Privacy policy

PRIVACY

What we collect, what we never receive, and what you can ask us to do about it. Effective July 28, 2026.

The short version

IntakeKit handles health information, and we designed it so that we never receive any. Everything a client enters stays in the browser on your tablet until you print it, copy it or send it. We hold your email address because you gave it to us, and a payment record because you bought something. That is the whole list.

Health information never reaches us

This is the most important line on this page. The intake forms, the nine readiness questions, health history, medications, the signature and the clearance letter all exist only in the browser on your device. None of it is transmitted to us, stored by us, backed up by us, or readable by us at any point.

Close the tab without printing or sending and the record is gone — including from our side, because it was never on our side. That is deliberate. It is health information, and the safest place for it is not our database.

Your own setup — business name, colours, your terms and your custom clauses — is carried in the part of your link after the # symbol. By the design of the web itself, that part of an address is never sent to a server.

If you use the send-to-inbox button

If you add your own Web3Forms key during setup, using that button sends the completed record through Web3Forms to your inbox. Understand what that means: a record containing health information will pass through a third party you have signed up to, under their terms, not ours. We are not in that path and never receive a copy.

Without a key, the button opens your device's own mail app instead. If you would rather no health information left the device at all, print or save as PDF and skip the button entirely.

You are the data controller

For everything your clients tell you through IntakeKit, you are the data controller and we are not a processor of it, because we never hold it. Collecting, storing, retaining, disclosing and disposing of that information in line with the privacy and health-records law that applies where you practise is your responsibility, as is telling your clients what you hold and why.

What we collect when you buy

Stripe takes the payment and gives us a record of the transaction: your email address, the amount, the country, and the last four digits of the card. We never receive or store your full card number. Stripe handles your payment details under their own privacy policy.

We keep purchase records for as long as tax and accounting law requires us to, which is generally seven years in Canada.

What we collect when you give us your email

If you download a free guide or opt into our list, we hold your email address and any name you gave us, along with which emails you opened and which links you clicked. We use it to send you the thing you asked for and, if you agreed, occasional emails about our products.

Our email is run through Kit (formerly ConvertKit). Every email has an unsubscribe link, it works immediately, and unsubscribing from marketing does not stop us replying to a support request.

What this website collects

Our web host keeps standard server logs — IP address, browser, pages requested, timestamps — which we use to keep the site running and secure. We do not run advertising trackers, we do not sell or rent your information to anybody, and we do not build advertising profiles.

Fonts on our pages are served by Google Fonts, which receives the request as a normal part of loading a page.

Who else is involved

The short list, and what each one gets: Stripe (payment details and your email), Kit (your email address and engagement), our web host (server logs), and Google Fonts (the request that loads a font). Where you have added your own Web3Forms key, that is your account and your relationship with them, not ours.

Some of these process data outside Canada, including in the United States. Where that happens they are bound by contractual terms intended to keep your information protected to a comparable standard.

Your rights

You can ask us what we hold about you, ask us to correct it, ask us to delete it, and withdraw consent to marketing at any time. Write to privacy@trainerkit.co and we will respond within 30 days.

Depending on where you live you may have further rights — under PIPEDA in Canada, the GDPR in the UK and EU, or state privacy law in the US — and we will honour them. If you are unhappy with how we have handled a request, you can complain to your local privacy regulator; in Canada that is the Office of the Privacy Commissioner.

Children

Our products are sold to fitness professionals and are not directed at children. We do not knowingly collect information from anyone under 16 through this website. Where a trainer uses one of our tools with a minor client, that information is handled by the trainer and never reaches us.

Changes, and how to reach us

If we change this policy we will update the effective date at the top. Material changes will be sent to anyone on our list.

Lead Frog, 1500 West Georgia, Suite 1300, Vancouver, BC V6G 2Z6. Privacy questions and requests: privacy@trainerkit.co.