Partner Privacy Policy
Version 2026-09-08 · Last updated October 19, 2026
This Privacy Policy explains how FTNSS handles the information you and your staff provide as a partner. It is distinct from the consumer privacy policy.
1. What we collect
Account and organization details, location and payout information, and product-usage analytics to improve the operator experience.
2. How we use it
To operate your gym on FTNSS, process payouts, provide support, and improve the product. Analytics are consent-gated by region.
3. Member information
Member data you access through FTNSS remains subject to the member's own privacy choices and applicable law.
4. Service providers
We use the service providers (sub-processors) below to run FTNSS. Unless an entry says otherwise, each one processes data only on our instructions and only for the purpose listed here.
Running FTNSS
Supabase, Inc.
Purpose: Hosts our database, sign-in and file storage, and runs our background jobs.
Data: Everything you and your staff enter in FTNSS, including account, organization, location and staff details, the member information your gym can see, and uploaded photos and documents.
Location: United States (Ohio)
Privacy policy: supabase.com/privacy
Vercel Inc.
Purpose: Hosts the partner website and app.
Data: The requests your browser sends, including your IP address and sign-in session, and the information you submit in the app.
Location: United States, served through a global delivery network
Privacy policy: vercel.com/legal/privacy-policy
Resend
Purpose: Sends our emails, such as sign-in codes, staff invitations and notifications.
Data: Names, email addresses and the content of each email.
Location: United States
Privacy policy: resend.com/legal/privacy-policy
Twilio Inc.
Purpose: Sends text messages: sign-in codes, and staff invitations you choose to send by text.
Data: Phone numbers and the content of each message.
Location: United States
Privacy policy: twilio.com/en-us/legal/privacy
Cloudflare, Inc. (Turnstile)
Purpose: Bot protection on sign-in, account and security actions, and forms.
Data: Your IP address and technical details about your browser and device.
Location: Cloudflare's global network
Privacy policy: cloudflare.com/privacypolicy
Features
Anthropic, PBC (the Claude API)
Purpose: Automated safety screening of messages. When a message sent between members in FTNSS messaging is escalated for safety review, its text and up to five earlier messages from the same conversation are sent to Anthropic to assess the risk. A message assessed as harmful can be hidden automatically, and a person confirms any action that ends an account. When AI insights are available to your organization, Anthropic will also receive your organization's aggregate business figures and location names to write your weekly summary. No member personal data is sent for insights.
Data: Message text and the account IDs of the people in the conversation. For insights: aggregate figures and location names only.
Location: United States
Privacy policy: anthropic.com/legal/privacy
PostHog, Inc.
Purpose: Product analytics that help us improve FTNSS. Nothing is collected until you accept analytics.
Data: Your account ID and email address, the pages you visit and the actions you take in the app.
Location: United States
Privacy policy: posthog.com/privacy
650 Industries, Inc. (Expo)
Purpose: Delivers push notifications to members' phones, for example when your gym changes or cancels a class they booked.
Data: The member's device notification token and the notification text.
Location: United States
Privacy policy: expo.dev/privacy
Microsoft Corporation (PhotoDNA)
Purpose: Checks photos and files uploaded to FTNSS against known child sexual abuse material, as part of our safety program.
Data: The uploaded image.
Location: United States
Privacy policy: microsoft.com/en-us/privacy/privacystatement
Apple Inc. (WeatherKit)
Purpose: Weather forecasts for your locations.
Data: The map coordinates of your locations. No information about you, your staff or your members.
Location: United States
Privacy policy: apple.com/legal/privacy
komoot GmbH (Photon address search)
Purpose: Finds and checks addresses when you add or edit a location. We use the result to place the location on the map and set its time zone.
Data: Only the address text typed when you add or edit a location. Requests come from our servers, so your IP address and account details are not shared.
Location: Germany
Note: This is komoot's public address search service. We do not have a contract with komoot that limits how it uses the address text it receives.
Privacy policy: komoot.com/privacy
If you book a demo with us
Google LLC (Google Calendar and Google Meet)
Purpose: Schedules your demo, sends you a calendar invitation and hosts the video call.
Data: Your name, email address, the time you chose and your answers on the booking form.
Location: United States
Privacy policy: policies.google.com/privacy
Slack Technologies, LLC
Purpose: Tells our team when you book, move or cancel a demo.
Data: Your name, email address, the time you chose and your answers on the booking form.
Location: United States
Privacy policy: slack.com/trust/privacy/privacy-policy
If you choose to sign in with Google or Apple, that company confirms who you are and shares your name and email address with us. Its own privacy policy applies.
Payments and payouts are not switched on yet. We will add our payment provider to this list before they are.
5. Your choices
You can access, correct, or export your data, and manage analytics consent, from your settings or by contacting support.