Privacy Policy

FITSPAN STUDIOS  |  Effective and last updated August 14, 2026

Privacy at FitSpan
This Policy explains how UpLevel Labs, Inc., along with its affiliates and wholly owned subsidiaries, collects, uses, discloses, retains, and protects personal information through FitSpan Studios websites, services, memberships, assessments, marketing, and franchise activities.

1. Who We Are and When This Policy Applies

This Privacy Policy applies to personal information processed by UpLevel Labs, Inc. ("FitSpan," "we," "us," or "our") through fitspanstudios.com and other websites or digital services that display or link to this Policy; FitSpan membership, scheduling, assessment, customer-service, and marketing systems; FitSpan Score and other fitness or longevity assessments; franchise-development inquiries; and related online and offline interactions.

FitSpan studios may be independently owned and operated by franchisees. This Policy applies when UpLevel Labs, Inc. processes information, including information stored centrally in Mindbody. A franchisee may also maintain records independently for the life of its business and may be a separate business responsible for its own privacy practices. Contact the applicable studio regarding records that it controls independently.

"Personal information" or "personal data" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. It generally excludes deidentified or aggregated information and information excluded by applicable law.

2. Personal Information We Collect

A. Identifiers and contact information

We may collect names, postal addresses, email addresses, telephone numbers, dates of birth or ages, account or member identifiers, signatures, emergency-contact information, and similar identifiers.

B. Membership and transaction information

We may collect membership type and status, selected studio, reservations, waitlists, attendance history, purchases, returns, discounts, payment status, waivers, consents, acknowledgments, guest passes, referrals, challenges, events, and customer-service records. Payment-card transactions are generally handled by third-party processors. We may receive a token, payment status, card type, expiration date, or limited card information, but generally do not retain complete payment-card numbers.

C. Fitness, wellness, and health-related information

When voluntarily provided or reasonably needed to deliver services safely, we may collect fitness goals; exercise experience; height, weight, and age; disclosed injuries, physical limitations, medical conditions, medications, or medical clearance; health-questionnaire and exercise-readiness responses; resting heart rate and heart-rate recovery; strength, endurance, balance, mobility, flexibility, and performance measurements; FitSpan Score results; trainer observations; exercise modifications; incident and emergency-response information; and assessment photographs or videos.

This information may be sensitive personal information or consumer health data. FitSpan is a fitness and wellness company and generally is not a healthcare provider, health plan, or healthcare clearinghouse. Information provided to FitSpan is therefore generally not protected by HIPAA, although other privacy, security, breach-notification, and consumer-protection laws may apply.

D. Internet, device, advertising, and analytics information

When you use our websites, we and our providers may automatically collect IP address, browser and operating-system information, device and advertising identifiers, referring and exit pages, pages viewed, links selected, session dates and duration, approximate location derived from IP address, cookie and pixel identifiers, and interactions with emails, text messages, advertisements, or website features.

FitSpan uses Google Analytics, Google Ads, Meta advertising technologies, and related cookies, pixels, and measurement tools. These providers may receive identifiers, device information, internet activity, and information about interactions with FitSpan websites or advertising, subject to their own terms and privacy practices.

E. Communications and marketing information

We may collect email and text-message preferences; responses to lead forms, advertisements, surveys, and promotions; call, email, text, and chat records; social-media interactions; referral sources; and consent and opt-out records. FitSpan uses Attentive for certain text-message and marketing communications. Calls may be monitored or recorded where permitted by law and after any notice or consent required by law.

F. Photographs, video, audio, and premises information

We may collect photographs, video, or audio when you participate in an assessment, submit a testimonial, attend a disclosed recorded event or class, or enter a location using security cameras. A separate consent or release may apply to marketing uses of your image, voice, or likeness.

G. Franchise and business information

For franchise or business inquiries, we may collect employment and business history, professional qualifications, geographic preferences, ownership interests, financial qualifications, proposed-owner information, communications, and lawful due-diligence information.

