable law.

A. Information You Provide to Us Directly

We may collect the following personal information that you provide to us:

  • Account Creation: When you sign up, we may collect your name, email address, phone number, date of birth, gender, fitness goals, activity level, dietary preferences, and exercise habits.
  • Profile Information: When using our Services, you may provide a username, profile photo, body measurements, fitness experience level, and other demographic data to personalize your experience. Your username may be displayed publicly if you choose to make your profile public.
  • Purchases: We may collect personal information associated with your purchases, including billing details. Payments made via our Services are processed by third-party payment processors. We do not directly collect or store payment card information.
  • Communications: We may collect personal information when you contact us for support, request information about our Services, register for our newsletter, or otherwise communicate with us.
  • Surveys and Feedback: If you participate in surveys or provide feedback, we may collect the information you provide.
  • User Content: If you post content through our interactive features, we collect the information you make available, including custom exercise definitions, workout routines, training programs, workout logs, progress photos, and comments. This content may include media files (images and videos) that you upload.
  • Sharing Preferences: We collect and store the visibility and sharing settings you configure for your profile, workouts, programs, and exercises. This includes lists of specific users you grant access to (whitelists) when you use our content sharing features.

B. Information Collected Automatically

We may collect certain information automatically when you use our Services:

  • Log Data: We collect information such as your IP address, browser type, operating system, referring URLs, pages visited, and access times.
  • Device Information: We collect information about the device you use to access our Services, including hardware model, operating system version, unique device identifiers, and mobile network information.
  • Usage Data: We collect information about your interactions with our Services, such as features used, content viewed, workout sessions completed, and time spent on the platform.
  • Location Information: With your consent, we may collect your approximate location based on your IP address. We do not collect precise GPS location data.
  • Cookies and Similar Technologies: We use cookies, pixel tags, and similar technologies to collect information about your browsing activities. Most browsers allow you to block and delete cookies; however, if you do so, certain features of our Services may not work properly.

C. Information from Third-Party Sources

We may obtain information about you from third-party sources, including social networking sites (if you sign in via Google, Apple, or other providers), referral programs, and publicly available sources. This information helps us verify information you have provided and enhance our ability to serve you.

D. Information from Connected Calendar Accounts

If you choose to connect a third-party calendar account, such as Google Calendar, we access and store a limited set of information from that account in order to keep your scheduled workouts in sync. We only do this after you explicitly authorize the connection, and only for the calendar we create. See Section 5 for a full description of what we access, how we use it, and how to disconnect.

3. How We Use Your Information {#how-we-use}

We use your information for a variety of business purposes:

A. To Provide Our Services

  • Managing your account and providing access to our platform
  • Delivering personalized workout programs and fitness recommendations
  • Processing your transactions and managing subscriptions
  • Tracking your fitness progress and providing insights
  • Responding to your questions, comments, and support requests
  • Sending service-related communications and notifications
  • Displaying your public profile to other users and visitors based on your visibility settings
  • Sharing your workouts, programs, and exercises with other users or the public based on your chosen visibility settings
  • Processing and storing media files (images and videos) you upload
  • Facilitating content sharing through unique URLs (slugs)
  • Synchronizing your scheduled workouts with a calendar account you have connected, if you enable that feature

B. For Administrative Purposes

  • Analyzing usage patterns to improve our Services
  • Ensuring the security and integrity of our platform
  • Debugging and fixing technical issues
  • Complying with legal obligations
  • Enforcing our Terms of Service

C. For Marketing and Promotional Purposes

  • Sending promotional emails about new features, content, and offers (with your consent)
  • Displaying personalized content and recommendations
  • Conducting surveys and collecting feedback

D. With Your Consent

We may use personal information for other purposes with your consent or at your direction.

4. How We Disclose Your Information {#how-we-disclose}

We do not sell, rent, or lease your personal information to third parties. We may share your information in the following circumstances:

  • Service Providers: We may share your information with third-party vendors who perform services on our behalf, such as payment processing, email delivery, hosting, analytics, and customer support. These providers are contractually obligated to protect your information.
  • Business Partners: We may share information with business partners to offer joint products, services, or promotions.
  • Connected Calendar Accounts: If you connect a calendar account such as Google Calendar, we send details of your scheduled workouts to that provider in order to create events in your own account, at your direction. See Section 5.
  • Legal Requirements: We may disclose your information if required by law, in response to legal process, or to protect the rights, property, or safety of OTC Fitness, our users, or others.
  • Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.
  • Publicly Shared Content: When you set your profile, workouts, programs, or exercises to "public," this information becomes accessible to anyone on the internet, including unauthenticated visitors who do not have an account with our Services. When you use "whitelist" sharing to grant specific users access to your content, those designated users can view your shared content. Information disclosed through public profiles includes your display name, username, and profile picture. Content disclosed through public workouts, programs, and exercises includes all information contained in those items, including any media files (images and videos) you have uploaded. We are not responsible for how others use information you have made publicly available or shared with specific users.
  • With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

5. Connected Calendar Accounts and Google User Data {#connected-calendars}

Our Services offer optional features that let you see your scheduled workouts in your own calendar. These features are off by default, and we only access a connected calendar account after you explicitly authorize it.

A. Google Calendar

If you choose to connect Google Calendar, we request a single, narrowly scoped Google authorization: https://www.googleapis.com/auth/calendar.app.created.

What this permission allows. This permission lets an application create its own secondary calendar in your Google Account and manage only the events on that calendar.

What we do not access. This permission does not give us access to your other Google calendars, and we do not request, receive, read, or store the events on them. We do not access your Gmail, Google Drive, Google Contacts, or any other Google service.

What we create. When you connect, we create a calendar named "OTC Workouts" in your Google Account. We write one event to that calendar for each workout you schedule in our Services. Each event contains the workout title, its date and time, its location and description if you provided them, any reminder times you set, and a link back to the corresponding page in our Services.

What we read. We read the events on the "OTC Workouts" calendar that we created, so that changes you make there are reflected in our Services. For example, if you reschedule or cancel a workout in Google Calendar, we update or remove the corresponding workout in our Services. We read no other calendar.

What we store. To keep this working, we store:

  • The Google authorization credentials (an OAuth refresh token and a short-lived access token) that let us write to the calendar we created. These are encrypted at rest.
  • The identifier of the "OTC Workouts" calendar we created in your account.
  • A synchronization marker provided by Google that tells us what has changed since we last checked.

We do not copy your Google profile, contacts, or other Google data into our systems through this feature.

How we use it. We use this information for the sole purpose of operating the calendar synchronization feature that you turned on. We do not use it for advertising, we do not sell or transfer it, and we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models. Our personnel do not read this data except where you have given us explicit permission (for example, to troubleshoot a support request), where it is necessary for security purposes or to comply with applicable law, or where the data has been aggregated and anonymized for internal operations.

Limited Use. Our use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How to disconnect. You can disconnect at any time from Settings → Calendar Sync → Disconnect Google Calendar in our Services. When you disconnect, we remove the "OTC Workouts" calendar and its events from your Google Account, revoke our access with Google, and delete the stored authorization credentials from our systems. You can also revoke our access directly at any time from your Google Account permissions page; if you do, our access stops immediately and we will stop syncing.

B. Calendar Subscription Link

Separately, you can generate a private calendar subscription link (an "iCalendar" or .ics feed) that you can add to Apple Calendar, Outlook, or another calendar application. This feature does not connect to, or read anything from, your calendar account.

The link contains a long, randomly generated secret. Anyone who has the link can view your scheduled workout titles, dates, times, and locations without signing in, so treat it like a password and do not share or publish it. You can reset the link (which immediately invalidates the previous one) or turn the feature off entirely at any time from Settings → Calendar Sync. Turning it off deletes the secret and disables the link.

