App Privacy Policy

1. Introduction

This Privacy Policy explains how personal data is handled in the mobile application in which it appears (the "App"). The App is provided by GymAscend Limited (Company Number 798284), registered office at POD2, The Old House, 15A Main Street, Blackrock, Co. Dublin, A94T8P8, Ireland ("GymAscend," "we," "us").

The App is offered under the brand of the gym, studio or fitness business whose application you downloaded (the "Operator"). For the purposes of data protection law, the Operator is the controller of your personal data, meaning it decides why and how your data is used. GymAscend acts as a processor, operating the App and processing data on the Operator's behalf, and as a controller only for limited purposes such as platform security and improvement described below.

If you have questions about how your data is used, you may contact the Operator (as controller) or GymAscend using the details in Section 14.

2. Information we collect

• Account and identity data: name, email address, password, and where provided, phone number.
• Profile and fitness data: fitness goals, preferences, workout logs, training activity, and any body or nutrition information you choose to enter. Some of this may be health-related data, which is treated with additional care.
• Membership data: your association with the Operator, including membership verification through a location code.
• Usage and engagement data: how you interact with the App, features used, session activity, and in-app events.
• AI interaction data: the content of your interactions with any AI features in the App.
• Member content: information you post in community or messaging features.
• Device and technical data: device type, operating system, app version, identifiers, IP address, and diagnostic or crash logs.

The App does not track your precise geographic location unless a specific feature requires it and you have given permission.

3. How we use your data and our legal bases

We use personal data to: provide and operate the App and its features; verify your membership; personalize your experience, including AI features and training content; generate engagement and retention insights for the Operator; send you notifications and reports related to the App; maintain security and prevent fraud; improve and develop the App; and comply with legal obligations.

Where the GDPR or UK GDPR applies, our legal bases are: performance of a contract (to provide the App); your consent (for health-related data and any marketing communications); our or the Operator's legitimate interests (to operate, secure and improve the service); and compliance with legal obligations. You can withdraw consent at any time.

4. AI features

Some features use automated and AI-based processing to generate suggestions, summaries and insights. These features do not make legally or similarly significant decisions about you on a solely automated basis. AI output is informational only and may be inaccurate.

5. How we share your data

• With the Operator: as the controller, the Operator can access data about its members through its dashboard, for example to manage memberships and understand engagement. The content of your interactions with AI features is not shared with the Operator beyond limited, aggregated or flagged signals as described in the App.
• With service providers: we use trusted providers (for example, hosting, analytics, push notifications and AI processing) who process data on our behalf under contract and only on our instructions.
• For legal and safety reasons: where required by law, to enforce our terms, or to protect the rights, safety or property of any person.
• In a business transfer: in connection with a merger, acquisition or sale of assets, subject to this Policy.

6. We do not sell your data

GymAscend does not sell your personal data and does not share it for cross-context behavioral advertising. We do not use your personal data to serve third-party advertising in the App.

7. International transfers

Your data may be processed in countries outside your own, including outside the European Economic Area or the United Kingdom. Where this happens, we use appropriate safeguards, such as standard contractual clauses, to protect your data in line with applicable law.

8. Data retention

We keep personal data for as long as your account is active and as long as needed to provide the App, then for a reasonable period afterward to meet legal, security and operational needs. The Operator may remove your access, and you may request deletion as described below. Some data may be retained in aggregated or anonymized form that no longer identifies you.

9. Security

We maintain reasonable administrative, technical and physical safeguards designed to protect personal data. No system is completely secure, and we cannot guarantee absolute security.

10. Your rights

Depending on your location, you may have the right to: access your data; correct inaccurate data; delete your data; restrict or object to processing; receive your data in a portable format; and withdraw consent. Where the CCPA applies, you have the right to know what personal information is collected, to request deletion, to opt out of the sale or sharing of personal information (note that we do not sell or share it), and not to be discriminated against for exercising your rights.

To exercise your rights, contact the Operator (as controller) or GymAscend at the details below. You also have the right to complain to your local data protection authority. In Ireland this is the Data Protection Commission.

11. Children

The App is not directed to children below the minimum age of digital consent in their country (16 in many regions, and not below 13). Children below that age may use the App only with verifiable consent from a parent or guardian, which the Operator is responsible for obtaining. If you believe a child has provided personal data without appropriate consent, contact us and we will take appropriate steps.

12. Third-party services

The App may rely on third-party platforms such as Apple and Google and may contain links to third-party services. Their handling of your data is governed by their own privacy policies, which we do not control.

13. Changes to this Policy

We may update this Privacy Policy from time to time. Where changes are material, we will provide reasonable notice, for example through the App. The "Last updated" date shows the latest version.

14. Contact

For privacy questions, or to exercise your rights, contact: GymAscend Limited, POD2, The Old House, 15A Main Street, Blackrock, Co. Dublin, A94T8P8, Ireland. Email: hello@gymascend.com. For matters where the Operator is the controller of your data, you may also contact the Operator directly through the gym whose App you are using.