H. Information about others and inferences

You may provide information about an emergency contact, family member, guest, referral, or business partner only when authorized to do so. We may derive inferences such as likely interests, engagement level, membership preferences, selected studio, or recommended fitness programming. We do not use sensitive health information to make decisions producing legal or similarly significant effects without any notice and consent required by law.

3. Sources of Personal Information

We collect information directly from you; from your use of our websites and services; from independently operated FitSpan studios; through Mindbody, Attentive, payment, customer-relationship, and marketing systems; from Meta, Google, analytics providers, lead-generation services, referral partners, or social-media platforms; from people acting on your behalf; from professionals when you authorize disclosure; and from public or commercially available sources where lawful.

4. How We Use Personal Information

  • Create and administer accounts, memberships, reservations, assessments, and transactions;

  • Provide FitSpan Score assessments, track results, personalize programming, and recommend exercise modifications;

  • Communicate about reservations, waitlists, purchases, memberships, safety matters, and service changes;

  • Evaluate exercise readiness, address disclosed limitations, respond to incidents or emergencies, and maintain safety records;

  • Respond to inquiries and provide customer support;

  • Send marketing, promotional, and presale communications with any required consent;

  • Personalize and measure advertising, analyze website traffic, attribute leads, and evaluate campaign performance;

  • Operate Mindbody and other centralized systems and support franchise operations;

  • Conduct surveys, research, challenges, events, referral programs, quality assurance, and staff training;

  • Develop and improve services, programming, equipment, websites, and technology;

  • Detect errors, fraud, abuse, security incidents, or unlawful activity and protect FitSpan, its members, franchisees, personnel, and others;

  • Maintain records, enforce agreements, establish or defend legal claims, and complete business transactions; and

  • Comply with laws, regulations, legal process, accounting, tax, insurance, and safety obligations.

Consent to marketing text messages is not a condition of purchase. Message and data rates may apply. Reply STOP to opt out and HELP for help. Transactional or service-related communications may continue where permitted by law.

5. Sensitive Personal Information and Consumer Health Data

Fitness assessments, health questionnaires, injuries, physical limitations, heart-rate measurements, mobility data, assessment images, and similar information may qualify as sensitive personal information or consumer health data. Where required by law, we will obtain consent, limit collection to reasonably necessary information, restrict access, use appropriate contractual and security safeguards, allow withdrawal of consent, and honor applicable access, deletion, and other rights.

FitSpan does not knowingly sell consumer health data for monetary consideration and does not intend to use it to determine eligibility for employment, insurance, credit, housing, or services unrelated to FitSpan fitness and wellness offerings. We may disclose consumer health data to Mindbody and other processors necessary to provide services, to the applicable FitSpan studio, as directed by you, or as otherwise permitted or required by law.

6. Cookies, Analytics, and Advertising

FitSpan and its providers, including Google and Meta, use cookies, pixels, tags, local storage, and similar technologies to operate and secure websites, remember settings, analyze traffic, diagnose errors, identify lead sources, measure campaigns, and deliver or measure interest-based advertising.

You can manage cookies through your browser or device settings and through controls offered by Google, Meta, or other providers. Blocking cookies may affect functionality. FitSpan does not currently provide a separate "Your Privacy Choices" website interface. Where applicable law provides an opt-out right, you may submit a request by emailing info@fitspanstudios.com with the subject line "Privacy Opt-Out." We will also process legally recognized browser-based universal opt-out signals, such as Global Privacy Control, when required by applicable law and technically received by our website.

7. Sale, Sharing, and Targeted Advertising

FitSpan does not sell personal information for money in the traditional sense. Some state laws, however, define "sale," "sharing," or "targeted advertising" broadly. Allowing Google, Meta, or other advertising providers to collect identifiers and internet activity through advertising technologies may constitute a sale, sharing, or targeted-advertising activity under those laws.

Where applicable, you may opt out by emailing info@fitspanstudios.com with the subject line "Do Not Sell or Share" and identifying the email address associated with your FitSpan interaction. You may also enable a legally recognized universal opt-out signal. Cookie-specific choices may be device- and browser-specific. We do not knowingly sell or share for targeted advertising the personal information of individuals under 16.

8. How We Disclose Personal Information

We may disclose personal information to:

  • Service providers and contractors, including Mindbody, Attentive, website hosts, payment processors, communications providers, cloud hosts, assessment technology providers, security vendors, consultants, and records-management providers;

  • Google, Meta, and other analytics or advertising partners, subject to applicable choices and rights;

  • FitSpan affiliates and the FitSpan studio you select or visit, to deliver services and support consistent operations;

  • Professional advisors, including attorneys, accountants, auditors, insurers, financial institutions, and consultants;

  • Parties involved in an actual or proposed merger, financing, acquisition, reorganization, bankruptcy, investment, sale of assets, or similar transaction;

  • Governmental authorities, courts, law enforcement, or others when reasonably necessary to comply with law, enforce agreements, investigate wrongdoing, protect safety or rights, or respond to an emergency; and

  • Other parties at your direction or with your consent.

Service providers may process information only as permitted by contract and applicable law. Independently owned studios may separately control records they maintain for the life of their businesses and may use their own vendors or systems.

9. Deidentified and Aggregated Information

We may create and use deidentified or aggregated information for research, benchmarking, analytics, service improvement, and franchise planning. Where required, we will maintain it in deidentified form, take reasonable measures to prevent reidentification, and not attempt to reidentify it except to test deidentification processes or as otherwise permitted by law.

10. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain accurate records, satisfy legal, tax, accounting, insurance, contractual, safety, and franchise obligations, resolve disputes, prevent fraud, and establish or defend claims. Retention depends on the relationship, purpose, sensitivity, applicable limitation periods, and backup requirements.

Some membership, contact, transaction, attendance, communication, and assessment information is stored centrally in Mindbody for the duration reasonably necessary for these purposes. Independently operated franchisees may maintain separate business, membership, safety, incident, or operational records for the life of their businesses and longer when required by law or reasonably necessary for claims, insurance, tax, or recordkeeping purposes. When information is no longer required, it may be deleted, deidentified, or securely isolated until deletion is feasible.

11. Security and Breach Response

We use administrative, technical, and physical safeguards designed to protect personal information, which may include access controls, authentication, encryption where appropriate, vendor diligence, contractual safeguards, security monitoring, incident-response procedures, training, and secure disposal. No system is completely secure, and we cannot guarantee that unauthorized access or disclosure will never occur.

We will investigate suspected security incidents and provide notifications as required by applicable law, including consumer-health-data breach-notification requirements that may apply outside HIPAA.

12. Your Privacy Rights

Depending on where you live and subject to legal exceptions, you may have the right to confirm processing; access or obtain a copy; correct; delete; obtain portable data; opt out of sale, sharing, or targeted advertising; limit certain uses of sensitive information; withdraw consent; opt out of certain profiling; obtain information about certain recipients; appeal a decision; and receive equal service without unlawful discrimination for exercising privacy rights.

These rights are not absolute. We may deny or limit a request where permitted, including when information is needed to complete a transaction, comply with law, protect safety or security, prevent fraud, exercise legal rights, or maintain privileged or confidential records.

13. Submitting a Privacy Request

Submit requests to info@fitspanstudios.com or by mail to: UpLevel Labs, Inc., Attn: Privacy, 7 Ridge Road, Weston, CT 06883. Describe the request and provide sufficient information for us to understand and respond. For advertising opt-outs, use the subject line "Privacy Opt-Out" or "Do Not Sell or Share."

We may verify identity by matching information you provide with information already maintained. An authorized agent may submit a request where permitted, subject to proof of authorization and direct identity verification. We will respond within the time required by law. If we deny a request and your state provides an appeal right, reply to our decision with the subject line "Privacy Appeal." You may also contact your state attorney general or privacy regulator where applicable.

