Privacy Policy

This Privacy Policy for PowerUp Business LLC (doing business as MatData Studio analytics) ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services (the "Services"), including when you:

• Visit our website at https://app.matdatastudio.com or any website of ours that links to this Privacy Policy
• Use MatData Studio analytics, our web-based analytics platform for fitness studio owners that connects to studio management systems like fitDEGREE via API to transform class bookings, cancellations, and client attendance data into actionable insights
• Engage with us in other related ways, including marketing or events

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, contact us at info@powerupbusiness.net.

This summary provides the highlights. You can find more detail in the full sections below.

• What personal information do we process? We process names, email addresses, and authentication credentials (including third-party API keys) that you provide during signup.
• Do we process sensitive personal information? We do not intentionally collect sensitive personal information from you directly. The Services may, however, process sensitive personal information contained in data you connect from third-party studio-management systems (such as member health notes or medical accommodations transmitted via the fitDEGREE API). Where such data is transmitted, we process it only to deliver the Services and apply the same security safeguards described in Section 5.
• Do we collect information from third parties? Yes — when you connect your fitDEGREE account, we receive studio-management data about your classes, bookings, and clients from fitDEGREE via API.
• How do we process your information? To deliver and improve our Services, communicate with you, comply with law, and protect the Services.
• Who do we share information with? Only service providers who help us operate (Supabase, Postmark, Vercel, and fitDEGREE as an integration partner). We do not sell your personal information.
• How do we keep your information safe? We use reasonable technical and organizational safeguards, including encryption at rest, TLS in transit, row-level security on our databases, and passwordless authentication.
• What are your rights? You have rights under applicable US state laws (including the right to access, correct, delete, and in some cases appeal). Contact us to exercise them.

We collect personal information that you voluntarily provide when you register for the Services, express interest in learning about our products, or contact us. This may include:

• Names (your name and, if applicable, your business's owner name)
• Email addresses
• Contact or authentication data, including third-party integration API keys (e.g., your fitDEGREE API key), which are stored with industry-standard protections

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes.

Some information — such as your Internet Protocol (IP) address and browser/device characteristics — is collected automatically when you visit our Services. This information does not reveal your specific identity but may include:

• Log and usage data: Service-related, diagnostic, usage, and performance information — including IP address, browser type and version, timestamps, and pages viewed.
• Device data: Information about the computer, phone, or tablet you use to access the Services, such as device model, operating system, and language settings.

We do not collect precise geolocation data or use facial recognition, fingerprint, or other biometric technologies.

When you connect your fitDEGREE account to MatData Studio analytics, we receive data from fitDEGREE via their API in order to deliver analytics to you. This may include information about your classes, sessions, instructors, attendance records, and client activity associated with your studio account.

For this data, your studio is the data controller and we act as a data processor, processing the information solely on your behalf and in accordance with your instructions.

We process your personal information for the following purposes:

• To deliver and maintain the Services, including generating dashboards, analytics, forecasts, and insights for your studio.
• To communicate with you, including sending authentication links, account notifications, and service announcements.
• To send marketing and promotional communications, which you can opt out of at any time using the unsubscribe link in those emails. Transactional messages (such as login links) will continue to be sent.
• To respond to your inquiries and provide customer support.
• To evaluate and improve the Services, identify usage trends, and develop new features.
• To protect the Services from fraud, abuse, and security threats.
• To comply with legal obligations, including responding to lawful requests from public authorities.

We do not use your personal information for automated decision-making that has legal or similarly significant effects on you.

Client Engagement Classification. As part of the Services, we apply rule-based behavioral analytics to attendance and booking data retrieved from your fitDEGREE account to classify individual studio clients into engagement categories such as "At-Risk" (clients showing reduced activity patterns) and "Churned" (clients who have not returned within a defined period). These classifications are generated automatically from attendance data and are surfaced to you — the studio owner — as a retention tool. They are business analytics estimates only, not determinations of any legal right, eligibility, credit, employment, or other high-stakes outcome. Classifications are never shared with or disclosed to the clients they reference.

The Services also provide a feature allowing you to initiate pre-templated outreach emails to classified clients directly from your own email provider. When you use this feature, MatData Studio analytics pre-populates suggested email content based on the client's classification, but does not send, transmit, log, or store the email content or any response. You are solely responsible for the email communication once it leaves your email provider.

We share personal information with the following categories of third parties, each of whom acts on our behalf as a service provider under a contract that limits how they may use your information:

• Supabase — cloud database, authentication, and hosting of our application data.
• Postmark — transactional and marketing email delivery.
• Vercel — web application hosting and infrastructure.
• fitDEGREE — studio management platform from which we ingest data with your authorization (via your API key).

Client Outreach Emails — MatData Studio analytics's Limited Role. The Services include a feature that allows studio owners to send pre-templated outreach emails to individual studio clients identified as At-Risk or Churned. When you click the email button beside a client's name, the Services open your own email provider (such as Gmail or Outlook) with a pre-populated subject line and message template. MatData Studio analytics does not send this email, does not transmit it through our servers, does not have access to the email content after it is opened in your email provider, and does not track delivery, open rates, or responses. You are the sender for all purposes, including applicable email marketing laws (see Section 5A of our Terms of Service). No additional personal information about the recipient client is shared with any third party in connection with this feature.

We may also disclose personal information:

• To comply with legal obligations, including responding to subpoenas or court orders.
• In connection with business transfers, such as during negotiations of any merger, sale of company assets, financing, or acquisition.

We do not sell your personal information for monetary or other valuable consideration, and we do not share your personal information for cross-context behavioral advertising.

We keep your personal information for as long as you maintain an active account with us, or for as long as necessary to fulfill the purposes described in this Privacy Policy (unless a longer retention period is required or permitted by law — for example, for tax or accounting purposes).

When we no longer have a legitimate business need to process your personal information, we will either delete it or anonymize it. If deletion is not possible (for example, because your information is stored in backup archives), we will securely store your information and isolate it from further processing until deletion is possible.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of the personal information we process. These include:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of data at rest on our database infrastructure
• Row-level security policies on our database tables
• Passwordless authentication via magic links (no user passwords stored)
• Restricted internal access to personal information on a need-to-know basis

Despite these safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. We cannot promise that hackers, cybercriminals, or other unauthorized third parties will never be able to defeat our security and improperly collect, access, steal, or modify your information.

5.1 Security Incident Notification

PowerUp Business LLC will notify you without undue delay, and in any event within seventy-two (72) hours, after becoming aware of any confirmed unauthorized access to, disclosure of, or loss of personal information under our control (a “Security Incident”). The notice will describe the nature of the incident, the data and data subjects affected (to the extent known), the measures taken to mitigate harm, and a point of contact. We will cooperate in good faith with your breach-response obligations under applicable law.

We do not knowingly collect, solicit, or market to children under 18 years of age. Our Services are intended for use by adult business owners. If you become aware that a minor has provided us with personal information, please contact us at info@powerupbusiness.net and we will take steps to delete it.

Depending on your state of residence, you may have the following rights under applicable US state privacy laws (including the California Consumer Privacy Act, Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, and other similar state laws):

• Right to know what personal information we collect, use, and share
• Right to access a copy of the personal information we hold about you
• Right to correct inaccurate personal information
• Right to delete your personal information, subject to certain exceptions
• Right to opt out of the sale or sharing of personal information (note: we do not sell or share personal information)
• Right to non-discrimination for exercising your privacy rights
• Right to appeal a denied privacy request (available in Virginia, Colorado, Connecticut, and other states with similar laws)

To exercise any of these rights, email us at info@powerupbusiness.net or submit a request through our contact form at https://app.matdatastudio.com. We will respond within the timeframe required by applicable law (typically 30–45 days).

If we deny your request, you may appeal by replying to our denial email. The same contact address handles both initial requests and appeals.

Rights of Studio Clients (Fitness Studio Members)

If you are an individual fitness studio member — not a studio owner — and you believe that a MatData studio customer holds personal information about you that was processed through our Services, please note the following:

• MatData Studio analytics processes your information solely as a data processor acting on behalf of the studio that is your service provider. The studio — not MatData Studio analytics — is the data controller for your information and is primarily responsible for honoring your privacy rights with respect to it.
• To exercise your rights to access, correct, or delete your personal information, please contact the fitness studio directly through the contact information provided in your membership agreement with that studio.
• If you contact us directly, we will promptly forward your request to the relevant studio customer and provide reasonable assistance to help them respond, consistent with our obligations as a data processor under applicable law.
• MatData Studio analytics does not retain personal information about studio clients beyond what is necessary to deliver analytics to the studio, and does not use studio client information for any independent commercial purpose.

California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents to request, once per year, information about personal information disclosed to third parties for those third parties' direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes. If you have questions, please contact us at info@powerupbusiness.net.

Some browsers support a "Global Privacy Control" (GPC) signal that communicates user opt-out preferences to websites. Because we do not sell or share personal information for cross-context behavioral advertising, there is no applicable preference to honor; however, we continue to monitor this standard and will update our practices if regulatory guidance changes.

The Services may contain links to third-party websites (such as fitDEGREE) that are not operated by us. This Privacy Policy does not apply to those third-party services, and we have no control over their content, privacy policies, or practices. We encourage you to review the privacy policies of any third-party services you interact with.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page. If we make material changes, we will notify you either by prominently posting a notice on our Services or by sending you a direct notification. We encourage you to review this Privacy Policy frequently.

If you have questions or comments about this Privacy Policy, or wish to exercise your privacy rights, you may contact us at:

PowerUp Business LLC (d/b/a MatData Studio analytics)
Email: info@powerupbusiness.net
Web: https://app.matdatastudio.com

We have designated a privacy contact responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. You can reach this individual at the email above.