Cookie Policy

What are cookies?

Cookies are small text files that a website stores on your device (computer, tablet or phone) when you visit it. They let the site recognise your device, remember information about your visit (such as language, timezone or session state) and function correctly.

Alongside cookies we use similar technologies (for example, the browser's local storage and session storage) that serve equivalent purposes. In this policy, the term "cookies" covers all of them.

Data controller

The controller responsible for the data collected through cookies is:

• ·NEXUSVIBE SL (trading as FitConnect Pro).
• ·Tax ID (NIF): B70966650.
• ·Registered office: Avenida del Cantábrico 249, 28939 Arroyomolinos, Madrid, Spain.
• ·Commercial Registry of Madrid, Volume 46502, Folio 135, Section 1, Sheet M-816510.
• ·Privacy email: privacidad@fitconnect.pro.
• ·Company contact: gestion@nexusvibe.net.

Categories of cookies we use

FitConnect Pro is a B2B platform for personal trainers, strength coaches and dietitians and their clients (training plans, nutrition plans, progress tracking, trainer-client chat and client-to-trainer payments). To deliver these services we use the following categories of cookies:

• ·Strictly necessary cookies: essential for the site to work and to provide the services you request. They include the authentication session cookie (Supabase), cross-site request forgery (CSRF) protection and timezone detection. They cannot be disabled without breaking core functionality and do not require consent.
• ·Payment cookies: set by Stripe during client-to-trainer payments and web purchases of trainer subscriptions to prevent fraud and secure transactions. They are strictly necessary for payment functionality. Subscriptions purchased on iOS are processed by Apple and do not set cookies on this website. We never store full card numbers or Apple payment credentials.
• ·Preference (functional) cookies: remember choices such as language or display settings. They improve your experience but are not essential.
• ·Analytics cookies: collect usage data (pages visited, session duration, traffic sources) via Google Analytics to help us understand and improve the platform. They are only set with your analytics consent.
• ·Marketing cookies: Meta Pixel and Conversions API measure visits and conversions from our ads. They are only enabled with your marketing consent, separately from analytics consent.
• ·Third-party cookies (embedded content): videos that trainers embed from YouTube or Vimeo may set third-party cookies on playback.

Detailed list of cookies

The table below lists the main cookies used on FitConnect Pro. As these rely on third-party services that evolve over time, the list is indicative and may vary; name, purpose, duration and category are shown for each:

• ·sb-<project>-auth-token — Supabase — keeps you signed in and authenticates your identity — session duration (refreshed while the session is active) — Strictly necessary.
• ·csrf / __Host-csrf — FitConnect Pro — protects forms against cross-site request forgery (CSRF) — session — Strictly necessary.
• ·timezone — FitConnect Pro — stores your detected timezone so schedules and workout logs display correctly — up to 180 days — Strictly necessary.
• ·NEXT_LOCALE — FitConnect Pro — remembers your preferred language — up to 1 year — Preference (functional).
• ·__stripe_mid — Stripe — device identifier for payment fraud prevention — 1 year — Strictly necessary (payment).
• ·__stripe_sid — Stripe — session identifier for fraud prevention during checkout — 30 minutes — Strictly necessary (payment).
• ·_ga — Google Analytics — distinguishes users for usage statistics — up to 2 years — Analytics (consent required).
• ·_ga_<id> / _gid — Google Analytics — maintains session state and distinguishes users — 2 years / 24 hours — Analytics (consent required).
• ·_fbp — Meta — identifies the browser to measure ad visits and conversions — up to 90 days — Marketing (consent required).
• ·_fbc — Meta — retains an ad-click identifier when present — up to 90 days — Marketing (consent required).
• ·fc_tracking_consent / fc_tracking_revoked / fc-cookie-consent-v2 — FitConnect Pro — stores your category choices and a fail-closed marketing-withdrawal flag — up to 180 days — Strictly necessary to honour your choice.
• ·YouTube cookies (e.g. VISITOR_INFO1_LIVE, YSC, CONSENT) — Google/YouTube — set when you play a trainer-embedded video — up to 2 years / session — Third party (embedded content).
• ·Vimeo cookies (e.g. vuid) — Vimeo — set when you play a trainer-embedded video — up to 2 years — Third party (embedded content).

