Fitness consultation records can contain sensitive personal and wellness information. Only collect information you are authorized to use, limit it to what is needed, and protect any exports you create.
1. Scope and roles
This policy applies to MDG Fitness Consultation, operated by Modern Digital Group (“MDG,” “we,” “us,” or “our”). For account, billing, security, product analytics, and website data, MDG determines the purposes described below. For prospect and client information entered by a fitness professional, that account holder generally determines why the information is collected, and MDG processes it to provide the service.
2. Information we collect
- Account information: name, email, optional phone and username, organization, role, preferences, policy acceptance, and authentication records.
- Workspace information: prospects, contact details, goals, screening responses, consultation notes, coaching indicators, selected programs, follow-ups, trainers, locations, templates, branding, and configuration.
- Billing information: subscription status, plan, billing dates, Stripe customer and subscription identifiers, and limited transaction metadata. Payment-card details are handled by Stripe and are not stored by MDG.
- Usage and device information: sign-in activity, feature events, browser and device data, IP-derived security information, logs, diagnostics, and local browser storage used to keep sessions and pending changes working.
- Support information: messages, troubleshooting details, and actions taken by authorized platform administrators.
3. How we use information
We use information to authenticate accounts; provide and synchronize workspaces; process subscriptions; operate support; secure, debug, and improve the service; prevent fraud and abuse; communicate about the account; comply with law; enforce agreements; and develop features. We may use de-identified or aggregated information for analytics, benchmarking, research, security, product development, and business planning when it is not reasonably capable of identifying a person.
4. How information is shared
We may share information with infrastructure, authentication, hosting, payment, email, monitoring, support, and professional-service providers that process it for us; with workspace members authorized by the account holder; when required by law or needed to protect rights and safety; and as part of a financing, merger, acquisition, reorganization, or sale of all or part of the business. We do not sell payment-card information. We do not disclose identifiable prospect or consultation information for third-party advertising.
5. Health and wellness information
The service is not represented as a HIPAA-compliant medical-record system. HIPAA may not apply to information entered into an app that is not offered by a HIPAA-regulated entity, but other privacy, consumer-protection, and breach-notification laws may apply. Account holders are responsible for determining their legal obligations and obtaining appropriate notices and consent before entering health or wellness information.
6. Retention and deletion
We retain information while an account is active and as reasonably needed to provide the service, resolve disputes, prevent fraud, enforce agreements, meet tax and legal obligations, and maintain security records. Account deletion initiates removal of the account and workspace and cancellation of connected recurring billing. Some information may remain temporarily in encrypted backups or longer where required by law, necessary for security, or maintained in de-identified form.
7. Security
We use access controls, encrypted transport, managed authentication, row-level database authorization, logging, and other reasonable safeguards appropriate to the service. No method is completely secure. Account holders must use unique passwords, secure devices, assign access carefully, and contact us promptly if compromise is suspected.
8. Choices and rights
Account holders can update profile information, manage notifications, access billing tools, export certain workspace information, and delete the account through Account Settings. Depending on location, individuals may have rights to access, correct, delete, restrict, or receive information. Requests may be sent to the contact below. We may verify identity and, for prospect data controlled by a fitness business, direct the request to that business.
9. Children
The service is intended for business users and is not directed to children under 13. Do not create an account for a child or enter a minor’s information without the authority, notices, and consent required by applicable law.
10. International use
Information may be processed in the United States and other locations where our providers operate. Users are responsible for determining whether their use complies with local data-protection and cross-border transfer requirements.
11. Changes
We may update this policy as the service changes. Material changes will be communicated through the service or by email and, where appropriate, require renewed acceptance.
12. Contact
Privacy requests may be sent to privacy@moderndigitalgroup.com. General support: support@moderndigitalgroup.com.