Privacy Policy

This Privacy Policy explains how Xfitconnect collects, uses, stores, shares, and protects personal information when you use our website, application, and related services. Certain public sections of Xfitconnect may be browsed without creating an account; information described in this policy may still be collected when you interact with those sections.

1. Information we collect

Depending on the services you use, we may collect:

• Account information: name, email address, authentication details, and profile information.
• Fitness and activity information: workouts, distance, duration, performance metrics, and information received from connected fitness providers.
• Event and challenge information: registrations, participation status, responses, waivers, results, and organizer interactions.
• Payment information: order identifiers, amounts, currency, payment status, provider references, receipts, refunds, and billing or tax information where required. Xfitconnect does not ordinarily store complete card or bank credentials entered directly with a payment provider.
• Device and usage information: device type, operating system, app version, diagnostics, crash information, and service usage.
• Communications: support requests, organizer communications, and information submitted through forms.

Xfitconnect will not ask you to disclose a card PIN, banking password, or one-time password through email, telephone, chat, or support communications. Do not provide such credentials to anyone claiming to represent Xfitconnect. If you believe they have been disclosed, contact the relevant financial institution and appropriate authorities promptly.

2. How we use information

We use information to provide accounts and app functionality; operate challenges, events, scoring, and leaderboards; process and reconcile payments; generate receipts; administer refunds; provide customer support; maintain security; prevent fraud and abuse; comply with law; and improve Xfitconnect.

3. Sharing and service providers

Xfitconnect does not sell personal information. We may share information when necessary with:

• organizers responsible for an event, challenge, or club in which you participate
• connected fitness platforms that you authorize
• payment gateways, banks, accounting providers, and related financial service providers
• hosting, analytics, messaging, security, and customer-support providers
• government or regulatory authorities where legally required

These providers receive only the information reasonably required for their function and are subject to their own legal and contractual obligations.

We may also disclose information when reasonably necessary to comply with a valid legal, regulatory, judicial, or law-enforcement requirement; enforce our agreements; investigate fraud or unlawful activity; or protect the rights, safety, and security of Xfitconnect, our users, organizers, or the public.

4. Payments

Payment providers process payment credentials under their own privacy and security practices. Xfitconnect retains the transaction information required to confirm payment, provide receipts and support, process refunds, perform accounting and reconciliation, resolve disputes, and meet legal obligations.

5. Data security

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, alteration, or disclosure. No electronic system can guarantee absolute security.

6. Data retention

We retain information for as long as reasonably necessary to provide the service, maintain legitimate business and payment records, resolve disputes, enforce agreements, and comply with legal, tax, accounting, and regulatory requirements.

7. Your choices and rights

Subject to applicable law, you may request access, correction, deletion, or a copy of your personal information. Account deletion is available through profile settings. Some transaction, security, or compliance records may be retained where legally or operationally required. Historical activity may be anonymized so it can no longer reasonably identify you.

You may also request withdrawal of consent for processing that relies on your consent by contacting us with the subject line Withdrawal of consent for processing personal data. We may verify your identity and authority before acting on a request. Withdrawal is prospective and does not invalidate processing already lawfully completed. It may restrict or prevent services that require the affected information.

8. Children

Xfitconnect is not intended for children under 13. Where a higher minimum age or parental-consent requirement applies, users must satisfy that requirement.

9. International and third-party services

Connected services and service providers may process information under their own terms and may operate from other jurisdictions. Review the policies of services you choose to connect or use.

10. Changes to this policy

We may update this Privacy Policy to reflect service, legal, or operational changes. The current version and effective date will be published on this page. Significant changes may also be communicated through the Platform, email, or another appropriate channel where required.

11. Contact

Privacy questions and requests can be sent to support@xfitconnect.com. You can also review our Contact & Grievance Information.