Privacy Policy

BCI Innovation Labs ("we", "us", or "our") operates EvoFit (evofit.io), a comprehensive fitness platform that provides workout programming (EvoFit Trainer) and nutrition planning (EvoFit Meals) tools for personal trainers and fitness professionals.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

Personal Information

We may collect the following personal information when you register for an account or use our services:

• Account Information: Name, email address, username, password
• Profile Information: Professional credentials, business information, profile photo
• Contact Information: Phone number, business address (optional)
• Payment Information: Processed securely through Stripe (we do not store payment card details)

Usage Data

We automatically collect certain information when you use our platform:

• Device information (IP address, browser type, operating system)
• Usage patterns (features accessed, time spent, click patterns)
• Performance data (page load times, error logs)
• Log data (access times, pages viewed, referring URLs)

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze platform usage and performance
• Provide personalized content and features

We use the information we collect for the following purposes:

• Provide Services: Create and manage your account, deliver our workout and nutrition tools
• Platform Improvement: Analyze usage patterns to enhance features and user experience
• Communication: Send important updates, security alerts, and customer support responses
• Analytics: Generate aggregated insights about platform performance and user behavior
• AI Features: Power AI-generated workout programs and meal planning recommendations
• Security: Detect and prevent fraud, abuse, and security threats
• Legal Compliance: Meet regulatory requirements and enforce our terms of service

We do NOT sell, rent, or trade your personal information. We only share your information in the following limited circumstances:

Service Providers

• Stripe: Payment processing and billing management
• Vercel: Hosting and content delivery infrastructure
• ConvertKit: Email communications and marketing automation
• Analytics Providers: Aggregated usage statistics and performance monitoring

Legal Requirements

We may disclose your information if required by law, legal process, or to:

• Comply with court orders, subpoenas, or regulatory requests
• Protect our rights, property, or safety
• Investigate potential violations of our terms of service
• Respond to claims of illegal activity or policy violations

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active
• Usage Logs: Retained for up to 2 years for security and analytics purposes
• Payment Records: Retained for 7 years as required by financial regulations
• After Account Deletion: Personal data deleted within 30 days (except as legally required)

Under Canadian privacy laws (PIPEDA) and international regulations (GDPR), you have the following rights:

Canadian Users (PIPEDA)

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Withdrawal of Consent: Opt-out of certain data processing activities
• Complaint: File a complaint with the Privacy Commissioner of Canada

International Users (GDPR)

• Right to Access: Obtain confirmation and copies of your data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Export your data in a machine-readable format
• Right to Object: Opt-out of certain processing activities

To exercise these rights, contact us at info@bcinnovationlabs.com. We will respond within 30 days of receiving your request.

We use the following types of cookies:

• Essential Cookies: Required for login and core platform functionality
• Performance Cookies: Help us understand how users interact with our platform
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Provide insights into usage patterns and performance

You can control cookies through your browser settings, but disabling certain cookies may limit platform functionality.

EvoFit is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will delete such information from our systems.

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted using TLS encryption
• Access Controls: Strict internal access controls and authentication
• Regular Audits: Security assessments and vulnerability testing
• Data Minimization: We only collect and retain necessary information
• Secure Infrastructure: Cloud hosting with enterprise-grade security

While we implement robust security measures, no system is 100% secure. We encourage users to use strong, unique passwords and enable two-factor authentication when available.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Displaying a prominent notice on our platform

Your continued use of EvoFit after any changes indicates your acceptance of the updated Privacy Policy.

If you have questions about this Privacy Policy or our privacy practices, please contact us: