Privacy Policy

Effective September 12, 2026

Micro Fitness Club ("Micro Fitness Club", "we", "us") places short guided movement and mindfulness sessions into the real gaps in your work calendar. This policy explains what information we collect to do that, how we use it, and the choices you have. It applies to microfitnessclub.com and the Micro Fitness Club service (together, the "Service").

1. Information we collect

Account and contact information. When an organization purchases licenses, we collect the administrator's name, work email, and company name. When you are invited to the Service, we collect your work email address.

Google account and calendar data. If you connect Google Calendar, we receive, with your permission through Google's consent screen:

Your email address (userinfo.email) — to identify your account and match it to your organization's invitation.
Calendar events (calendar.readonly, calendar.events) — the start time, end time, and busy/free status of events on your primary calendar for the current working day, so we can find real gaps between meetings; and the ability to create, move, and delete the session events that Micro Fitness Club itself places on your calendar.

Usage information. Which sessions you start and complete, the minutes completed, your session-length and session-type preferences, streaks, and optional feedback you submit after a session.

Technical information. Standard server logs (IP address, browser type, timestamps) used for security and reliability.

2. How we use Google Calendar data

We use calendar data for one purpose: to schedule, reschedule, and remove Micro Fitness Club sessions on your own calendar. Specifically, we:

Read the times of your events for the current day to identify open gaps between meetings.
Create session events (marked as free/transparent and private) in those gaps.
Move or remove those session events automatically when your meetings change, using Google's calendar change notifications.

We do not read, store, or analyze the titles, descriptions, attendees, attachments, or locations of your meetings. Only the start and end times and busy/free status of events are used, and they are processed in memory during scheduling rather than stored. The only events we modify or delete are the ones Micro Fitness Club created.

Limited Use disclosure. Micro Fitness Club's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to serve advertisements, do not sell it, and do not allow humans to read it except with your explicit consent, for security purposes, to comply with law, or as part of aggregated and anonymized statistics.

3. How we use other information

To provide, maintain, and improve the Service, including the in-session player and your organization's leaderboard.
To show your organization's administrator aggregate participation (for example, sessions placed and minutes completed by team). Administrators can see who has connected their calendar and how many minutes each member has completed; they cannot see your calendar contents.
To communicate with you about your account, invitations, and important changes to the Service.
To detect, prevent, and address technical and security issues.

We do not sell personal information and we do not use it for third-party advertising.

4. How we store and protect information

Google OAuth refresh tokens are encrypted at rest (AES-256-GCM) and used only to access the Google Calendar API on your behalf.
Data is stored with Upstash (Redis) and hosted on Vercel, both of which maintain industry-standard security programs. All data is transmitted over HTTPS.
Access to production systems is restricted to personnel who need it to operate the Service.

5. Sharing

We share information only with service providers who process it on our behalf to run the Service (hosting, database, payment processing via Stripe, and email delivery), with your organization's administrator as described above, when required by law, or in connection with a merger or acquisition. Our service providers are bound by contract to use information only to provide services to us.

6. Retention and deletion

We keep your account information for as long as your organization's subscription is active and your account is connected. You can disconnect Micro Fitness Club from your Google account at any time at myaccount.google.com/permissions; doing so immediately revokes our access to your calendar. To delete your account and associated data, or to have future session events removed from your calendar, email hello@microfitnessclub.com and we will complete the request within 30 days. When an organization's subscription ends, member data is deleted within 90 days.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can exercise these rights by emailing us. We will not discriminate against you for exercising them.

8. Children

The Service is intended for use by employees of business customers and is not directed to anyone under 16. We do not knowingly collect information from children.

9. Changes

We may update this policy from time to time. If we make material changes, we will notify your organization's administrator by email and update the effective date above.

10. Contact

Micro Fitness Club
Email: hello@microfitnessclub.com