6. Your Privacy Choices and Rights {#your-rights}

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: You can request access to the personal information we hold about you.
  • Correction: You can request that we correct inaccurate or incomplete personal information.
  • Deletion: You can request that we delete your personal information, subject to certain legal exceptions.
  • Portability: You can request a copy of your personal information in a structured, machine-readable format.
  • Opt-Out of Marketing: You can opt out of receiving promotional emails by clicking the "unsubscribe" link in our emails or adjusting your account settings.
  • Withdraw Consent: Where we rely on your consent to process your information, you can withdraw consent at any time.
  • Disconnect Connected Accounts: You can disconnect a connected calendar account, or reset or disable your calendar subscription link, at any time from your account settings. See Section 5.

Visibility Controls

You can control who sees your profile and content through our visibility settings:

  • Profile Visibility: You can set your profile to private (only you), friends (reserved for future use), or public (anyone). When set to public, your display name, username, profile picture, and join date are visible to all visitors.
  • Content Visibility: For each workout, program, and custom exercise you create, you can set visibility to private (only you), public (anyone with the link), or whitelist (specific users you designate).
  • Activity Data: You can control whether your workout activity, streaks, and performance statistics are publicly visible through the activity_public setting in your account preferences.

You can change these settings at any time in your account. Note that changing visibility does not retroactively remove content that was previously accessed or cached by other users or search engines. Content that was publicly accessible may have been copied, shared, or cached by third parties before you changed your settings.

To exercise these rights, please contact us at support@otcfitness.co. We will respond to your request within the timeframe required by applicable law.

7. Security of Your Information {#security}

We implement commercially reasonable technical and organizational measures designed to secure your personal information from accidental loss and unauthorized access, use, alteration, or disclosure. These measures include:

  • Encryption of data in transit using TLS/SSL
  • Encryption at rest of third-party account credentials, such as the authorization tokens for a connected calendar account
  • Secure storage of data with access controls
  • Regular security assessments and updates
  • Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You acknowledge that you provide your personal information at your own risk.

While we implement access controls to enforce your visibility preferences, content you share publicly or with specific users is transmitted to and viewable by those parties. We cannot control what recipients do with content they have accessed. Once content is shared publicly or with others, those parties may copy, screenshot, download, or further redistribute that content.

8. International Data Transfers {#data-transfers}

Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from your country of residence. By using our Services, you consent to the transfer of your information to these countries.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy when transferred internationally.

9. Retention of Personal Information {#retention}

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period may vary depending on the context of the processing and our legal obligations.

We retain the authorization credentials and synchronization data for a connected calendar account only for as long as that account remains connected. When you disconnect the account, or revoke our access from your account settings with the provider, we delete those credentials. If you delete your OTC Fitness account, we delete them as part of deleting your account.

When we no longer need to retain your personal information, we will securely delete or anonymize it in accordance with applicable laws and our data retention policies.

When you change content from public to private, we will update access controls promptly to prevent new access. However, content that was previously publicly accessible may have been cached by third parties, search engines, or users you shared it with. We cannot remove copies that exist outside our systems. Similarly, users who previously had access to your content may have downloaded, copied, or otherwise retained that content before you changed your visibility settings.

10. Supplemental Notice for California Residents {#california}

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

  • Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

"Sales" of Personal Information: For purposes of the CCPA, OTC Fitness does not "sell" personal information, nor do we have actual knowledge of any "sale" of personal information of minors under 16 years of age.

Shine the Light: California residents may request information about our disclosures of personal information to third parties for direct marketing purposes. To make such a request, please contact us at support@otcfitness.co.

11. Children's Information {#children}

Our Services are not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal information from children.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at support@otcfitness.co. If we become aware that we have collected personal information from a child in violation of applicable law, we will delete that information and terminate the child's account if applicable.

12. Other Provisions {#other}

Third-Party Websites and Applications

Our Services may contain links to third-party websites, applications, or services that are not controlled by us. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of each website and application you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If there are material changes, we will notify you by posting the new Privacy Policy on our website and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.

Supervisory Authority

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.

13. Contact Us {#contact}

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Fitness is Freedom LLC, DBA OTC Fitness Co

Email: support@otcfitness.co

Website: otcfitness.co

By using the OTC Fitness platform, you acknowledge that you have read and understood this Privacy Policy.