LockedFit
Privacy Policy
Last updated 26 October 2026 · Effective 26 October 2026
This Privacy Policy explains how LockedFans, a DBA of Visionario Inc ("LockedFans", "we", "us"), collects, uses, shares, keeps and protects personal information when you use LockedFit, the LockedFans training application at lockedfit.com (the "Service"). It forms part of our Terms of Service.
For the purposes of the UK and EU General Data Protection Regulation, Visionario Inc is the data controller for the personal information described here.
The short version. We keep what you log so you can see your progress and share it with the people you choose. We do not sell your personal information and we do not run advertising. Outdoor sessions measure distance on your phone; the positions never leave it. Your photo is shown to other athletes only after an automated safety screen. If you sign in with your LockedFans account, you choose which keyholders see your training, and you can stop sharing at any time.
- Scope
- What we collect
- Health and fitness information
- Location
- How we use your information, and our legal bases
- What other people can see
- Signing in with LockedFans, and your keyholders
- Who we share information with
- Photos, proof clips and screening
- Cookies and storage on your device
- How long we keep information
- Deleting your account
- Your rights and choices
- US state privacy rights
- International transfers
- Security
- Children
- Automated decisions
- Complaints
- Changes to this policy
- Contact
1. Scope
This policy covers the LockedFit app at lockedfit.com, including people who visit without signing in. LockedFit is part of LockedFans; the LockedFans app at locked.fans has its own Privacy Policy. Where the two connect — only if you sign in to LockedFit with your LockedFans account — Section 7 explains exactly what passes between them.
The Games recorder at lockedfit.com/games is used by LockedFans members to record entries for LockedFans Games. What is recorded there is part of LockedFans and is covered by the LockedFans Privacy Policy, not this one.
2. What we collect
Information you give us
| Category | Examples |
|---|---|
| Account | Email address and password (stored only as a salted hash by our authentication provider). If you sign in with LockedFans instead, see Section 7. |
| Profile | Display name, @handle, bio and profile photo. |
| Training setup | Your answers when you set up: your goal, experience, the equipment you have, how many days a week you want to train, any areas you would like your plan to go easy on (for example knees), and your units, rest timer and default session visibility. Body weight, if you enter it. |
| Training you log | Workouts and their titles, notes, exercises, sets, reps, loads, times and distances; totals and the muscle groups worked; routines you save or are assigned (and who assigned them); your weekly target; and the personal records worked out from what you log. |
| Community | Who you follow, sessions you like, comments you write, and the notifications we create about them. |
| Events | Events you join, the results you submit, round codes issued to you, and any proof clip you choose to submit with a result (see Section 9). |
| Correspondence | Emails you send us, reports and appeals. |
| Waitlist | If you joined our waitlist before the app opened, the email address you gave and where you joined from. |
Information collected automatically
| Category | Examples |
|---|---|
| Device and technical | Browser and device type, operating system, and log data held by our hosting and database providers, which includes IP addresses. We do not store your IP address in the LockedFit application database. |
| Push | A push subscription token, if you turn on notifications. |
We do not use third-party analytics, advertising or tracking tools in LockedFit.
3. Health and fitness information
Some of what you record — your body weight, the areas you have asked your plan to go easy on, and your training itself — may be treated as health information under some laws, including Washington's My Health My Data Act and the UK and EU GDPR. We treat it with that care:
- We collect it only to provide the Service you asked for — your log, your charts and records, your plans and suggestions, and what you choose to share.
- We process it on the basis of your consent, which you give when you enter it. Body weight is optional. You can edit or remove it, and the areas to go easy on, at any time.
- We do not sell it, we do not use it for advertising, and we do not share it with anyone except as this policy describes — in particular, with keyholders only if you choose to share your training with them (Section 7).
4. Location
We do not collect your location. When you run an outdoor session, the app uses your device's location while the session is running to measure distance and pace. Those positions are used on your device and discarded; they are never sent to us or stored. Only the totals — distance, time and pace — are saved with the session. You can refuse or revoke location permission at any time in your device settings; outdoor sessions then cannot measure distance.
Our hosting provider may infer an approximate country from your connection for security and delivery. We do not use it to build a profile of you.
5. How we use your information, and our legal bases
| Purpose | Legal basis (UK/EU) |
|---|---|
| Providing the Service — your account, log, routines, charts, records, events and community features | Performance of a contract; consent for health and fitness information (Section 3) |
| Starting routines, suggested loads and reps, and plans built from our programme templates | Performance of a contract; consent for health and fitness information |
| Sharing your training with keyholders and Keyholder AI, as you choose (Section 7) | Consent, given and withdrawn by you on LockedFans |
| Notifications in the app, push notifications you turn on, and account emails | Performance of a contract; consent (push) |
| Safety, moderation, photo and video screening, investigating reports, enforcing our Terms, and preventing fraud, cheating and abuse | Legitimate interests in protecting users and the Service; legal obligation where reporting is required |
| Measuring, debugging and improving the Service | Legitimate interests in operating and improving a product |
| Responding to legal process and protecting legal rights | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we have considered the impact on you and concluded that the processing is proportionate and within your reasonable expectations. You may object to it (Section 13). We do not send you marketing email from LockedFit.
