Privacy Policy

1. Information we collect

Account and profile information

• Email address and authentication provider account identifier
• Name, username, optional biography, and optional profile photo
• Legal-policy acceptance and account creation dates

Pass, payment, and access information

• Gym, pass price, purchase date, validity period, and pass status
• Payment transaction identifier, amount, refund, and dispute information
• Pass redemption and gym check-in time

Stripe processes payment-card and gym payout details. Guest Pass does not receive or store full payment-card numbers or bank account credentials.

Location and search information

If you grant location permission, the app sends your current coordinates to our search service to rank nearby gyms and show your position on the map. We do not save those coordinates to your profile or create a location history. Search terms, selected filters, and Google Places selections may be processed to return gym and address results.

Gym owner and listing information

• Name, business contact email, and account identifier
• Gym name, address, hours, amenities, descriptions, and photos
• Claim-verification, Stripe onboarding, and listing status

Technical and support information

• Crash reports, app route, app version, device and operating-system details, and a pseudonymous user identifier
• Security and server logs, including IP address and request time
• Messages and information you provide when contacting support

2. How we use information

• Create and secure accounts
• Find gyms and display listings
• Process pass purchases, access, refunds, payouts, and disputes
• Verify gym ownership and manage gym listings
• Send authentication, claim-verification, transaction, and support messages
• Diagnose errors, improve reliability, prevent fraud, and enforce our terms
• Meet tax, accounting, legal, and regulatory obligations

3. When we share information

We share only what is needed for the purposes described in this policy:

• Participating gyms: pass validity, member name and photo, and redemption status so staff can confirm entry
• Supabase: database, authentication, storage, and server functions
• Stripe: payment processing, connected-account onboarding, payouts, refunds, fraud prevention, and disputes
• Google Maps Platform: maps, place search, and address details
• Resend: transactional and verification email delivery
• Sentry: crash diagnostics and limited performance monitoring
• Authorities or other parties: when required by law or reasonably necessary to protect users, prevent fraud, or defend legal rights

We do not sell personal information or share it for cross-context behavioral advertising.

4. Data retention and deletion

We use the following retention periods:

• Account, profile, and avatar: kept while your account is active. After a verified deletion request, these records are deleted promptly and no later than 30 days.
• Pass, purchase, redemption, payout, refund, and dispute records: retained for up to seven years after the transaction for accounting, tax, fraud prevention, dispute, and legal purposes. When an account is deleted, Guest Pass removes the account identifier from retained pass records.
• Gym claim verification: a verification code expires after 24 hours. Claim and business-verification records may be retained for up to three years after the claim or the end of the business relationship to prevent fraudulent claims and resolve ownership disputes.
• Crash, performance, and security logs: retained for up to 90 days, unless a record is needed longer to investigate an active security or fraud incident.
• Support communications: retained for up to three years after the most recent interaction.
• Backups: residual copies may remain in encrypted backups for up to 30 days before normal rotation removes them.

Public gym listing information may remain after an owner deletes a personal account because the listing describes the gym, not the individual. We remove personal contact information from a listing upon a verified request, unless we must retain it for one of the limited legal reasons above.

We may retain a minimum record of a deletion request or information required by law for the applicable legal period. Retained information is restricted to the stated purpose and deleted or de-identified when that purpose ends.

5. How to delete your account and data

In the mobile app, open Profile, choose Delete account, and confirm. If you cannot access the app, use our account-deletion page or email contact@yourguestpass.com from the address associated with your account. We may verify your identity before completing a request.

6. Your choices and rights

Depending on where you live, you may ask us to:

• Provide access to or a copy of your personal information
• Correct inaccurate personal information
• Delete personal information
• Restrict or object to certain processing

You may disable location access in device settings. You may also opt out of optional marketing messages using the instructions in the message; essential service messages will continue while your account is active.

7. Data security

We use safeguards designed to protect personal information, including encrypted network connections, access controls, restricted database permissions, and payment processing through Stripe. No online service can guarantee absolute security.

8. Children’s privacy

Guest Pass is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can delete it.

9. International processing

Guest Pass operates in the United States. We and our service providers may process information in the United States and other countries whose data-protection laws may differ from those where you live.

10. Website storage and external links

Our websites may use essential browser storage or cookies for authentication, security, and preferences. We do not use them for behavioral advertising. The platform may link to third-party sites whose privacy practices are governed by their own policies.

11. Policy changes

We may update this policy as our services or legal obligations change. We will post the revised policy with a new “Last updated” date and provide additional notice when required.

12. Contact

Guest Pass LLC
Privacy contact: contact@yourguestpass.com