This Privacy Policy explains how GetGeri ("GetGeri", "we", "us", "our") — a product operated by Fwrd Investments Pty Ltd, a company registered in Australia — collects, uses, discloses and protects personal information when you use our website, dashboard and related services (together, the "Platform").
GetGeri is an AI-native operating system for boutique fitness studios (such as F45 and FS8 franchises). It helps a studio manage its leads, members, marketing and day-to-day operations by bringing the studio's own connected tools into one dashboard.
- As the controller — for the accounts of studio owners, managers and staff who sign in to use the Platform.
- As a processor / service provider — for information about a studio's own members, prospects and leads. Here the studio is the controller and decides how that information is used; GetGeri processes it on the studio's behalf and under its instructions. If you are a member or lead of a studio, please also refer to that studio's own privacy policy, and direct access or deletion requests to the studio in the first instance (we will assist them).
- Information we collect
- Information from connected services
- How we use information
- Use of artificial intelligence
- How we share information & our sub-processors
- Facebook / Meta data
- Data retention
- Security
- International data transfers
- Your rights & choices
- Data deletion requests
- Cookies
- Children
- Changes to this policy
- How to contact us
1. Information we collect
Account information
When a studio owner, manager or staff member creates or is invited to an account, we collect their name, email address, role, and an encrypted (hashed) password or single-sign-on identifier. We also record sign-in activity (timestamps and login method) to keep the account secure.
Information you provide
Content you enter into the Platform — for example studio settings, notes, message templates, nurture sequences and support enquiries.
Usage and device information
Standard technical information generated when you use the Platform, such as IP address, browser type, pages viewed, and diagnostic logs, used to operate, secure and improve the service.
2. Information from connected services
The core purpose of GetGeri is to bring a studio's own tools together. When a studio connects a third-party service, we receive information from that service only with the studio's authorisation, and we use it solely to provide the Platform's features to that studio. Each studio's data is logically isolated from every other studio's.
| Service | Information we may receive | Purpose |
|---|---|---|
| Mindbody | Member & prospect names, contact details, visit/attendance history, membership status, class bookings, sales and outstanding payment balances | Show the studio its member health, trials, retention and payments; power follow-ups and reporting |
| Meta (Facebook & Instagram) | Lead-ad enquiries (name, email, phone submitted on a lead form), Page and Instagram messages, Page/ad metadata and ad performance | Capture new leads into the studio's CRM, enable replies, and report on advertising results |
| Google / Gmail | Emails in a studio's connected mailbox that relate to leads and members | Let the studio send and track member/lead emails from the dashboard |
| Twilio | Mobile numbers and the content of SMS messages sent to and from leads and members | Two-way SMS follow-up with the studio's own leads and members |
| Stripe | Subscription and billing details for the studio's GetGeri plan | Take payment for the studio's subscription. Card details are handled by Stripe; we do not store full card numbers |
3. How we use information
- Provide, operate and maintain the Platform and its features.
- Capture and organise a studio's leads and members, and help the studio follow up with them by SMS and email.
- Generate analytics, reports and insights for the studio about its own performance.
- Authenticate users, secure accounts, and prevent fraud and abuse.
- Provide customer support and respond to enquiries.
- Process subscription billing.
- Comply with legal obligations.
We do not sell personal information, and we do not use one studio's data to benefit another studio.
4. Use of artificial intelligence
GetGeri uses third-party AI models (including models provided by Anthropic) to generate helpful outputs such as draft messages, summaries, suggested replies and insights. To do this, relevant content (for example a conversation thread or studio metrics) may be sent to the AI provider to produce a response. Our AI providers act as our sub-processors, process the data only to return a result to us, and do not use data submitted through their business APIs to train their models. AI-generated drafts intended for members or leads are surfaced to studio staff for review; a studio controls whether and when anything is sent.
5. How we share information & our sub-processors
We share personal information only as needed to run the Platform:
- Sub-processors / service providers who host and power the Platform, listed below.
- The studio whose members, leads or staff the information relates to.
- Legal & safety — where required by law, or to protect the rights, property or safety of GetGeri, our users or others.
- Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.
| Sub-processor | Used for |
|---|---|
| Railway | Application hosting |
| TiDB Cloud | Database hosting |
| Cloudflare | Website hosting, content delivery & security |
| Anthropic | AI model processing |
| Twilio | SMS messaging |
| Resend | Transactional & platform email delivery |
| Stripe | Subscription payments |
| Mindbody, Meta, Google | Studio-authorised integrations (data sources) |
6. Facebook / Meta data
When a studio connects its Facebook Page, we access that Page's information only with the authorisation of a person who manages it, and only to the extent the studio permits. We use Facebook Lead Ads data to deliver new enquiries into the studio's CRM, and Page/Instagram messaging data to enable the studio to reply. We use this data in accordance with the Meta Platform Terms and Developer Policies. We do not share Meta-sourced data with any unrelated third party, and a studio can disconnect the integration at any time, which stops further access. To request deletion of data obtained via Facebook, see Data deletion requests.
7. Data retention
We keep personal information for as long as needed to provide the Platform to the relevant studio, and as required to meet legal, accounting or reporting obligations. When a studio ends its use of GetGeri, we will delete or de-identify the personal information we process on its behalf within a reasonable period, unless we are required to retain it by law. A studio may also request deletion of specific records at any time.
8. Security
We take reasonable technical and organisational measures to protect personal information, including encryption of data in transit, hashing of passwords, access controls, and strict logical separation of each studio's data. No method of transmission or storage is completely secure, but we work to protect information and to respond promptly to any incident.
9. International data transfers
GetGeri is operated from Australia and uses service providers that may store or process information in other countries (including the United States and the European Union). Where we transfer personal information across borders, we take steps to ensure it remains protected consistent with this policy and applicable law, including using providers that offer recognised transfer safeguards.
10. Your rights & choices
Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, to object to certain processing, or to data portability.
- Australia (Privacy Act 1988 / Australian Privacy Principles): you may request access to and correction of your personal information, and may make a complaint about how it is handled.
- UK / EU (UK GDPR / GDPR): where a studio is the controller, please direct requests to that studio; we will support the studio in responding. Where GetGeri is the controller (staff accounts), you may exercise your rights directly with us.
To make a request, contact us using the details in Section 15. We may need to verify your identity before acting on a request.
11. Data deletion requests
You can ask us to delete personal information that we hold:
- If you are a studio member or lead, ask your studio to remove your record, or email us at admin@getgeri.fit with the subject "Data deletion" and we will coordinate with your studio.
- If you are a studio staff member, email admin@getgeri.fit to delete your account.
- To delete data obtained through Facebook, email admin@getgeri.fit with the subject "Facebook data deletion", or disconnect the integration in the dashboard.
We will action verified deletion requests within a reasonable time, subject to any legal retention obligations.
12. Cookies
The dashboard uses a small number of strictly necessary cookies — primarily a secure session cookie to keep you signed in. We do not use third-party advertising cookies in the dashboard. You can control cookies through your browser settings, though disabling essential cookies will prevent sign-in.
13. Children
The Platform is intended for use by fitness studios and their staff, and is not directed to children. Where a studio's records include a minor, the studio is responsible for obtaining any consents required under applicable law.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify studios. Your continued use of the Platform after an update means you accept the revised policy.
15. How to contact us
If you have any questions about this Privacy Policy or how we handle personal information, contact:
Fwrd Investments Pty Ltd (operator of GetGeri), Australia
Email: admin@getgeri.fit
If you are in Australia and are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.