MA5 Fitness LLC, doing business as MA5 Performance, operates a training facility at 8441 Kingston St, Avon, IN 46123. This policy explains what personal information we collect, why we collect it, who can see it, and the choices you have.

It applies to three places you may interact with us:

• Our public website, ma5performance.com.
• The MA5 member hub, where members sign in to see training, bookings, billing, and messages.
• MA5 Connect, our iPhone and Android app for members, which can read completed workouts from Apple Health or Health Connect.

It does not cover services we link to but do not operate, such as Mindbody's booking site. Those services handle your information under their own policies.

If you choose to connect Apple Health in MA5 Connect, the app reads completed workouts recorded by your Apple Watch or other Apple Health–compatible apps and sends them to your MA5 account. Connecting Apple Health is optional, and MA5 Connect works without it.

On Android, you can optionally connect Health Connect. MA5 Connect reads completed exercise sessions written to Health Connect by compatible fitness apps and devices, including available active calories, heart-rate samples, distance, source app, and device provenance. Availability depends on what the source writes to Health Connect; a source name does not by itself mean MA5 has certified that provider.

We read only the following, and only for completed workouts:

• Workouts — the activity type (for example Functional Strength Training or Walking), the start and end time, and the duration.
• Active energy — the active calories recorded during the workout.
• Heart rate — the average, minimum, and maximum heart rate during the workout.
• Walking and running distance — the distance recorded during the workout.
• Cycling distance — the distance recorded during a cycling workout.

Along with each workout we record where it came from: the name of the source app, its identifier, and the device name (for example "Apple Watch"). This lets us show you the origin of an entry and avoid importing the same workout twice.

We use this information for one purpose: to show your training activity to you in MA5, and to the MA5 coaches and staff responsible for your training, so your coach can see how your week actually went alongside the program they assigned you.

MA5 Connect requests read access only. It never writes to, changes, or deletes anything in Apple Health or Health Connect. Android background-read access is optional and is used only to schedule automatic completed-workout imports.

Information we obtain from Apple Health or Health Connect is never used for advertising or marketing, never used to build advertising profiles, never used for tracking across other companies' apps or websites, and never sold or shared with data brokers. It is not disclosed to any third party except the infrastructure providers listed below that store and transmit it so we can operate the service.

You can change or withdraw Apple Health access at any time in iOS Settings under Health, then Data Access & Devices, then MA5 Connect. The app links you there from Settings, under Health Permissions. Withdrawing access stops new workouts from being imported; workouts already imported stay in your MA5 account until you ask us to remove them.

On Android, you can change or withdraw Health Connect access from MA5 Connect Settings under Health Permissions or from Android's Health Connect settings. Withdrawing access stops new imports; workouts already imported stay in your MA5 account until you ask us to remove them.

Account and profile. Your name and preferred name, email address, phone number, profile photo if you add one, and any emergency contact you give us, including that person's name, relationship to you, phone number, and any notes you add.

Training. The programs and workouts your coach assigns you, the workouts you mark complete, the sets, reps, and weights you log, notes you add to a workout, goals you set, and any progress photos you upload.

Activity from Apple Health or Health Connect. As described in the section above.

Bookings and attendance. The sessions you book, your confirmation number, booking status, and any notes attached to the booking.

Payments. Purchases, memberships, subscriptions, invoices, refunds, and session credits. Depending on the transaction, payment-related operations may be processed through Stripe or Mindbody. We retain business transaction records such as the amount, status, payment method type, and provider identifiers. The MA5 database does not store full payment card numbers.

InBody assessments. MA5 keeps physical paper sheets for InBody scans performed through the facility. These offline assessment records are separate from the MA5 database. MA5 Connect and the MA5 database do not currently import or store InBody scan results. Members may separately use InBody's own app to view current and historical scans.

Communications. Messages between you and MA5 staff, announcements sent to you and whether they were delivered and read, in-app notifications, your notification preferences, and — if you turn on push notifications — the subscription details your browser provides so we can deliver them.

Waivers. Which waiver version you accepted and when. To keep a reliable record, we also store the IP address and browser user agent used at the moment of acceptance.

Community. Posts you write in the member community and any photos or video you attach.

Enquiries. If you fill in a contact or booking request form, the name, email, phone number, and message you provide.

Website visits. When you browse the public website we record the page you landed on, the site that referred you, any campaign parameters in the link, the pages you view, and your browser user agent. This is stored against a random visitor identifier rather than your name, and we do not store your IP address for this purpose.

• To provide coaching: build and assign your programs, track your training, and let your coach see your progress and activity.
• To run your membership: bookings, attendance, session credits, payments, invoices, and refunds.
• To communicate with you: messages from your coach, session reminders, announcements, program updates, and billing notices, according to the notification preferences you set.
• To keep the facility and its records in order: waiver acceptance records and facility access.
• To operate and improve the website and apps, including understanding which pages and campaigns bring people to us.
• To keep accounts secure and to investigate misuse.

We do not sell your personal information, we do not share it for cross-context behavioural advertising, and we do not use it to build advertising profiles.

