# Cult.fit

> Cult.fit (Curefit / cure.fit, operated by Diverse Retails Private Limited) is an Indian health
> and fitness company offering a connected consumer experience across group fitness classes, gyms,
> at-home workouts, mental well-being and meditation, healthy food, and diagnostics. Its flagship
> products include CultPass gym and class memberships, sport and fitness centers, live and on-demand
> digital workouts, and the cult.fit and cure.fit mobile and web apps.

Important: Cult.fit does NOT publish a public developer API program. There is no developer portal,
no API reference, no OpenAPI/AsyncAPI/GraphQL contract, no SDK, and no public API credentials. The
`api.cure.fit` host that backs the mobile and web apps is a private first-party backend; the public
web property's robots.txt explicitly disallows `/api/`. Any third-party "Cult.fit API" client you
encounter is an unofficial reverse-engineering of that private app backend, not a supported product.

This file is generated by API Evangelist from the catalog profile at
https://github.com/api-evangelist/cultfit — it is not published by Cult.fit.

## Company
- [Cult.fit website](https://www.cult.fit): Consumer site for gym and class memberships, fitness
  centers, at-home workouts, mental wellness, food, and diagnostics.
- [Cultsport](https://www.cultsport.com): Cult.fit's fitness equipment, apparel, and gear brand.
- [Engineering blog](https://blog.cult.fit): The .fit Way — engineering and product writing from the
  Cult.fit / cure.fit team, including their API test automation practice.
- [GitHub organization](https://github.com/curefit): 138 public repositories. Mostly forks of
  third-party Flutter and React Native plugins; the notable first-party release is react-crux.
- [Careers](https://www.cult.fit/careers)
- [Contact and support](https://www.cult.fit/contactUs)

## Security
- [Security and bug bounty](https://www.cult.fit/security): Public vulnerability disclosure program
  with Gold/Silver/Bronze/Thanks reward tiers. Reports go to security@cult.fit. In-scope domains are
  *.cult.fit, *.curefit.co, *.cultsport.com, and *.curefit.com.
- No security.txt is served at /.well-known/security.txt on any Cult.fit host (404 on all probed).
- No trust center and no named certifications (ISO 27001, SOC 2, PCI DSS, HIPAA) are published.

## Legal
- [Terms of service](https://static.cult.fit/terms_cult.html)
- [Privacy policy](https://static.cult.fit/privacy__cult.html)

## Open source
- [react-crux](https://www.npmjs.com/package/react-crux): First-party React library for building
  CRUD/admin dashboards over server-side entities. v0.32.0, published 2024-05-21. Engineering tooling,
  not an API client.

## Optional
- [API Evangelist profile](https://github.com/api-evangelist/cultfit): The machine-readable APIs.yml
  index for this company, including domain security, vulnerability disclosure, and package artifacts.