Effective Date: June 30, 2026
FlexiSpot Inc. ("FlexiSpot," "we," "us," or "our") is committed to protecting the privacy of users of the FlexiSpot mobile application (the "App"). This Privacy Policy explains what personal information we collect through the App, how we use and share it, and the choices and rights available to you. By using the App, you agree to the collection and use of information in accordance with this Policy.
FlexiSpot Inc., registered in the State of California, is the entity responsible for determining the purposes and means of processing your personal information collected through the App.
We collect personal information through the App in the following ways.
Information you provide to us. When you register for an account, we collect your email address. To enable the App's calorie-estimation feature, we also ask you to provide your height and weight, which are stored in our database and used as inputs to the calorie calculation described below. Please note that App accounts and FlexiSpot website accounts are linked. Registering for an App account will simultaneously register you for a website account.
Information collected automatically. When you use the App, we automatically collect a device identifier associated with your mobile device. We also process your IP address when the App communicates with our servers; your IP address is used transiently for request handling and security purposes and is not stored in our database. If you pair a FlexiSpot treadmill device with the App, the device's serial number is automatically collected and stored, linked solely to the device you have paired with. The App can connect to multiple devices under the brand.
Bluetooth connectivity and Wi-Fi configuration. The App uses Bluetooth to detect and connect to your FlexiSpot devices. During this process, the App scans for nearby Bluetooth devices but filters for, and connects only to, devices broadcasting a FlexiSpot-specific device name; information broadcast by other surrounding Bluetooth devices is not used, retained, or stored. Depending on your mobile device's operating system (such as iOS and certain Android versions), configuring the Wi-Fi connection for your FlexiSpot device may require you to grant location permissions to the App. This is technically required by the operating system to retrieve the name of the Wi-Fi network your mobile phone is currently connected to. During network configuration, the Wi-Fi network name and the Wi-Fi password (which are manually entered by you) are transmitted to the device via Bluetooth. . We use this permission solely to enable device pairing, not to determine or store your geographic location.
Fitness and activity information. Your FlexiSpot device calculates step count, distance, and exercise duration locally on the device. Estimated calories burned are calculated using a formula based on this activity data together with the height and weight you provide. These results are uploaded to our servers together with an identifier associated with your account, so that your activity history can be saved and displayed to you across sessions.
We do not collect or infer health-related information such as heart rate, blood pressure, body composition analysis, exercise-intensity classifications, or reproductive health data, and the App does not currently integrate with third-party health platforms such as Apple Health, Google Fit, or Fitbit.
The App uses a session cookie (or equivalent authentication token) solely to keep you logged in between visits to the App. This cookie is strictly necessary to provide the App's core functionality and is not used for advertising, cross-context behavioral tracking, or any purpose other than authenticating your session.
Beyond this login cookie, we do not embed third-party advertising SDKs in the App, and we do not use the App to engage in cross-context behavioral advertising or to sell or share information with ad networks. We do use the following analytics and support tools, which process limited information as described below:
We use the personal information described above to:
We do not use your personal information to make decisions that produce legal or similarly significant effects concerning you, and we do not use your information for cross-context behavioral advertising.
We do not sell or rent your personal information to third parties, and we do not share your personal information for cross-context behavioral advertising purposes.
To operate the App, we work with the following categories of service providers, who are permitted to use your personal information only to provide services to us. The following third parties are bound by contractual obligation to use the disclosed personal information only for specified business or commercial purposes for which we disclose it to them, to comply with obligations under applicable state privacy laws, and to provide same level of privacy protection on such personal information.
We may also disclose personal information where required to comply with a legal obligation, court order, or government request, or to protect the rights, property, or safety of FlexiSpot, our users, or the public, or in connection with a merger, acquisition, or sale of company assets.
Your personal information is primarily stored and processed on secure, industry-standard cloud infrastructure located in the United States. Please be aware that the data protection and privacy laws in the United States may differ from, and potentially may not offer the same level of protection as, the laws in your jurisdiction of residence. By using the App and providing your information, you acknowledge the transfer, storage, and processing of your personal information in the United States. We implement appropriate physical, technical, and organizational safeguards designed to protect your data against unauthorized access and ensure its integrity.
Data transmitted from your device is ingested through AWS IoT Core before being stored in our databases (such as DynamoDB, S3, or RDS). In addition to AWS's default encryption of data at rest, we apply additional field-level encryption and masking to particularly sensitive fields, such as personal identifiers and device-unique keys. Data transmitted between the App and our servers is encrypted in transit using industry-standard transport security protocols (HTTPS/TLS).
Internal access to our systems is limited through role-based permissions, so that employees can only access the functions and data relevant to their role, solely on a need-to-know basis.
No method of electronic storage or transmission is completely secure, and while we strive to protect your personal information, we cannot guarantee its absolute security.
We retain your personal information for as long as your account remains active and as needed to provide the App's functionality described in this Policy. If you delete your account or otherwise request deletion of your personal information, we will delete the corresponding information from our active systems, and will purge corresponding backup copies through our normal backup-rotation cycle within a reasonable period, not to exceed 90 days, except where retention is necessary to comply with a legal obligation, resolve a dispute, or enforce our agreements.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), provides you with the following rights regarding your personal information:
To exercise these rights, please contact us using the information in the "Contacting Us" section below. We will need to verify your identity, typically by confirming the email address associated with your account or the order ID you placed with us, before processing your request. We will respond to a verifiable request within 45 days of receipt; if we need more time, we will notify you of the reason and extension period, which will not exceed an additional 45 days.
If you reside in a US state with its own comprehensive privacy law, you may have similar rights to access, correct, delete, and obtain a copy of your personal information. Please contact us using the information below to exercise these rights.
The App is not directed to, and is not intended for use by, children under the age of 18. We do not knowingly collect personal information from children under 18, and if we become aware that we have done so, we will take steps to delete it.
FlexiSpot has the discretion to update this Privacy Policy at any time. When we do, we will revise the "Last Updated" date at the top of this page and, where changes are material, provide notice through the App before the changes take effect. We encourage you to review this page periodically to stay informed about how we protect your personal information. Your continued use of the App following the posting of changes constitutes your acceptance of those changes.
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:
FlexiSpot Inc.
Email: contact@flexispot.com
Toll-free: 855-585-5618
Registered Address: 300 Goddard, Irvine, CA 92618