Security Policy
Effective July 2026 · Version 2026-07
How Centennial Fitness protects your account and data. Security is built into the platform, not bolted on.
Encryption
All traffic between your device and Centennial Fitness is encrypted in transit using TLS.
Data is encrypted at rest using industry-standard AES-256 encryption.
Account protection
Accounts are protected by a managed identity provider with secure password storage and support for multi-factor authentication (MFA).
You can enable MFA and manage active sessions and recovery codes from Settings → Security.
Payments
Card payments are processed by a PCI-DSS compliant payment provider. Centennial Fitness does not store full card numbers on its own servers.
Access controls and monitoring
Access to production systems is restricted, logged, and limited to the minimum needed to operate the service.
We monitor for abuse and unauthorized access and maintain routine backups.
Reporting a vulnerability
If you believe you have found a security issue, please contact us through the Contact page so we can investigate promptly. We appreciate responsible disclosure.