OFC PRO — Privacy Policy
Khomytskyi Pro Inc — OFC PRO 1-on-1 Online Coaching Program
Effective Date: September 1, 2026
1. Who We Are
This Privacy Policy applies specifically to the OFC PRO 1-on-1 Online Coaching Program, operated by Khomytskyi Pro Inc, a corporation organized under the laws of the State of California, USA, with its registered address at 120 Granville Ave, APT LL3, Los Angeles, CA 90049, USA ("Company", "OFC", "we", "us"). It applies to Clients who sign the OFC PRO Personal Coaching Agreement, and is separate from the general Online Fitness Club website privacy policy.
2. What Personal Data We Collect
We collect the following categories of personal data about the Client:
- Identification data: full name, email address, and (if provided) phone or billing address.
- Health and fitness data: information the Client discloses about their health status, medical conditions, fitness level, and training goals (Coaching Agreement, Section 7).
- Progress data: workout logs, check-in responses, and coach–client communication within the App (OFC Pro, running on the Trainerize platform).
- Photos: optional. The Client may choose to share progress photos with the Coach through the App. Providing photos is not a condition of receiving the Services.
- Payment data: limited to what is necessary to confirm a payment was made. Card and account details are processed directly by Stripe, PayPal, or Zelle (as applicable) — the Company does not store full card or bank account numbers.
3. Why We Use This Data
- To provide the Services: build and adjust the individual training program, track progress, and communicate through the App.
- To administer the Agreement: confirm identity, process payments, send invoices and renewal/cancellation notices.
- To comply with legal obligations (e.g., accounting, tax records).
4. Where Data Is Stored and Who Processes It
Training and progress data is stored within OFC Pro, the Company's white-label application built on the Trainerize platform (operated by ABC Fitness Solutions, LLC and its affiliate TSR Gym Technik Ltd dba Trainerize, together "Trainerize"). Under Trainerize's own Privacy Policy, Trainerize acts strictly as a data processor / service provider for white-labeled applications such as OFC Pro: the Company (as the customer) determines the purposes and means of processing, and remains responsible for responding to Client privacy rights requests. Trainerize does not independently control or use Client data for its own marketing. This processing is governed by appropriate data protection agreements between the Company and Trainerize.
Depending on the features used within the App, data processed there may include: account/identity data (name, email, photo); fitness and wellness data (training plans, exercise logs, nutrition/meal tracking, if used); health metrics (e.g., weight, heart rate, sleep — only if the Client connects such data or a wearable integration); messages and any images the Client shares with the Coach; and basic device/usage data. Not all of these categories are necessarily used in the OFC Pro configuration.
Trainerize operates globally (including the US, Europe, Canada, Australia, India, and Brazil) and states it uses Standard Contractual Clauses, adequacy decisions, and Data Processing Agreements for data originating in the EEA, UK, or Switzerland — as required by GDPR-equivalent rules. This is relevant for EU-based Clients such as this one.
Payment processing is handled directly by Stripe, PayPal, and/or Zelle, each acting as an independent data controller for the payment data they process, under their own privacy policies.
5. Cookies and Similar Technologies
The OFC.com website (WordPress) has its own, separate privacy/cookie policy under the Ukrainian FOP entity and is out of scope here. Trainerize's cookie disclosures (in its own Privacy Policy, Section 5) apply to Trainerize's own corporate websites and marketing — not automatically to the white-labeled mobile app experience delivered as OFC Pro, which as a native app would not typically use browser cookies. If the Client connects a third-party fitness or health service (such as Apple Health or Google Fit) within the App, data is imported only with the Client's authorization and may be disconnected at any time in the applicable service's settings.
6. Data Retention
Trainerize's own Privacy Policy explicitly states that for data processed within white-labeled applications, retention is determined by the customer (i.e., the Company) — Trainerize does not set this on our behalf.
The Company retains health, fitness, and training records (including progress photos, health disclosures, and assessments) for one (1) year after the end of the coaching relationship. General account and billing records are retained for the periods required by applicable accounting and tax law.
7. Client Rights
Depending on the Client's country of residence, applicable law (e.g., GDPR for clients in the EU/EEA, CCPA/CPRA for California residents) grants rights to access, correct, delete, or export ("port") personal data, and to object to or restrict certain processing, and to withdraw consent where processing is based on consent.
To exercise these rights, the Client may contact the Company at the address in Section 9. The Company will respond within one (1) month of a verified request. To verify identity, the Company will cross-check the details provided in the request (name, email) against the information already held on the Client's account before acting on it.
8. Health Data — Special Category
Health and fitness information the Client shares is used only to personalize the Services and is not sold or used for advertising. It is visible to the assigned Coach and relevant Company staff involved in delivering the Services. Trainerize's own Privacy Policy similarly treats health metrics and fitness activity data as sensitive information, and states it does not sell or use such data for cross-context advertising or its own marketing.
Under the GDPR, health data is "special category" personal data (Article 9). For EU/EEA-based Clients, the Company processes such data on the basis of the Client's explicit consent (Article 9(2)(a) GDPR), given when the Client signs the Coaching Agreement and discloses health information under Section 7. The Client may withdraw this consent at any time by contacting the Company (Section 9 below); however, withdrawal may mean the Company can no longer safely provide the Services, since the Coach relies on this information to design a safe training program.
Sharing health information with the Company is entirely at the Client's discretion. If the Client chooses not to disclose health information, the Coach may still provide the Services based on the information available, and the Client acknowledges that this is the Client's own choice and responsibility, consistent with the risk acceptance described in Section 7 of the Coaching Agreement.
9. Contact
For questions about this Privacy Policy or to exercise your rights, contact OFC Office at office@onlinefitnessclub.com.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to active Clients.
