Athlete Privacy Policy - FlexPulse Athletic Club

Athlete Privacy Policy Privacy Policy

How FlexPulse safeguards your biometric telemetry, InBody scans, facility access timestamps, and coaching analytics with zero-knowledge encryption.

Contact DPO Desk

Version: 3.4 Official

Effective: Sept 2026

Encryption: AES-256 Bits

Data Resale: 0% Guaranteed

1. Scope & Athlete Consent

Overview of how FlexPulse collects, processes, and protects your personal and athletic data.

This Privacy Policy governs your use of FlexPulse Athletic Club physical facilities, turnstile access portals, web dashboards (flexpulse.com), mobile companion applications, and integrated biometric telemetry platforms (collectively, the “Services”).

By creating an account, registering for memberships, scanning into facilities, or syncing wearable telemetry, you consent to the data collection and processing practices described herein. We adhere to global data protection benchmarks, including the European Union General Data Protection Regulation (GDPR) and industry-standard health privacy frameworks.

The FlexPulse Data Promise:We collect data solely to optimize your athletic conditioning, calibrate class programming, and secure our facilities. We have never sold, monetized, or brokered athlete telemetry to advertisers, and we never will.

2. Telemetry & Biometrics We Collect

Details on the specific health, fitness, and identity data captured through our hardware and software.

To deliver competition-grade training metrics and safety monitoring, FlexPulse processes the following tiers of data:

Biometric & Physical Scans

• InBody 570 body composition scans (skeletal muscle, visceral fat).
• Target heart rate zones, estimated VO2 Max, and caloric burn.
• 1-Rep max calculations and progressive overload workout logs.
• Coach form assessments and mobility restriction notes.

Account & Security Identity

• Full legal name, verified email, phone number, and emergency contact.
• Keyless RFID turnstile entry timestamps and facility dwell times.
• High-resolution CCTV safety footage at entrance turnstiles.
• Encrypted payment tokens handled directly by Stripe.

3. How We Use Athletic Data

Legitimate purposes for workout split analysis, recovery recommendations, and coaching.

Your data is processed strictly for athletic performance and platform operations:

Real-Time Class Telemetry: Broadcasting your real-time heart rate zone to studio monitors during HIIT, Hyrox, and MetCon classes (optional opt-out available).
Coach Feedback & Program Calibration: Allowing your certified personal trainer to review lifting totals and adjust weekly volume to prevent overtraining.
Recovery Protocol Recommendations: Scheduling Finnish sauna and cold plunge sessions based on reported muscle soreness and heavy lifting sessions.
Safety & Emergency Response: Verifying emergency medical contacts in the event of an acute injury or cardiac anomaly on the training floor.

4. Cryptographic Storage & Security

Enterprise-grade AES-256 encryption, zero-knowledge architecture, and tokenized billing.

We employ state-of-the-art security architectures engineered to protect sensitive physical health records:

AES-256 Encryption at Rest & TLS 1.3 in TransitAll database records containing biometric metrics, body scans, and user credentials are cryptographically encrypted using unique salted keys.

PCI-DSS Level 1 Payment ProcessingFlexPulse servers never store, log, or inspect full credit card numbers or CVVs. All membership transactions are tokenized via Stripe.

5. Wearables & Third-Party Integrations

Protocols for syncing Apple HealthKit, Garmin Connect, Strava, and Whoop.

If you elect to link your third-party wearable devices (such as Apple Health, Garmin, Strava, or Whoop), FlexPulse requests granular read permissions solely for workout heart rate, sleep recovery scores, and daily step volume.

You retain the right to revoke third-party API tokens instantly at any time from your Member Dashboard settings. Revocation immediately halts incoming data streams and severs third-party sync.

6. Athlete Rights & Data Deletion

Right to access, rectify, export, and completely purge your training logs and account.

Under international privacy standards, every FlexPulse member possesses full control over their digital footprint:

Right to Complete Export

Download your complete biometric history, class bookings, and workout logs as an encrypted JSON/CSV package.

