Hit Club is operated by Tiny Room Studios LLC, a California limited liability company doing business as Hit Club, in Los Angeles, California. This policy covers the Hit Club apps, thehit.club, and the Hit Studio trainer tools. It says what we handle, why, and how to get rid of it.
Your name, and your email address or phone number, whichever you sign in with. We send a one-time code to it; there is no password for us to store. If you arrived on someone's invite, we record who invited you, because the club is invite based and invites are a ledger.
Workouts you complete, streaks and milestones, custom workouts you build, and, if you use those features, logged sets, body measurements you type in, habit check-ins, and food you log. This is the product. It is yours, it shows up in your history, and it is deleted with your account.
Wall posts, including the photo and vibe emoji on them, high fives, crews you join, nudges you send, messages you exchange with your trainer, and reports or blocks you file. Members you share a club or a session with can see the parts of this meant for them.
The fact that a session happened, who was in it, and when. The video and audio themselves run through our servers, because that is how everybody in the session sees and hears each other. We hold a few seconds of the stream while it is being handed on, we do not record it, and what was held is deleted when the stream ends.
If you turn notifications on, a browser push subscription or an Apple device token, plus your notification preferences. Turning notifications off in your device settings ends this.
Counts of anonymous in-app actions per day, tied to your account, such as "opened today's drop" or "started a session." These are counters only: an event name, a date, and a number. No free text, no message contents, no screen recordings, and no third-party analytics SDK.
When you use the in-app feedback note, we get what you wrote, the area you tagged, an optional sentiment, and technical context such as the screen you were on and the app build, so an engineer can reproduce the problem.
Core membership is free. If you buy a plan from a trainer, Stripe processes the payment. We store a Stripe customer identifier and your subscription status. We never receive or store your full card number. No purchases are available in the Hit Club iOS app. Paid trainer plans are sold only on the web, and if purchasing is ever offered inside the iOS app it will run through Apple In-App Purchase.
If you link Spotify or Apple Music, we store the access tokens that let the app play what you chose, plus your display name and account tier from that service. Disconnecting removes them.
Standard request logs for reliability and abuse prevention, including IP address and device type, kept briefly and then discarded.
Hit Studio also stores the video and audio clips you record or upload, your studio profile, your club members, and your published workouts. Uploaded clips are processed automatically, including machine transcription of the audio, to line the coaching cues up with the workout clock. Trainer content is licensed to us under the Hit Studio Trainer Terms, which state that license in full, and the trainer side of the product has its own Hit Studio Privacy Policy.
Your camera and mic only ever turn on when you tap them on. There are three places in the app where you can do that, and they are not the same about what is kept. Nothing here happens in the background, and the app never opens your camera or mic outside these three.
In a session you started or joined, the other members see and hear you live. Your video and audio are relayed by our servers, which buffer a few seconds of the stream to fan it out to everybody watching. We do not record the session, and the buffered pieces are deleted when the stream ends. If you are only watching a class camera, that path is one way: nothing of yours is sent or stored.
Tapping Film me during a workout records video of you, with no sound. The full-quality file is saved on your phone, in your camera roll, and it is yours. A smaller copy is uploaded to our servers and shared with your trainer, so they can watch your form back. That copy is stored for as long as you keep your account — deleting your account deletes it, along with the underlying file. The prompt that offers to film your final round is this same feature scoped to a single round: tapping it is what turns the camera on, it is video only, and the clip goes to your phone, with an identical copy to your trainer. If you also share it to Instagram, that is you posting a file from your own phone, and nothing about it comes back to us.
A clip you attach to a question for your trainer includes its audio, because the point is to show and tell them what happened. It is stored with that message on our servers and stays as long as the message does, which means until you delete it or delete your account.
Only the companies that make the club run, and only with what each one needs:
| Provider | What it does | What it gets |
|---|---|---|
| Fly.io | Hosting and the database, in the United States | Everything the app stores |
| Cloudflare | Serves thehit.club and routes app traffic | Request metadata, IP address |
| Twilio SendGrid | Sign-in codes and notification email | Your email address, message contents |
| Twilio | Sign-in codes by text | Your phone number, message contents |
| Apple | Push notifications on iPhone | Device token, notification text |
| Stripe | Payments, only if you buy a plan | Payment details, your email |
| Spotify | Music, only if you connect it | Your authorization for your own account |
| Google Fonts | Serves the typefaces the pages use | Your IP address when a page loads |
We also disclose information when the law requires it, and we would transfer it in a merger or sale of the business, in which case this policy follows the data.
In the app: You, then Settings, then Delete account. It is immediate and permanent. Your profile, workout history, posts, crews, messages, notification tokens, and music connection are erased from our systems. Some content you sent to other people, such as a message already delivered, may remain with them, and backups age out on their normal cycle. You can also email us and we will do it for you.
Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it, by emailing the address below from the address on your account. California residents have those rights under the CCPA and CPRA, including the right not to be discriminated against for exercising them; because we do not sell or share personal information, there is nothing to opt out of. If you are in the EEA or the UK, our basis for processing is performing our contract with you, plus your consent for notifications and any optional feature you switch on.
While your account exists, and no longer, apart from records we have to keep for tax, accounting, or fraud purposes. Server logs are short lived. Waitlist emails are kept until we invite you or you ask us to remove you.
Hit Club is not for children under 13 and we do not knowingly collect their information. If you believe a child under 13 has an account, email us and we will delete it.
Sign-in is by one-time code, so there is no password to leak. Traffic is encrypted in transit. No system is perfect, and we will tell you if something happens that puts your information at risk.
If this policy changes, the version number and effective date at the top change with it, and material changes get a notice in the app.