Payment cookies (Stripe)

Client-to-trainer payments through Stripe Connect and trainer subscriptions purchased on the web are processed through Stripe. Stripe sets the __stripe_mid and __stripe_sid cookies to prevent fraud and secure those transactions. Subscriptions purchased in the iOS app are processed through Apple In-App Purchase and do not set cookies on this website.

Stripe acts as an independent controller for payment data. You can read its policy at https://stripe.com/privacy. FitConnect Pro never stores full card numbers.

Analytics cookies (Google Analytics)

We use Google Analytics to understand how the platform is used and to improve it. These cookies are only set if you give your consent through the cookie banner. If you do not give or you withdraw consent, analytics cookies will not load.

You can review Google's privacy policy at https://policies.google.com/privacy. To opt out of Google Analytics across all websites, you can install the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.

Marketing cookies and ad measurement (Meta)

We use Meta Pixel and Conversions API to understand whether a visit or conversion came from our Facebook or Instagram ads. They only activate when you select the marketing category; accepting analytics does not enable Meta.

With consent, Meta receives the event name, the site origin or an allowlisted public acquisition URL, the IP address, browser User-Agent and Meta's _fbp/_fbc browser identifiers. We do not send names, email addresses, phone numbers, internal account identifiers, free text, or health, nutrition, workout, progress, photo or document data. You can review Meta's privacy policy at https://www.facebook.com/privacy/policy/.

Embedded third-party content (YouTube and Vimeo)

Trainers may add videos hosted on YouTube or Vimeo (for example, exercise demonstrations). When a page includes one of these videos and you play it, the relevant provider may set its own third-party cookies, over which FitConnect Pro has no control.

You can review their policies at https://policies.google.com/privacy (YouTube) and https://vimeo.com/privacy (Vimeo). To limit these cookies, manage your browser settings or refrain from playing the embedded content.

Legal basis

Strictly necessary and payment cookies are set on the basis of legitimate interest and performance of the contract (Art. 6(1)(b) and 6(1)(f) GDPR), as they are indispensable to deliver the requested service, and are exempt from the consent requirement of Art. 22(2) LSSI-CE.

Analytics, marketing, non-essential preference and embedded third-party cookies are set only with your category-specific consent (Art. 6(1)(a) GDPR and Art. 22(2) LSSI-CE), which you can withdraw at any time.

How to manage or withdraw your consent

When you first access FitConnect Pro we show a cookie banner from which you can accept or reject non-essential cookies. You can change your choice at any time as follows:

• ·Opening the cookie settings panel with the “Cookie settings” button on this page.
• ·Clearing stored cookies and adjusting preferences in your browser settings.
• ·Configuring your browser to block or delete cookies: Chrome (https://support.google.com/chrome/answer/95647), Firefox (https://support.mozilla.org/en-US/kb/cookies), Safari (https://support.apple.com/guide/safari/sfri11471/mac) and Edge (https://support.microsoft.com/en-us/microsoft-edge).
• ·Installing the Google Analytics Opt-out Browser Add-on to exclude yourself from analytics across all sites.

Consequences of disabling cookies

Blocking strictly necessary or payment cookies may prevent you from signing in, processing payments, or the site from functioning correctly. Rejecting analytics, marketing or third-party cookies does not affect the platform's essential functions.

International transfers

Some of our providers (for example, Stripe, Google, Meta or Vercel) may process data outside the European Economic Area (EEA). Where this happens, transfers rely on the EU-US Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission. Data managed by Supabase is hosted in EU data centres.

Updates to this policy

We may update this Cookie Policy to reflect changes in the cookies we use or for legal, regulatory or operational reasons. The date at the top indicates the last revision. We recommend reviewing it periodically.

Contact

For any questions about our use of cookies you can write to privacidad@fitconnect.pro. For company matters: gestion@nexusvibe.net. For general support: support@fitconnect.pro.

NEXUSVIBE SL — Avenida del Cantábrico 249, 28939 Arroyomolinos, Madrid, Spain. This policy is governed by Spanish law and subject to the courts of Madrid.