LockedFit
California Privacy Notice
Last updated 24 October 2026 · Effective 24 October 2026
This notice is for residents of California. It explains your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), and describes what LockedFit by LockedFans — LockedFans being a DBA of Visionario Inc — collects about you, why, and who we give it to.
This notice supplements our Privacy Policy; it does not replace it. Where both describe the same practice, they describe it the same way.
1. The short version
- We do not sell your personal information, and we never have.
- We do not share it for cross-context behavioural advertising. We do not run advertising at all.
- We collect two kinds of sensitive personal information — your account login, and fitness details that may concern your health — and use them only to run the Service you asked for and to keep it secure.
- You can see your information, correct it, delete it and take it with you, without being treated differently for doing so.
2. What we collect, and why
The categories below use the CCPA's own labels. Section 11 of the Privacy Policy sets out how long we keep each kind of information.
| CCPA category | What that means here | Why we collect it |
|---|---|---|
| Identifiers | Email address, @handle, account ID; IP address in our providers' logs | To create and secure your account, sign you in, and prevent abuse |
| Customer records | Display name, bio and the profile details you enter | To build the profile you chose to show |
| Characteristics of protected classifications | That you are 18 or older, which you confirm when you agree to our Terms | To enforce our 18+ requirement |
| Internet or network activity | Features used, sessions you like and comment on, people you follow | To operate the Service, fix faults and detect abuse |
| Audio, visual or similar | Your profile photo, and proof clips you submit with an event result | To show your photo once it passes screening, and to verify results |
| Health and fitness information | Training you log, body weight if you enter it, and areas you ask your plan to go easy on | To keep your log, charts and records, and to build your routines and suggestions |
| Inferences | Personal records and estimated one-rep maximums worked out from what you log; which athletes and sessions the app suggests to you | To show your progress and order what you see. We do not build advertising or marketing profiles |
Where it comes from
- From you — everything you type, log, upload or set.
- From your device — device type and activity within the app.
- From LockedFans — only if you sign in with a LockedFans account and allow it, as described in Section 7 of the Privacy Policy.
We do not buy personal information from data brokers. We do not collect your location: outdoor sessions measure distance on your device and save only the totals.
3. Sensitive personal information
We collect two categories the CCPA treats as sensitive:
- Account login — your email address and password, which our authentication provider stores only as a salted hash.
- Information concerning your health — to the extent your training, body weight and the areas you ask your plan to go easy on are treated as health information.
The right to limit, and why it does not bite here
The CCPA gives you a right to ask a business to limit its use of sensitive personal information to a set of permitted purposes. We already use it only for those purposes: your login to sign you in and secure your account, and your fitness details to provide the log, charts, records and suggestions you asked for — and to share them with a keyholder only if you choose to. We do not use either to infer characteristics about you. So there is no additional use to limit. You keep full control regardless: you can edit or remove your body weight and the areas to go easy on at any time, and stop sharing with keyholders. If we ever use sensitive personal information for anything beyond these purposes, we will change this notice and provide a working limitation control before we do.
4. Who we disclose it to, and why
We disclose personal information to service providers who process it on our behalf, under contracts that forbid them using it for their own purposes.
| Recipient | What they receive | Business purpose |
|---|---|---|
| Hosting and database provider | All categories, as our infrastructure | Running the Service |
| Image-screening provider | A short-lived link to each profile photo and proof clip | Automated safety screening |
| Email delivery provider | Email address and the content of account emails | Confirming your address and resetting your password |
| Push services | A notification and your subscription token, if you turn notifications on | Delivering notifications |
| The LockedFans app, and its AI technology provider | Only if you sign in with LockedFans and choose to share: what Section 7 of the Privacy Policy lists | Showing your training to the keyholders you chose, and to Keyholder AI if you turned it on |
| Law enforcement and NCMEC | Only what law requires or valid legal process compels | Legal compliance and child-safety reporting |
5. We do not sell or share your personal information
We have not sold personal information, and we have not shared it for cross-context behavioural advertising, in the preceding twelve months. We do not run advertising, and we have no plans to. Because there is no sale or sharing, there is nothing for you to opt out of, and an opt-out preference signal such as Global Privacy Control has nothing to act on here. We say this plainly rather than publishing a "Do Not Sell" link that would do nothing when clicked. If this ever changes, we will update this notice and honour those signals before the change takes effect.
6. Your California rights
- Know — what we have collected about you, where it came from, why we collected it, and who we disclosed it to.
- Access and portability — a copy of your information in a portable format.
- Delete — removal of your personal information, subject to the exceptions in Section 7.
- Correct — fixing anything inaccurate. Most of it you can edit yourself in the app.
- Limit sensitive personal information — see Section 3.
- Opt out of sale or sharing — not applicable; we do neither.
- Non-discrimination — we will never charge you more, give you less, or degrade the Service because you exercised a privacy right. There are no financial incentive programmes tied to your data.
- Appeal — if we refuse a request, reply to our decision and a person will reconsider it and respond in writing.
7. When we may refuse a deletion request
We will decline a deletion request only where the law permits it — for example where we must keep information to comply with a legal obligation, to detect or resolve security incidents or fraud, or where it is subject to a legal preservation obligation. Where we refuse in part, we will tell you which part and why.
8. How to make a request
Email support@lockedfans.com with "CALIFORNIA PRIVACY — LockedFit" in the subject line, and tell us which right you are exercising.
Verifying it is you
We verify a request by matching it to the email address on the account, and where the request is for a copy of your information we will ask you to confirm from that address. We ask for the least we can. We will not ask you for a government identity document in order to answer a privacy request.
Authorised agents
You may use an authorised agent. We will ask for written permission signed by you, and we may still ask you to confirm directly that you authorised the request.
How long we take
We acknowledge within 10 business days and respond within 45 calendar days. If we need longer we will tell you why, and we will not take more than 90 days in total.
9. Automated decision-making
We do not use automated decision-making technology to make decisions that produce legal or similarly significant effects about you. Automated features are described in Section 18 of the Privacy Policy, and you can ask for a person to review any of their outcomes.
10. Contact
LockedFit by LockedFans (LockedFans, a DBA of Visionario Inc)
202 N Cedar Ave, Ste #1, Owatonna, MN 55060, United States
Email: support@lockedfans.com
Data Protection Officer: support@lockedfans.com, subject line
"DATA PROTECTION — LockedFit"