You can see your own profile, training, activity, bookings, billing, and messages when you sign in.

MA5 owners, administrators, staff, and coaches can see member information needed to run the facility and coach you. This includes your profile and emergency contact, your assigned training and logged workouts, your imported Apple Health or Health Connect activity, your bookings and attendance, your messages with staff, your waiver status, and your progress photos. Financial detail is limited to the accounts that need it.

Other members cannot see your profile, training, activity, billing, or messages. They can see what you choose to post in the member community.

We use a small number of providers to run the service. They process information on our behalf and are not permitted to use it for their own purposes.

• Supabase — hosts the MA5 database, member sign-in, and file storage used by our online services. Physical InBody sheets and information held in separate third-party services are not stored there.
• Vercel — hosts and serves the website and apps, and as part of that processes standard request information such as your IP address and browser. Vercel Analytics and Speed Insights collect aggregate page performance and traffic measurements. They do not use cookies to identify you and are not used for advertising.
• Stripe — processes some payments and hosts its checkout page where you enter card details. Stripe receives your email address and purchase details for those transactions.
• Resend — delivers our transactional email, such as invitations, password resets, and staff notifications. Resend receives the recipient address and the message.
• Apple — where you enable it, Apple Push and Apple Health are used on your device. Health data is read on your device and sent to MA5, not to Apple.
• Google — on Android, where you enable it, Health Connect provides the on-device health data store and permission controls. MA5 Connect reads only the records you authorize and sends the selected workout summary to MA5.
• Google Cloud — used only when video processing is enabled, to convert community videos after upload.
• Mindbody — remains in active use for booking, payment information, and related operations. MA5 may also import business payment records exported from Mindbody. Information you enter or maintain in Mindbody is handled under Mindbody's privacy practices.

The InBody app is a separate third-party service that MA5 does not operate or control. If you use it to view scan results, InBody handles information in that app under its own privacy practices. MA5 Connect does not retrieve those results from the InBody app.

Some exercise demonstrations embed video from YouTube or Vimeo. Playing an embedded video loads content from that provider, which may set its own cookies.

We may also disclose information if we are required to by law, or to protect the rights, safety, or property of members, staff, or MA5.

Signing in sets cookies that keep you signed in. These are necessary for the member hub to work.

On the public website we set first-party cookies holding a random visitor identifier and the campaign details of your first and most recent visit. They last 90 days and let us understand which marketing brings people to MA5. They are not used for advertising, and they are not shared with advertising networks.

You can clear or block cookies in your browser settings. Blocking sign-in cookies will prevent the member hub from working.

• Anonymous website visit records are deleted automatically after 90 days.
• Community photos are kept for up to one year and community videos for up to 90 days, where automatic clean-up is enabled.
• Waiver acceptance records are kept as a permanent record of what was agreed and when.
• MA5 generally removes stored payment information within a few months after a membership ends, where MA5 controls that information, unless it has already expired or been removed earlier.
• Transaction, payment, invoice, and refund records may be retained separately for business, accounting, legal, or recordkeeping purposes.
• Training history, including workouts already imported into MA5, may be retained after a membership ends.
• When a membership ends, MA5 may deactivate the member account. Ending a membership does not automatically delete the entire MA5 account or all associated records.

You can ask us to delete your information at any time using the contact details below.

For request instructions and details about what account removal does and does not erase, see MA5 Connect Account & Data Deletion.

• Access and correction — you can view and update your profile, preferred name, phone number, emergency contact, and notification preferences when signed in. For anything else, contact us and we will help.
• Deletion — email us to request deletion of your account and the information we hold about you. We will explain what we can delete and what we are required to keep, such as financial and waiver records.
• Apple Health — connect or disconnect at any time in iOS Settings under Health, then Data Access & Devices. You can also ask us to delete activity already imported into MA5.
• Health Connect — connect or disconnect at any time in Android Health Connect settings. You can also ask us to delete activity already imported into MA5.
• Notifications — change which emails and push notifications you receive in your profile settings, or turn off notifications for the site in your browser or device settings.
• Marketing — reply to any marketing email asking to be removed, or contact us.

Depending on where you live, you may have additional rights over your personal information. Contact us and we will respond.

Traffic between your device and MA5 is encrypted in transit. Access to member records is restricted by role, enforced in the database rather than only in the interface, so members can reach only their own records. On your iPhone, MA5 Connect stores your sign-in session in the iOS Keychain, marked so it stays on that device and is not synced to iCloud.

No system is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.

MA5 currently trains members under age 18. A parent or legal guardian signs the MA5 waiver and authorizes the minor's MA5 account.

There is no public self-registration. Accounts for minors are created by MA5 staff through the parent or legal guardian rather than by the minor independently.

If you are a parent or guardian and would like to review, correct, or delete information about your child, contact us and we will take care of it.

If we change how we handle personal information, we will update this page and change the effective date at the top. If the change is significant, we will tell members directly.

Questions about this policy, or requests to access, correct, or delete your information, can be sent to mike@ma5performance.com, or by post to MA5 Fitness LLC, 8441 Kingston St, Avon, IN 46123.