14. California Privacy Notice

This section supplements this Policy for California residents if FitSpan is subject to the California Consumer Privacy Act, as amended (CCPA). During the preceding 12 months, FitSpan may have collected the categories described in Section 2: identifiers; customer-record information; characteristics protected under law; commercial information; internet or electronic-network activity; approximate geolocation; audio, electronic, visual, or similar information; professional information; sensitive personal information; and inferences. We use and disclose these categories for the purposes and to the recipients described in Sections 4 and 8.

FitSpan does not sell personal information for money. Advertising-related disclosures to Google, Meta, or similar providers may constitute "sharing" or "sale" under California law. California residents may have rights to know, access, correct, delete, opt out of sale or sharing, limit certain uses of sensitive personal information, and be free from unlawful discrimination. Submit requests as described in Section 13. We do not use or disclose sensitive personal information to infer characteristics except as permitted by law.

California residents may also request information concerning certain disclosures for third parties' direct-marketing purposes under California's Shine the Light law by contacting us as described in Section 13.

15. Other U.S. State Rights

Residents of states with applicable comprehensive privacy or consumer-health-data laws may exercise their available rights through Section 13. State-specific definitions, thresholds, exceptions, verification procedures, appeal rights, and cure periods may apply. Where required, we recognize qualifying universal opt-out mechanisms for targeted advertising or sale. Nevada residents may submit a verified request to opt out of covered sales; FitSpan does not currently sell covered information for monetary consideration as "sale" is defined by Nevada law.

16. Marketing Communications

Select the unsubscribe link in a promotional email or reply STOP to a marketing text message. You may still receive non-promotional messages concerning accounts, reservations, payments, safety, policy changes, and requested services. A franchisee that sends communications through systems it controls independently may require a separate opt-out request.

17. Minors

FitSpan websites and online services are not directed to children under 13, and we do not knowingly collect personal information online from children under 13 without legally required verifiable parental consent. FitSpan services are available to minors only if they are at least 16 years old, the applicable studio permits their participation, and a parent or legal guardian provides required consent and completes applicable waivers and documentation.

We do not knowingly sell or share for targeted advertising the personal information of anyone under 16. If you believe a child provided information without proper authorization, contact info@fitspanstudios.com so we can investigate and take appropriate action.

18. Third-Party Services and Social Media

Our websites and communications may link to or integrate with independently operated services, including Mindbody, Attentive, Google, Meta, payment processors, mapping services, and social-media platforms. Their collection and use are governed by their own notices and settings when they act independently. Social-media buttons, embedded content, and pixels may allow the platform to collect IP address, device identifiers, browsing activity, or interaction data even when you do not actively use the feature.

19. International Visitors

FitSpan is based in the United States and primarily serves U.S. residents. If you access our services from another country, information may be transferred to and processed in the United States or other jurisdictions whose laws differ from those in your country. We will use appropriate transfer safeguards when required by applicable law.

20. Do Not Track and Universal Opt-Out Signals

Because there is no universally accepted standard for all browser "Do Not Track" signals, our websites may not respond to them. We will process legally recognized universal opt-out signals, including Global Privacy Control, where required by applicable law and technically received.

21. Changes to This Policy

We may update this Policy to reflect changes in services, technology, practices, or law. We will update the "Last Updated" date and, for material changes, may provide additional notice through the website, email, an account, a studio, or another appropriate method. Unless stated otherwise, an updated Policy is effective when posted.

22. Contact Us

Questions, complaints, and privacy requests may be directed to:

UpLevel Labs, Inc.
Attn: Privacy
7 Ridge Road
Weston, CT 06883
Email: info@fitspanstudios.com
Website: fitspanstudios.com

If your request concerns records maintained independently by a franchised FitSpan studio, contact that studio directly. UpLevel Labs, Inc. may assist in directing the request to the appropriate operator.