Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, phone number, and profile photo (if provided). If you join a gym through our platform, we also collect your membership status and subscription details.

Gym & Fitness Data

We collect data related to your gym activities, including class bookings, check-in history, workout logs, and lift tracking records (exercises, sets, reps, weight). This data is stored within your gym's organization and is accessible to gym staff.

Payment Information

Payments are processed by Stripe, Inc. We do not store your credit card numbers or bank account details on our servers. Stripe collects and processes payment information in accordance with their Privacy Policy.

Push Notification Tokens

If you enable push notifications, we collect your device's push notification token to deliver notifications about class reminders, booking confirmations, and other gym-related updates. You can disable notifications at any time through the app settings.

Biometric Data

If you enable biometric login (Face ID or Touch ID), the biometric data is processed entirely on your device by the operating system. We never receive, transmit, or store your biometric data.

Device Information

We collect basic device information (device type and operating system) to deliver push notifications and ensure app compatibility.

2. How We Use Your Information

• Provide and operate the Service (class scheduling, check-ins, membership management)
• Process payments through your gym's Stripe account
• Send push notifications for class reminders, booking confirmations, and gym updates
• Track your fitness progress (lifts, check-in history)
• Enable gym staff to manage memberships and operations
• Improve the Service and fix issues

3. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — Database hosting, user authentication, and file storage
• Stripe — Payment processing for gym memberships and subscriptions
• Expo / EAS — Mobile app distribution, over-the-air updates, and push notification delivery
• Inngest — Background job processing for notification delivery and scheduled tasks
• Vercel — Web application hosting

Each of these services processes data in accordance with their own privacy policies. We recommend reviewing their policies for details on how they handle your data.

4. Data Sharing

Your gym activity data (check-ins, bookings, membership status) is shared with the gym organization you belong to and is accessible to their staff. We do not sell, rent, or share your personal information with third parties for marketing purposes.

We may disclose information if required by law, legal process, or government request.

5. Data Security

We implement industry-standard security measures to protect your data, including encrypted data transmission (HTTPS/TLS), encrypted data storage, and row-level security policies that ensure complete data isolation between gym organizations.

6. Data Retention & Deletion

We retain your data for as long as your account is active. If you wish to delete your account and associated data, please contact your gym administrator or reach out to us directly. We will delete your data within 30 days of a verified request.

7. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at: support@avex-os.com