ReShape legal
Privacy Notice
Version 2026-09 · RS Fitness member beta.
1. Data controller
For the RS Fitness beta, the data controller is RS Fitness On Demand Ltd (company number 11191767), trading as RS Fitness. Registered office: C/O XNM Accountancy Limited, Creative Suite 1, Mill 3, Pleasley Vale Business Park, Mansfield, United Kingdom, NG19 8RL. Privacy contact: rsfitnessstudios@gmail.com.
2. What we collect
Depending on the features you use, ReShape may hold your name, email, account details, goals, training preferences, gym bookings and attendance, training activity, steps, running information, strength records, weight and body-composition information, check-ins, nutrition preferences, information you choose to provide about injuries or limitations, Community posts and interactions, connected-service identifiers, consent records, support actions and technical usage/security records.
3. Where the information comes from
Information may come directly from you, from RS Fitness account records needed to provide your access, and from services you choose to connect, such as TeamUp and other supported activity services. We explain connected services in Settings.
4. Health and special-category information
Some information you choose to provide may reveal health or wellbeing information, including injuries, limitations, body composition, nutrition-related health information or other health-related coaching context. Where we rely on explicit consent for this processing, that consent is separate, optional and can be withdrawn in Settings. If you do not give or later withdraw that permission, affected health-data features may be reduced or unavailable.
5. Why we use your information
We use information to provide and secure your account, personalise coaching, track goals and progress, show training history, sync authorised activity, operate Community features you choose to use, provide member support, generate optional staff-support signals, troubleshoot the service, improve reliability, comply with legal obligations and deal with privacy or security requests.
6. AI and profiling
ReShape uses AI to generate coaching responses and may use profiling to evaluate patterns in permitted data. Profiling means automated processing used to evaluate aspects of your activity or progress. If you enable staff-support profiling, ReShape may compare goals, attendance, progress, check-ins and connected-service activity to identify patterns such as inactivity, falling behind a target, a plateau or nearing a goal. We use this to help staff notice where a human check-in may be useful. Member Radar does not expose your private AI chat transcript. Radar signals are not medical diagnoses and do not automatically cancel or suspend membership, change prices, refuse access or make another legal or similarly significant decision. Staff are expected to review the context and apply human judgement.
7. Lawful bases
We rely on different lawful bases for different purposes: contract where processing is necessary to provide ReShape; legitimate interests for proportionate administration, security, fraud prevention and service reliability where those interests are not overridden by your rights; legal obligation where required by law; and consent for optional uses where consent is the appropriate basis. Where we process health or other special-category information on the basis of consent, we rely on explicit consent under Article 9(2)(a) UK GDPR. We document the lawful basis used for each processing purpose.
8. Staff access
Authorised RS Fitness staff may see information needed to provide member support, including goals, attendance and progress information. Where you enable staff-support profiling, they may also see derived support signals. Private AI chat transcripts are not made available through Member Radar.
9. Community
Community sharing is optional. If enabled, your display name and content you deliberately post or share may be visible to other RS Fitness ReShape members. Private coach chats, private health notes and private progress are not automatically posted. You can change Community sharing in Settings.
10. Service providers and international transfers
ReShape currently uses specialist technology providers including Supabase for database/authentication infrastructure, Vercel for application hosting and OpenAI for AI functionality. TeamUp data is used when you connect or authorise that service. Other providers may be added as ReShape develops and material changes will be reflected in this notice. Some providers may process information outside the UK. Where a restricted international transfer occurs, RS Fitness On Demand Ltd is responsible for using an applicable UK adequacy route or approved transfer safeguard.
11. How long we keep information
Account, coaching and progress information is kept while the ReShape account is active where it remains necessary to provide continuity and the features you use. Private AI conversations are retained as part of your account for conversation continuity unless you delete ReShape data or your account is otherwise closed. We review retention and do not keep personal information longer than necessary for the relevant purpose. When live ReShape data is deleted, linked member data is removed where deletion is permitted. Limited legal, consent, security or rights-request records may be retained where necessary to comply with law or establish, exercise or defend legal claims. Encrypted provider backups may continue to contain deleted information until the normal backup cycle overwrites it; backup data is not used for ordinary product access.
12. Security
ReShape uses tenant separation, role-based access and server-side controls intended to restrict information to authorised users and services. Staff access is limited by role and private member AI transcripts are separated from staff-support views. No online system can promise absolute security, so you should also protect your login details.
13. Your rights
Depending on the circumstances, UK data-protection law gives you rights to be informed, request access, correct inaccurate information, request erasure, request restriction, object to certain processing including profiling in relevant circumstances, receive portable data where the right applies, and withdraw consent where processing relies on consent. Rights are not absolute in every situation. You can use Settings for available consent and deletion controls or contact rsfitnessstudios@gmail.com. You can also ask for human review or raise concerns about how profiling has been used.
14. Deletion and withdrawal
Settings allows you to change optional privacy permissions, disconnect supported services, delete ReShape member data or delete the ReShape profile. Withdrawing consent stops future processing based on that consent but does not make earlier lawful processing unlawful. Deleting ReShape does not cancel your separate RS Fitness membership, TeamUp account, direct debit or other payment obligation.
15. Complaints and contact
For access, correction, deletion, consent withdrawal, objections to profiling or other privacy questions, contact RS Fitness On Demand Ltd at rsfitnessstudios@gmail.com or write to the registered office above. If you remain unhappy with how your information is handled, you have the right to complain to the UK Information Commissioner's Office. See ico.org.uk for current contact and complaint information. See the Terms of Use for service terms.