Report a potential issue
Email hello@fittribegym.com with the affected URL, what you observed, steps to reproduce it, and a safe way to contact you. Do not include customer information in the report.
Good-faith research
Limit testing to Fit Tribe systems you are authorized to assess. Avoid privacy violations, service disruption, social engineering, physical testing, destructive actions, automated high-volume traffic, and accessing or changing data that is not your own. Stop and report the issue if you encounter personal information.
What to expect
Fit Tribe will acknowledge a credible report when practical, investigate it with the relevant service provider, and prioritize remediation based on impact. We ask that you allow reasonable time to investigate before sharing details publicly.
Safe harbor
Fit Tribe will not initiate legal action for security research performed in good faith and consistent with this policy. This statement does not authorize testing of third-party services such as HighLevel, PushPress, Vercel, Google, or PostHog; follow each provider’s own disclosure policy.