Privacy Policy

Personal Information

When you join ELITE Gym & Fitness, we collect information such as:

• Name and email address for account creation
• Profile picture (optional)
• Phone number for trainer session coordination
• Payment information (processed securely through Stripe in LKR)
• Fitness goals, health conditions, and preferences for voice AI consultations
• Membership tier selection (Basic Rs. 2,500, Premium Rs. 3,000, Couple Rs. 4,500)

Usage Information

We automatically collect information about how you use our services, including:

• Pages visited and features used
• AI consultation recordings and transcripts (for program generation)
• Workout progress and statistics
• Device information and IP address
• Cookies and similar tracking technologies

We use your information to:

• Provide 24/7 access to our fitness platform and voice AI consultations
• Generate personalized workout and nutrition plans (300+ programs created)
• Process membership payments and marketplace transactions in LKR
• Coordinate trainer sessions (available 6AM-10PM daily, all included with membership)
• Provide 24/7 gym access for Premium members with swipe card entry
• Send updates about our Kandy locations and new features
• Maintain our 4.8+ star rating through continuous improvement
• Provide AI chatbot support and customer assistance

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

• With Certified Trainers: When booking sessions (all included with membership), we share relevant fitness information with your chosen trainer
• Service Providers: Stripe for LKR payments, Clerk for authentication, Convex for data storage, VAPI for AI consultations
• Marketplace Partners: For supplement and equipment deliveries within Sri Lanka
• Legal Requirements: When required by Sri Lankan law or to protect member safety

We implement robust security measures to protect your information:

• All data is encrypted in transit and at rest
• Payment information is processed securely through Stripe (PCI DSS compliant)
• Regular security audits and updates
• Access controls and authentication measures
• Secure cloud infrastructure with leading providers

While we strive to protect your information, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and keep your account information confidential.

You have several rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information in your profile
• Deletion: Request deletion of your account and associated data
• Portability: Export your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications
• Restrict Processing: Limit how we use your information

To exercise these rights, please contact us at privacy@elitegym.com or through your account settings.

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for platform functionality and security
• Performance Cookies: Help us understand how you use our platform
• Functional Cookies: Remember your preferences and settings
• Analytics: Aggregate usage statistics to improve our services

You can control cookie preferences through your browser settings, though this may affect platform functionality.

Our platform integrates with several third-party services:

• Clerk: Authentication and user management
• Stripe: Payment processing and billing
• Convex: Database and real-time functionality
• Vercel: Platform hosting and deployment
• VAPI: AI voice consultation services

These services have their own privacy policies, and we encourage you to review them.

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account information: Until you delete your account
• Payment records: 7 years for tax and legal purposes
• AI consultation data: Until you request deletion
• Usage analytics: Anonymized after 2 years

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Our services are hosted in the United States. If you are accessing our platform from outside the US, please be aware that your information may be transferred to, stored, and processed in the US where our servers are located and our central database is operated.

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a prominent notice on our platform. Your continued use of our services after such modifications constitutes acknowledgment and acceptance of the updated Privacy Policy.

If you have any questions about this Privacy Policy or our data practices, please contact us: