Privacy Policy

HP2 Integrative Performance Dashboard
Effective date: November 1, 2026  ·  Last updated: October 26, 2026

This Privacy Policy explains how GETFIT LLC (operating the HP2 Integrative Performance Dashboard) (“HP2,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information about the clients and users (“you”) of the HP2 Integrative Performance Dashboard (the “Dashboard”), a web-based performance and recovery coaching tool available at getfitperformance.com.

1. Who We Are

The Dashboard is operated by GETFIT LLC, a limited liability company based in Knoxville, Tennessee.

2. Our Role and Scope (Please Read)

HP2 is an Integrative Performance Ecosystem that provides health, performance, nutrition, and recovery management and coaching. We are certified health and strength coaches (NASM), not physicians, physical therapists, dietitians, licensed nutritionists, and/or other licensed medical providers. The Performance Dashboard is an integrative coaching tool meant to guide coaching practice and provide HP2 clients with a centralized place to engage with HP2 servicing and applicable health elements. HP2 references clinical, health wearable, and Physical Therapy elements to inform general coaching guidance within our professional scope. Users should always rely on their physicians and/or other qualified healthcare providers for medical interpretation, diagnosis, and treatment related decisions. We are not a HIPAA-covered entity, and this Policy does not represent that we comply with HIPAA. Other laws may still apply to how we handle user information, and we describe those practices below.

3. Information We Collect

We collect the following categories of information, most of which you or your coach enter directly, or which you authorize us to receive from a connected service:

a. Account & Profile Information

b. Training & Performance Information

c. Daily Resilience / Well-Being Information

If you choose to use the resilience features, we collect self-reported well-being inputs, which may include a daily emotion label, its perceived positivity/negativity, intensity, and duration; a self-rated emotional regulation score; and self-rated mental and physical demand ratings. This is self-reported well-being data used to help you and your coach observe trends; it is not a psychological assessment or diagnosis.

d. Health & Wearable Information

With your explicit authorization, we connect to third-party health and wearable services to retrieve daily health and recovery data from your connected device(s). The Dashboard is designed to support a range of popular health-tracking wearables and services — which may include, now or in the future, Fitbit, Google Health, Garmin, Oura, Apple Health, WHOOP, and others as we add them. Each connection is made only with your authorization, and some connections are made through a specific provider’s programming interface. Where we connect to Google services, additional provider-specific disclosures appear in Section 4. Depending on your device and the data it provides, this information may include:

We may also store other health and performance information you provide, including metabolic testing results (e.g., PNOĒ VO₂max and related pulmonary, cardiovascular, metabolic, and threshold markers) and body composition scan results.

e. Clinical Information You Provide

Some clients choose to share clinical results they have obtained on their own (for example, blood biomarker results from Function Health). We do not order, perform, or collect these tests, and we do not generate these results. Where you choose to provide them, we store them in your client profile and reference them only to inform general nutrition and lifestyle coaching guidance within our scope. We do not clinically interpret, diagnose from, or prescribe based on these results.

f. Nutrition Information

g. Technical Information

4. Connected Health & Wearable Data — Provider-Specific Disclosures (Including Google User Data)

This section describes how the Dashboard accesses, uses, stores, and shares data obtained from connected health and wearable services, and applies in addition to the rest of this Policy. As we add new wearable integrations, the same core principles apply to every connected service: we access data only with your explicit authorization, use it solely to provide your coaching and recovery tracking, store it securely, and share it only as described in this Policy. Specific providers may impose additional requirements, which we honor. The following disclosures apply where we connect to Google services (the Google Health API, the successor to the Fitbit Web API):

How we access it

We access your Google health data only after you explicitly connect your account and grant permission through Google’s standard authorization screen. We request read-only access to the following categories: sleep, heart rate, heart rate variability, resting heart rate, oxygen saturation (SpO2), and respiratory rate.

How we use it

We use this data solely to display your recovery information within the Dashboard and to help you and your assigned coach observe recovery trends and inform your coaching. We do not use it for advertising, and we do not sell it.

How we store it

Google data is transmitted over encrypted connections and stored on our secured backend infrastructure (see Section 6). Authorization tokens are stored securely on the server side and are not exposed to other users.

How we share it

Your Google health data is visible only to you and your assigned coach (and to the platform administrator for support and security purposes). We do not share it with any other third party except our infrastructure providers acting on our behalf (Section 7).

Limited Use commitment

The Dashboard’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or use Google user data for serving advertisements, and we do not sell Google user data. Human access to Google user data is limited to you, your assigned coach, and administrators acting for support, security, or to comply with law.

Revoking access

You may disconnect your device at any time within the Dashboard, and you may also revoke the Dashboard’s access directly in your Google Account security settings. On disconnection we stop retrieving new data; previously stored data is handled per Section 8.

5. How We Use Your Information

We do not sell your personal information, and we do not use it for third-party advertising.

6. How We Store and Protect Your Information

Your information is stored on third-party cloud infrastructure operated by our technology providers (see Section 7). We apply reasonable administrative, technical, and physical safeguards appropriate to our size, including:

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you and the appropriate authorities as required by applicable law, including applicable federal and Tennessee breach-notification requirements.

7. Who Can Access Your Information

Access to your information is limited to:

8. Data Retention and Deletion

9. Your Choices and Rights

Depending on your state of residence, you may have additional rights under applicable privacy law. Contact us to exercise any available right.

10. Servicing Minors

We do not collect information and/or service individuals under 18 without the formal written consent of a guardian.

11. Media & Communications Release

12. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a revised effective date, and, where appropriate, notify you. Our use of Google user data will always remain consistent with this Policy and the Google API Services User Data Policy.

13. Contact Us

If you have questions about this Policy or your information, contact us at: