Privacy Policy

This Privacy Policy explains how GymnasticBodies ("GymFit", "we", "us") collects, uses, and protects information when you use our websites and services, including gymnasticbodies.com and my.gymnasticbodies.com. By using our services you agree to the practices described here.

Information We Collect

Account information: your name, email address, and password (stored only as a secure cryptographic hash — we never store your password in plain text). You may optionally provide a phone number and country.

Payment information: when you subscribe, your card details are collected and processed directly by our payment processor. We do not store full card numbers on our servers; we retain only limited billing metadata (such as subscription status, plan, renewal date, and the last four digits of your card as provided by the processor).

Usage information: workout logs, program progress, and activity within the app, which we use to provide and personalize your training experience.

Communications: messages you send us through support or contact forms, and our records of emails we send you.

Technical information: device, browser, IP address, and interaction data collected automatically through cookies and analytics tools.

How We Use Your Information

To create and manage your account and subscription; to deliver workout programs and track your progress; to process payments and renewals; to send you service, account, and support communications; to respond to your requests; to improve and secure our services; and to comply with legal obligations.

Payment Processing

Subscriptions and renewals are handled by Stripe, our primary payment processor. Your payment card information is transmitted directly to Stripe and is subject to Stripe’s privacy policy. A small number of legacy subscribers are billed through Authorize.net. We receive from these processors only the billing metadata needed to manage your subscription.

Email Communications

We use SendGrid to send transactional and account emails (such as password resets, receipts, renewal notices, and support replies). We may also send occasional product or marketing emails; you can opt out of marketing emails at any time using the unsubscribe link or by contacting support.

Cookies and Analytics

We use strictly necessary cookies to keep you signed in and to secure your session. We also use analytics services, which may include Google Analytics and Hotjar, to understand how our site is used and to improve it. These tools may set their own cookies and collect usage data subject to their respective privacy policies. You can control cookies through your browser settings, though disabling essential cookies may prevent you from signing in.

How We Store and Protect Your Data

Your account and activity data are stored in our database (hosted on Neon) and our application is hosted on Vercel. Uploaded media may be stored using Vercel Blob or Amazon S3. We use industry-standard measures, including encryption in transit, to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Sharing Your Information

We do not sell your personal information. We share information only with service providers that help us operate our business (such as payment processors, email and hosting providers, and analytics services), and only as needed to provide our services. We may also disclose information if required by law or to protect our rights, users, or the public.

Data Retention

We retain your information for as long as your account is active and as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal data as described below.

Your Rights and Choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update your profile from your account page or contact us to exercise these rights. We will respond consistent with applicable law.

Children’s Privacy

Our services are intended for adults and are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

International Users

We operate in the United States, and your information may be processed in the United States and other countries where our service providers operate. By using our services you consent to this processing.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Your continued use of our services after changes take effect constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or your personal information, contact us at support@gymnasticbodies.com.