Privacy Policy
Covers the CheckerFit product (check-ins, plans, readings, reports). The website on its own has a separate notice.
1. Who processes your data
Controller: Roman & Goderich Investment LLC, Florida, USA. Privacy contact: privacy@checkerfit.com. For your check-in data your coach decides which clients to enroll and for what purpose, and CheckerFit processes that data on the coach’s behalf; for your account data, platform security and service improvement, CheckerFit is the controller.
2. What data we collect
| Category | Data | Whose | Basis |
|---|---|---|---|
| Account | Email, name, language, country and state (where collected) | Coach and client | Contract |
| Channel identifiers | Discord ID, phone (coaches) | Whoever uses them | Contract |
| Biometric data | Body photos (location metadata removed, face pixelated irreversibly) and the measurements and physique readings derived from them | Client | Written release signed by the client before the first photo |
| Body data | Weight, measurements you type, age, biological sex; injuries, conditions, medications and allergies you declare | Client | Two separate health data consents (collect and share) |
| Habits | Meals, training, sleep, water, adherence | Client | Two separate health data consents (collect and share) |
| Declared substances | Supplements; separately, declared drugs, peptides and steroids | Client, optional | Separate express consent |
| Derived | Plans, progress comparisons, PDF reports (the readings and measurements taken from photos are listed under Biometric data) | Generated | Contract and consent |
| Records | Coach approvals, consents (version, date, fingerprint of the text), rights requests | Generated | Legal obligation / legitimate interest |
| Payment | Plan and subscription status (Stripe holds the card details) | Coach | Contract |
| Technical | IP, browser, access logs | Everyone | Legitimate interest (security) |
We treat body photos and what is derived from them as biometric data out of caution, because a body photo analyzed for physique may fall under biometric privacy laws. We do not use them to identify anyone: there is no facial recognition, no matching against other people and no identification template. We do not collect precise geolocation.
Consumer health data has its own policy (Consumer Health Data Privacy Policy, in this same legal section), with the rights that Washington and Nevada laws give.
3. What we use it for
- Calculating nutrition and training plans with deterministic formulas.
- Producing a first reading of photos and data with an AI model, which the coach reviews.
- Comparing check-ins over time (progress).
- Generating and delivering reports to the coach and the client.
- Operating the account, billing and support.
- Protecting the platform and meeting legal obligations.
- Improving the service with aggregate data that identifies no one.
We do not use your data for advertising, we do not sell it and we do not pass it to third parties other than the providers in section 5. Biometric data in particular is never sold, leased, traded or disclosed for anyone’s profit, and is disclosed only, under your release, to your coach and to the providers that process it for us, or when the law requires it. We do not train AI models with your photos or your data.
4. Automated decisions
No decision that affects you is made by a machine alone. The AI produces a reading; a person (your coach) reviews it and approves or discards it. Macro calculations are published formulas, not models.
5. Who we share it with
With your coach (the person who serves you). With providers that process data on our behalf under contract: hosting and database, the AI model provider, document generation, transactional email, payments, DNS and storage. The full list, with location and the link to each agreement, is in the list of subprocessors. With authorities, if the law requires it.
If you use Discord or another external channel, what you send there is received by that third party under its own conditions.
6. International transfers
Your data is hosted in the United States. If you live outside the United States, we transfer it there under the mechanism indicated in the annex for your country (standard contractual clauses, Data Privacy Framework or consent, as applicable).
7. How long we keep it, and the destruction schedule
While your account is active. Biometric data (photos, derived measurements and readings) is destroyed when the purpose it was collected for ends, and in any case within the periods below, which are counted from the day your account becomes inactive. Whichever comes first, the end of the purpose or the period, applies. The table below is the schedule in force. What runs today: a removed client is erased in full 60 days after removal, with notices at day 30 and day 53, and an erasure request is handled by email.
| Event | Day 0 | Then | Photos, readings and PDFs destroyed | Identity data erased |
|---|---|---|---|---|
| Your coach removes you, stops paying, or cancels | Account inactive; check-ins paused; notice with the option to export or erase at once | Second notice at day 30; photos and PDFs moved to cold storage at day 60 | Day 90 | Day 180 (what remains no longer points to anyone) |
| You ask for erasure (by email to privacy@checkerfit.com; a button in your account is coming) | Confirmation; check-ins paused; your coach is told | Seven days to change your mind | Day 7 | Day 7; confirmation sent at day 30 to the address you gave, then that address is erased too |
- What survives destruction, without any link to you: the record that a consent was given (version, date, fingerprint of the text), the record of your coach’s approvals, file fingerprints and alert codes, kept for the limitation period for claims; invoices for 7 years (tax law); technical logs for 90 days; backups rotate within 7 days and the erasure reaches them when they rotate.
- A legal hold (a claim, a request from an authority, an internal investigation) can pause the schedule only with a recorded reason and a mandatory review at 90 days; a hold that is not reviewed expires on its own. Nobody can erase outside the schedule; support can only pause or resume it.
- Copies that providers keep under their own retention (the AI provider, document generation, email) are covered by the subprocessor list and the erasure request is passed on to them.
8. Your rights
Access, a portable copy, correction, erasure, withdrawal of consent, objection. You exercise them from your account at checkerfit.com where the option is available, or by writing to privacy@checkerfit.com. We answer within the time limit of your annex; by default, 30 days. We do not discriminate against you for exercising them.
If your coach leaves CheckerFit, you can still exercise these rights directly with us.
9. Security
Encryption in transit and at rest, role-based access, separation between identity and check-in data, access logging, removal of location metadata and irreversible pixelation of the face on every stored photo. Biometric data is protected with at least the care we apply to any other confidential data and with the standard of care that is reasonable in our industry. No system is infallible; if an incident affects you, we will notify you as the applicable law requires.
10. Minors
We do not serve people under 18. If we detect a minor’s data, we block and erase it according to our minors protocol.
11. Changes
We give 30 days’ notice of substantial changes. The current version, its date and the fingerprint of its text are shown at the top of this page; earlier versions are available on request.
12. Annexes by jurisdiction
Depending on your country and state, an annex may apply in addition to this policy. CheckerFit is currently offered in the Americas only and does not accept registrations from the European Economic Area, the United Kingdom, Switzerland, Brazil, Quebec, or the states of Illinois, Texas, Washington and Nevada, until the annex for each one is reviewed and published. An annex prevails over this policy where it extends it.
Operated by Roman & Goderich Investment LLC, Florida, United States. Questions about these documents: legal@checkerfit.com. Privacy requests: privacy@checkerfit.com.