Privacy Policy

This Privacy Policy explains how G-SYSTEMS GLOBAL INC., doing business as gFit ("Company", "we", "us", or "our"), collects, uses, and protects your information when you use the gFit Claude Connector (the "App").

It supplements, and does not replace, our general Privacy Policy, Consumer Health Data Privacy Policy and Terms of Use, which govern the gFit website and mobile application. Where this Policy is silent, those documents apply.

1. Information We Collect

The App operates as an MCP (Model Context Protocol) server inside Claude. We collect minimal information required to generate your workout plan:

• Workout Prompts: The fitness goals or target body zones you mention to Claude that trigger our tools.
• Session State: A random, anonymous session handle (chatSessionId) that is not linked to any account. If you press Mark as Done, we store the index of the completed exercise under the SHA-256 digest of that handle. Reading or updating that record requires a separate server-signed token that is delivered only to the widget, not to the AI model; the session handle alone does not grant access.
• Technical Data: Basic request logs (e.g., IP addresses, timestamps) generated when the widget loads media assets, handled by our Cloudflare infrastructure for rate limiting and security.

We do NOT collect: personal health records, health metrics, identifiable profiles, names, or email addresses through the Claude Connector. We do not read your chat history, memory, conversation summaries or files, and we do not use your conversations to train models.

The Connector requires no account and does not connect to Apple HealthKit or Google Fit. If you also use the gFit app or website, the Consumer Health Data we process there is described in our Consumer Health Data Privacy Policy.

2. How We Use Information

We use the information solely to:

• Return the requested exercise plans and video tutorials.
• Maintain your session state while you navigate through the "next exercise" flow.
• Monitor the performance and security of the App (e.g., rate limiting).

3. Data Sharing and Third Parties

We do not sell your data. We do not share your data with third parties for marketing purposes.

Since the App runs within Claude, Anthropic (the provider of Claude) also processes your prompts and interactions according to their own Privacy Policy. We do not control Anthropic's data practices.

4. Data Retention

Workout completion progress is stored in Cloudflare Durable Objects only when you press Mark as Done, and it is deleted automatically 24 hours after the most recent save. Nothing else about the session is stored: the workout plan itself is recomputed on every request and never persisted. Basic server logs are retained only as long as necessary for security and operational monitoring.

5. Your Rights

Because the App does not require an account or collect identifying personal information, we cannot easily tie specific workout queries back to you. However, if you have questions about your privacy or wish to inquire about data practices, please contact us.

European Union (GDPR). You have the right to access, correct, update, or request deletion of your personal information, to object to processing, and to data portability. Where we transfer personal data outside the European Economic Area, including to the United States, we rely on Standard Contractual Clauses approved by the European Commission or another valid transfer mechanism.

California (CCPA/CPRA). You have the right to know what personal information we collect, the right to request deletion, the right not to be discriminated against for exercising these rights, and the right to limit our use and disclosure of Sensitive Personal Information to what is reasonably necessary to provide the Service.

To exercise any of these rights, contact us at support@gfit.world.

6. Children’s Privacy

The Service is not intended for individuals under the age of 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to remove that information.

7. Governing Law

This Privacy Policy and any disputes related to it are governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy here with an updated effective date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

G-SYSTEMS GLOBAL INC. (d/b/a gFit)
Email: support@gfit.world
Website: https://gfit.world/
Address: 131 Continental Dr, Suite 3052, Newark, DE 19713, United States