AI chatbots for gyms and fitness studios: disclosure, memberships, cancellations and health questions
What applies to a gym chatbot
| Part of the chat | Rule | What to do |
|---|---|---|
| First message | AI Act Article 50(1) and (5) | Say it is an AI, at the latest at the first interaction |
| Class booking on a set date | Consumer Rights Directive Article 16(l) | No withdrawal right, but say so before booking |
| Membership sign-up | Consumer Rights Directive Articles 6, 8(2), 9 | Full terms, a clear pay button, 14 days to withdraw |
| Starting to train inside the 14 days | Consumer Rights Directive Articles 8(8) and 14(3) | Express request on a durable medium; pro rata charge if they withdraw |
| Cancelling a membership (Germany) | BGB section 312k | Cancellation button and page, not only the chat |
| Injuries, conditions, pregnancy | GDPR Article 9 | Collect as little as possible; hand over to staff |
The AI disclosure
A chatbot that answers members and prospects interacts directly with people, so Article 50(1) of the AI Act applies. People must be told they are dealing with an AI at the latest at the first interaction (Article 50(5)). Gym bots are often given a coach persona ("Hey, I'm Max, your fitness buddy"), and that is the set-up where the label matters most:
"Hi, I'm Northside Fitness's AI assistant. I can book classes, answer membership questions or pass you to the front desk."
The duty sits with the provider of the chatbot, which is often the software vendor, but members complain to the gym, so check the wording yourself. The disclosure wording guide has more options.
Classes and memberships are different contracts
A single class on a set date. Article 16(l) of the Consumer Rights Directive removes the 14-day withdrawal right for "services related to leisure activities if the contract provides for a specific date or period of performance". A paid spin class on Thursday at 18:00 falls under that. The bot still has to say before the booking that there is no withdrawal right (Article 6(1)(k)), and give your own cancellation policy. The booking chatbot guide covers the confirmation step and the pay button.
A membership. A monthly or yearly membership sold online is a distance service contract without one specific date, so the general rule applies: the member has 14 days from the conclusion of the contract to withdraw (Article 9). Before the sign-up, the bot or the sign-up page has to give the price per billing period, the minimum term and how to end the contract (Article 6(1)(e), (o) and (p)), and the final step needs a button that makes clear the order means paying (Article 8(2)). A typed "yes, sign me up" in a chat is a weak way to meet that. Hand over to the normal sign-up page.
When a new member wants to start today
Most people who join online want to train the same day. Two rules govern that:
- The member has to make an express request to start during the withdrawal period, and for distance contracts the trader must have it on a durable medium (Article 8(8)). A ticked box on the sign-up page, repeated in the confirmation email, is the usual way. "Sure, see you tonight" in the chat is not enough.
- If the member then withdraws within the 14 days, they pay "an amount which is in proportion to what has been provided" up to the withdrawal, based on the agreed price (Article 14(3)). If there was no express request, or the trader did not give the withdrawal information, they pay nothing (Article 14(4)(a)).
So the bot can say "you can start today", but the request to start early and the withdrawal information belong in the sign-up flow and the confirmation, where there is a record.
Cancelling through the bot
Cancellation is where gym chatbots get into trouble. A bot asked "how do I cancel?" that answers with retention offers, or tells the member to visit the front desk, can mislead about how the contract ends. Keep the bot's answer factual: the notice period from the contract, and a direct link to the cancellation route.
Germany has a specific rule. Section 312k of the German Civil Code (BGB) applies when a business lets consumers conclude a continuing paid contract through a website, which covers gym memberships sold online. The website must have a cancellation button labelled "Verträge hier kündigen" or something equally clear, leading to a confirmation page where the member gives their details and confirms with a button labelled "jetzt kündigen" or similar. The business must confirm the cancellation in text form straight away. If the button and page are missing or don't meet the rules, the member can cancel at any time without notice (section 312k(6)). A chatbot does not replace that button, but it can link to it.
Terms in Germany. Under section 309 no. 9 BGB, standard terms in contracts for regular services are invalid if they bind the customer for more than two years, extend the contract tacitly other than for an indefinite period with at most one month's notice, or set a notice period longer than one month before the first term ends. A bot quoting renewal or notice rules must quote the contract, and the contract must fit these limits.
Coming EU rules. The Commission's Fitness Check of consumer law found that hard-to-cancel subscriptions are a common problem, and a Digital Fairness Act proposal is expected. CMS reported a draft due on 11 November 2026. It is not law yet, and its content on cancellations is reported, not settled. Check the current state before relying on it.
Health questions stay with people
Members ask a gym bot things like "I have a bad knee, which class is OK?" or "Can I do HIIT while pregnant?" The answers carry two kinds of risk.
Health data. Information about injuries, conditions or pregnancy is data concerning health, a special category under Article 9 of the GDPR. It needs one of the Article 9(2) conditions on top of a lawful basis. If the bot does not need it to book a class, it should not ask for it, and transcripts that contain it need a short retention period and a mention in the privacy notice. Check whether the chatbot vendor uses transcripts to train its models.
Advice. A model that tells someone with a heart condition which workout is safe is giving advice it cannot back up, and the gym is the one answering for it. A simple rule works: any mention of an injury, a medical condition, medication, pregnancy or symptoms during exercise gets a fixed answer that points to a trainer or a doctor, and the bot gives no exercise advice for that condition. Chest pain or fainting during or after exercise gets "stop and call 112" (the EU emergency number), not a chat.
A health questionnaire (often called a PAR-Q) is better as a form the trainer reviews than as questions the bot asks in passing.
Checklist for a gym chatbot
- [ ] First message says it is an AI assistant, including on a named coach persona.
- [ ] Class bookings say there is no withdrawal right, plus the gym's own cancellation policy.
- [ ] Memberships are sold through the sign-up page with price per period, minimum term and a clear pay button.
- [ ] The request to start training during the 14 days is a tick box, repeated in the confirmation email.
- [ ] "How do I cancel?" gets the notice period and a direct link, not a retention script.
- [ ] Germany: the website has the "Verträge hier kündigen" button and confirmation page.
- [ ] Renewal and notice answers quote the contract.
- [ ] Injuries, conditions and pregnancy go to staff; the bot gives no exercise advice for them.
- [ ] Health details in transcripts have a short retention period and are covered in the privacy notice.
Sources
- Regulation (EU) 2024/1689 (AI Act) on EUR-Lex: Article 50(1) and (5). Article 50 text at artificialintelligenceact.eu.
- Directive 2011/83/EU (Consumer Rights Directive) on EUR-Lex, as amended: Articles 6(1), 8(2), 8(8), 9, 14(3), 14(4) and 16(l). Article 14 at legislation.gov.uk (EU text as retained in the UK), used for quoting.
- German Civil Code (BGB): section 309 at gesetze-im-internet.de and section 312k at dejure.org.
- Regulation (EU) 2016/679 (GDPR): Article 9.
- CMS, Inside the EU's planned Digital Fairness Act (reported timing of the proposal).