Privacy Policy

Who is responsible

Bolide Labs LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, US, runs fitvee (fitvee.com) and is responsible for your personal data. Contact: support@fitvee.com.

What we collect, and why

Your quiz answers, such as your age, first name, goals, how active you are and anything you type in your own words: to build your plan and your results. (Needed to provide the service.) Answers about your body are health data: see "Consumer health data" below.
Your email address: to send your receipts, the reminders the law requires, and links to your account. (Needed to provide the service.) Marketing emails: you may get them unless you said no when we asked, except in the EU, Norway, Iceland, Liechtenstein, the UK, Switzerland, Moldova, Andorra, Australia, New Zealand, Japan, South Korea, China, Turkey, the United Arab Emirates, Saudi Arabia, Kuwait, Qatar and Bahrain, where you get them only if you said yes. Saying no at the question, or pressing unsubscribe in any of them, stops them all. (Our legitimate interest in offering our own service, which you can object to at any time; in those countries, consent.)
Your purchases: what you bought and when, and the amounts and status of your payments, refunds and disputes. Your card number goes to Stripe; we never see it. From Stripe we keep the card's network (for example Visa), last four digits, expiry date and the network's reference for its first payment, so a membership can go on being charged if we ever move to another payment processor. (Needed to provide the service; tax and accounting law.)
Where you are: your country and, in the US, your state, worked out from your IP address when you visit, so we apply local rules (age, cancellation, health data). We don't store your IP address, except briefly for ad measurement as described below; when you start a checkout we keep a scrambled code made from it for a day, so we can stop stolen cards being tried on our checkout. (Legitimate interests; legal obligations.)
With your order we keep the time zone your IP address points to, so emails about your plan reach you in your morning (needed to provide the service).
How you found us: if you came from an ad, the campaign, ad set and ad numbers and the click identifier in the link, to see which ads work. (Legitimate interests.)
Which quiz screens are seen: counted per screen, without the count being tied to you, to improve the quiz. (Legitimate interests.)
Ad measurement: when you open one of our quizzes and answer its first question, sign up, start a checkout, start a trial, become a member or buy, we tell Meta (Facebook and Instagram), so we can see which of our ads work and Meta can show them to people likely to be interested. Meta gets a scrambled (SHA-256 hashed) copy of your email address (once you've given it), of your customer number and of your quiz visit's random number, the click identifier from the ad's link and when you first arrived, your browser's type (its user agent), your IP address and your approximate location worked out from it (country, state, city and postal code; the location scrambled the same way), what happened and when, the address of the quiz page (which says nothing about you), and for a checkout, a membership or a purchase the amount and currency. Never your quiz answers, your health information or anything you type. We keep your browser's type, IP address and approximate location with your order only until the purchase has been reported, and never longer than 7 days. In the US we do this unless you opt out on the privacy choices page or with Global Privacy Control; in the EU, the UK and other countries whose laws ask for consent first, only if you said yes when we asked. (US: legitimate interests, with your right to opt out; those countries: consent.)
How you use your account: the days you open your account page and your plan, and which sessions you mark as done. If you dispute a payment with your bank, we send it, through Stripe, these facts, the terms you agreed to (with their fingerprints) and the dates of the emails we sent you, never your answers, your health information or your messages. (Legitimate interests: showing a payment was authorised and the service delivered.)
Messages you send us: to answer you. We keep the text of your emails and our replies; attachments are listed by name but not kept. (Needed to provide the service; legitimate interests.)

No Meta or other advertising code runs on our pages, and no session recorder: what Meta gets goes from our server, as described above.

Consumer health data

Your quiz answers about your body, such as your height, weight, goal weight and any health conditions, are health data. Where the law asks for it, we collect them only with a separate consent, which we ask for in the quiz and which you can withdraw at any time in your account ("Your health information") or by writing to support@fitvee.com; withdrawing deletes them. We store them apart from your other answers. We use them only to build and run your plan, and they go only to the service providers that run fitvee for us, under contract. We never share them with advertising platforms or use them for ads. Our Consumer Health Data Privacy Policy says more.

Cookies and storage on your device

A cookie (named arm_ and the test's name) keeps you in the same version of the quiz for 30 days while we compare versions.
A cookie (ad_opt_out) remembers for a year that this browser opted out of ad measurement on the privacy choices page.
Your browser's storage keeps your quiz progress until you finish, your sign-in on this device until you sign out, and small things the pages remember for you, such as a question you dismissed.

The providers that run fitvee for us, under contracts that limit what they may do with it, and Meta for ad measurement:

Cloudflare: hosting, our database, and receiving the emails you send us.
Stripe: payments.
Postmark: email.
Meta: ad measurement, as described above, where the law allows it or you agreed. Meta also uses what it receives under its own terms and privacy policy.

We don't sell your personal data. We share some of it with Meta for ad measurement, as described above, unless you opt out on the privacy choices page or with Global Privacy Control; some US state laws call this "sharing" for advertising. Your health data is never shared with advertising platforms. We give your data to authorities only when the law requires it.

Transfers outside the EU and UK

We and our providers are in the United States. Transfers rely on the EU-US Data Privacy Framework where a provider is certified, or on the European Commission's standard contractual clauses.

How long we keep it

Payment and tax records (what you bought and paid, refunds and disputes), the terms you agreed to, and the reminders and receipts we sent: as long as your account exists, and after you delete it as described below.
Emails you send to support@fitvee.com and our replies: 24 months after the conversation's last message, then deleted automatically.
Everything else: until you delete your account or ask us to.

Deleting your account

You can delete your account yourself: open your account from the link in any of our emails and press "Delete my account". To make sure it's you, we email you a link to confirm. It works for 72 hours, and nothing is deleted until you press it. Then:

every membership stops at once and nothing more is charged (deleting doesn't refund what you've already paid);
we delete your email address, your quiz answers including your health data, your plan progress and check-ins, your emails to support and the ad identifiers from your visit;
we keep what the law and the card networks require, without your email address: your orders and payments, refunds and disputes, the terms you agreed to (with a fingerprint of their exact wording), the reminders and receipts we sent, the days you used your account, and a record of your request and when we carried it out. In place of your address we keep a scrambled code made from it, so that if your bank asks about a payment later, or you write to us again, we can find these records. We delete them, and the code, 10 years after your account was deleted.

If you can't open your account, write to support@fitvee.com from the address you signed up with and we'll send the confirmation link to it.

Your rights

You can ask to see, correct or delete your data, to restrict or object to how we use it, and to receive it in a portable form. You can download everything we hold about you yourself: open your account and press "Download my data" for a file other services can read. You can withdraw a consent at any time, including your consent to health data; that doesn't affect what we did before. If you live in the EU or the UK, you can complain to your data protection authority. If you live in a US state with a privacy law (such as California or Washington), you can ask to know, delete or correct your data, and opt out of its sharing for ads on the privacy choices page; we don't sell it. For anything else, write to support@fitvee.com: we answer within a month (in California, within 45 days), and we never treat you differently for using your rights. Your plan starts at the level your quiz answers point to, which our software sets. We don't take decisions about you that have legal or similarly significant effects by automated means.

Children

fitvee is for adults. The quiz doesn't accept an age under 18, and we keep nothing of it: it goes on only with an age of 18 or more.

Security

Connections are encrypted. Your data is stored with Cloudflare, and only people who need it for their work can see it, after signing in, with every change recorded.

Changes

We post changes here and email you about important ones.