6. What other people can see
LockedFit has no public profile pages on the open web. What other people can see, they see inside the app, signed in:
- Other signed-in athletes can see your display name, @handle and bio, your photo once it has passed screening (Section 9), how many sessions you have shared, and whether you follow them. They can find you by name or @handle.
- Your sessions are visible according to the setting you choose for each one: only you, your followers, or everyone signed in to LockedFit. Likes and comments you leave are visible to whoever can see that session.
- Never shown to other athletes: your email address, body weight, setup answers, private sessions and proof clips.
- Others can copy what you share. Anyone who can see something can screenshot it, and we cannot prevent that.
7. Signing in with LockedFans, and your keyholders
If you already have a LockedFans account, you can sign in to LockedFit with it. The two services then share one login. When you do, LockedFans asks you what LockedFit may use:
- Your photo, name and bio can be brought over if you allow it. A name or bio brought over is checked by an automated wording filter and left behind if it does not suit LockedFit; a photo brought over is screened like any other (Section 9).
- Your @handle is brought over only if you choose to.
- Keyholders. You can choose which of your LockedFans keyholders see your LockedFit training, change that choice at any time, and stop sharing entirely. A keyholder you share with can see your display name, your weekly target, how many sessions you have done this week and in total, your recent sessions (title, when, how long, volume and sets), your saved routines and your personal records. They are notified on LockedFans when you finish a session, and they can set your weekly target and assign you routines, which appear in LockedFit as assigned to you.
- Keyholder AI. If you turn on sharing with Keyholder AI, LockedFans' AI keyholder, it receives your weekly target and this week's progress, your total sessions and this week's records, your most recent session (title, when, how long, sets and the movements), the names of your routines and which ones it assigned, and your goal, experience, equipment and areas to go easy on. It does not receive your email address, body weight or photos. It is provided through LockedFans' AI technology provider, under the terms in the LockedFans Privacy Policy, which include that the provider does not train on this data and keeps no copy of it. You can turn sharing off at any time.
- Posting a training card. If you choose to post a training card to your LockedFans profile, the card — an image the app draws from your session, with figures, a body map and the LockedFit mark, and no photograph — is posted to LockedFans and is then governed by LockedFans' policies.
Nothing passes from LockedFit to LockedFans unless you sign in with a LockedFans account and choose it. If you created your LockedFit account with an email address and password, none of this applies to you.
8. Who we share information with
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We disclose it only as set out below.
| Recipient | What they receive, and why |
|---|---|
| Database, authentication and storage provider | Holds essentially all account data, training records and media on our behalf, under contract. |
| Hosting and delivery provider | Application hosting and delivery. Processes requests and technical log data. |
| Image-screening provider | Automated screening of profile photos and proof clips (Section 9). Receives a short-lived link to the file and returns likelihood scores; it does not receive your profile details or training. |
| Email delivery provider | Sends account emails, such as confirming your address and resetting your password. Receives your email address and the content of each message. |
| Push services | Your browser's or operating system's push service (for example Apple or Google) delivers notifications you have turned on, receiving the notification and your subscription token. |
| LockedFans and its AI technology provider | Only if you sign in with LockedFans and choose to share, as described in Section 7. |
| Other users | As described in Section 6, according to your settings. |
| Authorities and legal | Where required by law or legal process, to enforce our Terms, or to protect the rights, property or safety of any person — including reports concerning child safety as described in our Terms. |
| Successors | In connection with a merger, acquisition, financing or sale of assets, subject to this policy continuing to apply. |
Our providers act as processors on our documented instructions. We do not use your content or training to train AI models, ours or anyone else's.
9. Photos, proof clips and screening
- Your profile photo is screened automatically by our image-screening provider for the apparent presence of a minor and for nudity. It is shown to other athletes only after the screen passes; until then only you see it. A photo that does not pass is not shown to anyone, and may be kept for review.
- Proof clips. When an event asks for proof, the app films the effort by taking still frames on your phone and turning them into a short video there. It is uploaded only when you submit it with a result. It is stored privately, screened in the same way, used to verify that result, and may be reviewed by us. It is not shown to other athletes in LockedFit.
- Your camera is used only while you record a proof clip or take a profile photo, and only with your device's permission.
- We do not routinely review content. We may review, keep and disclose content where it is necessary to investigate a report, enforce our Terms, protect someone's safety, or comply with law. Where an incident involves a legal preservation obligation, the associated content and account data are kept until that obligation ends, even if you ask us to delete them.
10. Cookies and storage on your device
LockedFit uses your browser's storage, not advertising cookies, and only for things the app needs: keeping you signed in; your preferences; whether this device arrived at LockedFit from LockedFans (so it can offer that sign-in); a workout in progress, so it survives your phone locking; and a proof clip that has not finished uploading, so you can send it later. None of it is used for tracking or advertising. You can clear it through your browser, but the app will not work properly without it.
