Privacy Policy

Last updated: August 19, 2026

This Privacy Policy explains how Forzive collects, uses, and protects personal information when you use the Service.

Forzive is operated by Ingenieria y Desarrollo Agil S. de R.L. de C.V. ("Forzive", "we", "us").

1. Our Two Roles: Controller and Processor

Forzive handles personal information in two distinct capacities, and the distinction matters for who you contact about your data.

• As a processor (member data). When a gym uses Forzive to run its business, the gym is the data controller for its members' personal information — it decides what to collect, why, and for how long. Forzive acts as the data processor, handling that information only on the gym's documented instructions and only to deliver the Service. If you are a gym member and want your data corrected or deleted, contact your gym first; we will act on their instruction, and we will also honor direct requests where the law requires it.
• As a controller (our own data). For the account of the gym owner or staff member who signs up, for billing records, for our website visitors, and for our marketing and analytics, Forzive is the controller and decides how that information is used.

Gyms using Forzive are responsible for having a lawful basis to collect their members' information and for providing their own privacy notice where the law requires one.

2. Information We Collect

• Account information: name, email, phone, date of birth when an account is created.
• Auth: Firebase handles authentication; identifiers like firebaseUid are stored in our database to link sessions to a profile.
• Membership and billing records: plan, status, start and end dates, invoices, and payment history.
• Attendance: class bookings, waitlist entries, check-ins, and the dates and times of visits to the gym.
• Health and fitness data: workouts logged, personal records, and body measurements (such as weight, body-fat percentage, and girth measurements) when a member or their gym records them. This is sensitive information and it is entered voluntarily — it is never required to use the Service.
• Device and usage data: browser, OS, IP address, and interaction events used for diagnostics and product improvement.
• Payments: handled by Stripe or PixelPay — we receive a transaction identifier, amount, status, and card metadata such as brand and last four digits. We never receive or store full card numbers.
• Advertising data: see Section 4 for what the Meta pixel collects on our marketing website.

3. Why We Use It

We send promotional email only if you opt into the newsletter, and you can unsubscribe from any such message at any time.

4. Advertising and the Meta Pixel

Our public marketing website runs the Meta pixel (Facebook/Instagram) so we can measure our advertising and reach people who may be interested in Forzive.

• What it collects: pages viewed on our marketing site, actions that signal interest (such as starting a signup), your IP address, browser and device information, and Meta cookie identifiers.
• Who receives it: Meta Platforms, Inc., which acts as an independent controller for this data under its own Data Policy.
• Why: to measure ad performance, attribute signups to campaigns, and build advertising audiences.
• Where it runs: currently on all pages of our website, including pages inside the logged-in application. The pixel receives the address of the page you visit and standard browser information. We never send Meta the contents of your records — names, attendance, workouts, body measurements, and payment details are not transmitted to Meta — but page addresses inside the application can contain internal record identifiers.
• How to opt out: use your browser's tracking protection or an ad blocker, adjust your Meta ad preferences, or decline non-essential cookies where we offer that choice.

5. Who We Share It With

• With your gym: your name, membership status, attendance history, bookings, and any workout or measurement data you record are visible to the gym you belong to, so it can deliver the service.
• Payment processors: Stripe (Stripe, Inc.) and PixelPay process payments and receive the information needed to do so. Card details go directly to them and never through our servers.
• Advertising: Meta Platforms, Inc. receives page-visit and browser information through the Meta pixel, as described in Section 4.
• Infrastructure providers: Firebase (authentication, storage, push notifications) and Resend (email) process data on our behalf under their own security commitments.
• Legal: we may disclose information where required by law, to enforce our Terms, or to protect the rights and safety of users.
• Business transfer: if Forzive is acquired or merged, account data may transfer to the successor, subject to this Policy.
• Never sold: we do not sell personal information, and we do not share it with third parties for their own independent marketing.

6. How Long We Keep It

• Active accounts: for as long as the account is active.
• After a gym or member account closes: up to 90 days, so the account can be restored if closure was a mistake, after which personal data is deleted or anonymized.
• Payment, invoice, and tax records: retained for the period required by applicable tax and accounting law (typically 5 years), even after an account closes. These records cannot be deleted on request.
• Backups: deleted data may persist in encrypted backups for up to 35 days before being overwritten on the normal rotation.
• Aggregate and anonymized statistics: retained indefinitely, since they no longer identify anyone.

7. How to Request Deletion

1. Gym members: ask your gym first — as controller, it can delete your record directly from its Forzive dashboard. If your gym does not respond, or if you prefer to contact us directly, write to [email protected] from the email address on your account.
2. Gym owners and staff: write to [email protected] from the email address on your account, or use the account settings in the dashboard.
3. What to include: the email address on the account and, for a member, the name of your gym.
4. Turnaround: we acknowledge requests within 5 business days and complete them within 30 days. If we need more time, or cannot delete something because of the retention limits in Section 6, we will tell you why.

There is no charge for a deletion request, and we will not degrade your service for making one.

8. Your Rights

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal information, to object to certain processing, and to withdraw consent you previously gave. Write to [email protected] to exercise any of these rights, and see Section 1 for whether your gym or Forzive is the right first point of contact.

9. Cookies

We use essential cookies to keep you signed in and to remember your locale. We also use advertising cookies set by the Meta pixel across the site (Section 4). We use analytics and advertising cookies with your consent where the law requires consent.

10. International Transfers

Forzive is operated from Honduras and uses infrastructure providers located in the United States and the European Union. Using the Service involves transferring your information to those countries, under the safeguards offered by the providers listed in Section 5.

11. Security

We use HTTPS everywhere, store sensitive credentials (such as Firebase tokens and API secrets) on the server only, and never store full card numbers. No system is perfectly secure — please use a strong, unique password.

12. Children

Forzive is not directed at children under 13, and we do not knowingly collect their information directly. Where a gym enrolls a minor, the gym is responsible as controller for obtaining any parental consent the law requires.

13. Changes

We may update this Policy. Material changes will be announced in-app or by email, and the "last updated" date above will change.

14. Contact

Questions about this Policy, or to exercise any right described here, write to [email protected].