Security

Access controls

• The owner receives the complete operational view.
• Virtual and physical staff views are separated by role.
• Reception access is limited to payment status, amount, currency and relevant dates.
• Membership and Zoom access may be disabled when payment is not verified.

Data minimization

Only information needed for membership, payment verification, class access, coaching and affiliate rewards should be collected. Complete bank-login credentials and full payment-card numbers must not be stored in the fitness platform.

Tracking isolation

Optional analytics and advertising tools are blocked until consent, remain inactive without configured IDs and are excluded from member and staff portal routes. Fitness goals, meal plans, progress records and payment details must not be sent to advertising pixels.

Browser and transport protections

The site sends controls designed to require encrypted connections, limit framing and content-type confusion, restrict unnecessary browser capabilities, reduce referrer leakage and constrain scripts, images and network connections to approved sources.

Operational safeguards

Production operations should include unique staff accounts, strong passwords, multi-factor authentication where available, least-privilege permissions, payment verification logs, tested backups, timely updates, access reviews and a documented incident-response process.

Payment safety

Members should use only the payment instructions displayed or confirmed by the studio. Staff must verify transaction references without requesting online-banking passwords, one-time codes or unrelated financial information.

Report a concern

If you believe an account, payment or personal record is at risk, contact musclebonefit@gmail.com or call 876-468-9265. Include what happened and how we can reach you, but do not email passwords, one-time codes or complete banking details.