Micro Fitness Club ("Micro Fitness Club", "we", "us") places short guided movement and mindfulness sessions into the real gaps in your work calendar. This policy explains what information we collect to do that, how we use it, and the choices you have. It applies to microfitnessclub.com and the Micro Fitness Club service (together, the "Service").
Account and contact information. When an organization purchases licenses, we collect the administrator's name, work email, and company name. When you are invited to the Service, we collect your work email address.
Google account and calendar data. If you connect Google Calendar, we receive, with your permission through Google's consent screen:
Microsoft 365 account and calendar data. If you connect Outlook, we receive, with your permission through Microsoft's consent screen:
offline_access so the connection survives without asking you to sign in again. The refresh token is encrypted at rest.Usage information. Which sessions you start and complete, the minutes completed, your session-length and session-type preferences, streaks, and optional feedback you submit after a session.
Technical information. Standard server logs (IP address, browser type, timestamps) used for security and reliability.
Movement preferences. If you choose to answer a short intake, we collect movement preferences: the kind of session you want, how hard you want to work, whether floor movements are okay, where you work, and anything you want to go easy on, including words you type. These are preferences, not conditions. You can skip the questions and receive a general program.
We collect movement preferences for one reason: to pick the moves in your sessions. The answers, including any note you type about what to go easy on, are encrypted on your own record (AES-256-GCM, the same scheme we use for calendar tokens). That note is read on our server only, to suggest areas you can correct before saving. It is not sent to any other service. Your employer and HR never see individual answers. They see only an aggregate count of how many people personalized a program, and only when that group is 5 or more. We do not break the count down by answer.
Movement preferences are not sold and are not shared. They are never used for employment decisions. You can edit or delete them any time from your personal preferences page (the link in your session or in the message you received after connecting). Deleting them clears the profile and returns you to the general program. Deleting your account removes them too. To ask us to delete them, email hello@microfitnessclub.com.
We use calendar data for one purpose: to schedule, reschedule, and remove Micro Fitness Club sessions on your own calendar. Specifically, we:
We do not read, store, or analyze the titles, descriptions, attendees, attachments, or locations of your meetings. Only the start and end times and busy/free status of events are used, and they are processed in memory during scheduling rather than stored. The only events we modify or delete are the ones Micro Fitness Club created.
Outlook is used for the same single purpose: to schedule, reschedule, and remove Micro Fitness Club sessions on your own calendar. The calendar view we request omits the subject. Change notifications carry no meeting content. We do not read meeting bodies, attendees, or attachments. The only events we modify or delete are the ones we created. Two queries outside the daily sync path do request a subject, and both are described on the Trust & Security page: a cleanup of old pause notes, and a manual support tool. Neither runs for every person on every sync.
We do not sell personal information and we do not use it for third-party advertising. Movement preferences are not sold or shared, and they are never used for employment decisions.
We share information only with service providers who process it on our behalf to run the Service: Vercel (hosting), Upstash (database), Stripe (payments), Resend (email), Cloudflare (session video storage), and Mux (video playback for older session recordings). We also share the aggregate participation described above with your organization's administrator, when required by law, or in connection with a merger or acquisition. Our service providers are bound by contract to use information only to provide services to us. Google and Microsoft are not our service providers; they are your own calendar platforms, and we reach them only with the permission you grant.
We keep your account information for as long as your organization's subscription is active and your account is connected. An administrator can remove you from the console, and your identity provider can deprovision you over SCIM. Either one revokes our calendar access, deletes the stored token, and deletes the upcoming sessions we placed on your calendar. You can also disconnect Micro Fitness Club yourself at myaccount.google.com/permissions or in your Microsoft account app permissions; doing so stops our access immediately. To delete your account and associated data, email hello@microfitnessclub.com and we will complete the request within 30 days. When an organization's subscription ends, member data is deleted within 90 days.
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can exercise these rights by emailing us. We will not discriminate against you for exercising them.
The Service is intended for use by employees of business customers and is not directed to anyone under 16. We do not knowingly collect information from children.
We may update this policy from time to time. If we make material changes, we will notify your organization's administrator by email and update the effective date above.
Micro Fitness Club
Email: hello@microfitnessclub.com