11. How long we keep information
| Data | How long |
|---|---|
| Account, profile, training, routines and community activity | For as long as your account exists, then deleted as described in Section 12. |
| Notifications | While your account exists. A follow or like that is taken back before you have seen its notification takes the notification with it. |
| Proof clips and results | While your account exists, so a result stays verifiable. |
| Photos that did not pass screening, and content under review | Until the review is complete, or longer where the law requires. |
| Material under a legal preservation obligation | For as long as the obligation requires, regardless of deletion requests. |
| Waitlist emails | Until you ask us to remove yours. |
| Backups | Copies may persist in encrypted backups for a limited period after deletion before being overwritten. |
12. Deleting your account
To delete your LockedFit account, email support@lockedfans.com from the address on the account with "Delete my LockedFit account" in the subject line. We will delete your LockedFit profile, training, routines, community activity, notifications and uploaded files, and confirm when it is done.
- If you also use LockedFans with the same login, tell us whether you want to delete LockedFit only or both. Deleting a LockedFans account also deletes its LockedFit data.
- Deletion does not remove copies others have made of what you shared, or aggregate statistics that no longer identify you.
- Deletion is suspended where we are subject to a legal preservation obligation (Section 9).
13. Your rights and choices
Subject to local law, you have the right to:
- Access the personal information we hold about you, and obtain a copy;
- Correct inaccurate information — most of it directly in the app;
- Delete your information, as described in Section 12;
- Port information you provided to us in a structured, machine-readable format;
- Object to or restrict processing based on legitimate interests;
- Withdraw consent at any time, including for health and fitness information, push notifications, and sharing with keyholders or Keyholder AI;
- Not be discriminated against for exercising any of these rights.
You can do much of this yourself in the app: edit your profile, change who sees each session, remove your body weight or the areas to go easy on, unfollow, turn off notifications, and change or stop sharing with keyholders. For anything else, email support@lockedfans.com with "LockedFit privacy" in the subject line. We will respond within the time required by applicable law, and we may need to verify your identity first, which we do using the email address on the account. You may use an authorised agent where the law permits; we may ask for proof of authorisation.
14. US state privacy rights
If you live in California, our California Privacy Notice sets out your rights under the California Consumer Privacy Act in full. It supplements this policy; where both describe the same practice, they say the same thing.
If you are a resident of California or another US state with a comprehensive privacy law, you have the rights described in Section 13, and in addition:
- We do not sell personal information and we do not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months.
- We use the health and fitness information in Section 3 only to provide the Service you requested and for the safety and security purposes described above — not to infer characteristics about you.
- Because there is no sale or sharing to opt out of, an opt-out preference signal such as Global Privacy Control has nothing to act on here. If that ever changes we will honour such signals, and we will say so in this policy before the change takes effect.
- Washington residents: you have the rights in the My Health My Data Act, including to confirm what consumer health data we hold, to have it deleted, and to withdraw consent. Make a request as described in Section 13.
- You may appeal a refusal of a privacy request by replying to our decision; we will respond in writing.
15. International transfers
We are based in the United States and our infrastructure is primarily located there. If you use the Service from outside the United States, your information will be transferred to and processed in the United States and other countries where our providers operate, which may have different data protection laws. Where we transfer personal information out of the United Kingdom or European Economic Area, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum or International Data Transfer Agreement, as applicable) together with additional safeguards.
16. Security
We use technical and organisational measures appropriate to the information, including encryption in transit, encryption at rest by our infrastructure providers, hashed credentials, database access rules that restrict what each account can read, private storage with signed time-limited links for proof clips, and restricted administrative access. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities where the law requires.
17. Children
The Service is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will close the account and delete the information, except where we are required to preserve it for reporting to the appropriate authorities. If you believe a minor is using the Service, email support@lockedfans.com immediately.
18. Automated decisions
We use automated processes to suggest starting routines, loads and plans, to rank what appears in Discover and in suggested athletes, and to screen photos and proof clips. A photo or clip that does not pass the screen is not shown to others until a person has reviewed it. None of these produces legal or similarly significant effects. You can ask for a person to review any automated outcome by writing to support@lockedfans.com.
19. Complaints
Please contact us first at support@lockedfans.com and we will try to resolve the matter. You also have the right to lodge a complaint with your local data protection authority. In the United Kingdom this is the Information Commissioner's Office; in the EEA it is the supervisory authority of your country of residence.
20. Changes to this policy
We may update this policy. We will change the "Last updated" date above and, where changes are material, tell you in the app before they take effect. Where a change requires your consent, we will ask for it.
21. Contact
LockedFit by LockedFans (LockedFans, a DBA of Visionario Inc)
202 N Cedar Ave, Ste #1, Owatonna, MN 55060, United States
Email: support@lockedfans.com (please put "LockedFit" in the
subject line)
Data Protection Officer: support@lockedfans.com, subject line "DATA PROTECTION — LockedFit".