Right to Total Erasure

Submit a purge request to delete all biometric scans, CCTV facial verification snapshots, and account records within 30 days.

7. Data Protection Officer & Concierge

Contact information for privacy inquiries, data access requests, or regulatory queries.

For questions regarding this policy, to request data exports, or to exercise your GDPR/HIPAA rights, reach out directly to our dedicated Data Protection Officer:

FlexPulse Privacy & Security Bureau

Email: privacy@flexpulse.com

Concierge Desk: +880 1712-345678

Address: 128 Pulse Blvd, Cyber District, Dhaka, Bangladesh

FlexPulse

Loading…

1. Scope & Athlete Consent

Overview of how FlexPulse collects, processes, and protects your personal and athletic data.

2. Telemetry & Biometrics We Collect

Details on the specific health, fitness, and identity data captured through our hardware and software.

To deliver competition-grade training metrics and safety monitoring, FlexPulse processes the following tiers of data:

Biometric & Physical Scans

• InBody 570 body composition scans (skeletal muscle, visceral fat).
• Target heart rate zones, estimated VO2 Max, and caloric burn.
• 1-Rep max calculations and progressive overload workout logs.
• Coach form assessments and mobility restriction notes.

Account & Security Identity

• Full legal name, verified email, phone number, and emergency contact.
• Keyless RFID turnstile entry timestamps and facility dwell times.
• High-resolution CCTV safety footage at entrance turnstiles.
• Encrypted payment tokens handled directly by Stripe.

3. How We Use Athletic Data

Legitimate purposes for workout split analysis, recovery recommendations, and coaching.

Your data is processed strictly for athletic performance and platform operations:

Real-Time Class Telemetry: Broadcasting your real-time heart rate zone to studio monitors during HIIT, Hyrox, and MetCon classes (optional opt-out available).
Coach Feedback & Program Calibration: Allowing your certified personal trainer to review lifting totals and adjust weekly volume to prevent overtraining.
Recovery Protocol Recommendations: Scheduling Finnish sauna and cold plunge sessions based on reported muscle soreness and heavy lifting sessions.
Safety & Emergency Response: Verifying emergency medical contacts in the event of an acute injury or cardiac anomaly on the training floor.

4. Cryptographic Storage & Security

Enterprise-grade AES-256 encryption, zero-knowledge architecture, and tokenized billing.

We employ state-of-the-art security architectures engineered to protect sensitive physical health records:

AES-256 Encryption at Rest & TLS 1.3 in TransitAll database records containing biometric metrics, body scans, and user credentials are cryptographically encrypted using unique salted keys.

PCI-DSS Level 1 Payment ProcessingFlexPulse servers never store, log, or inspect full credit card numbers or CVVs. All membership transactions are tokenized via Stripe.

5. Wearables & Third-Party Integrations

Protocols for syncing Apple HealthKit, Garmin Connect, Strava, and Whoop.

You retain the right to revoke third-party API tokens instantly at any time from your Member Dashboard settings. Revocation immediately halts incoming data streams and severs third-party sync.

6. Athlete Rights & Data Deletion

Right to access, rectify, export, and completely purge your training logs and account.

Under international privacy standards, every FlexPulse member possesses full control over their digital footprint:

Right to Complete Export

Download your complete biometric history, class bookings, and workout logs as an encrypted JSON/CSV package.

Right to Total Erasure

Submit a purge request to delete all biometric scans, CCTV facial verification snapshots, and account records within 30 days.

7. Data Protection Officer & Concierge

Contact information for privacy inquiries, data access requests, or regulatory queries.

For questions regarding this policy, to request data exports, or to exercise your GDPR/HIPAA rights, reach out directly to our dedicated Data Protection Officer:

FlexPulse Privacy & Security Bureau

Email: privacy@flexpulse.com

Concierge Desk: +880 1712-345678

Address: 128 Pulse Blvd, Cyber District, Dhaka, Bangladesh