DRAFT, pending legal review before launch. Last updated: 2026-11-11.

Privacy policy

Gymaway (the "app") is published by Poseidawn LLC, a Wyoming limited liability company ("we", "us"). This policy explains what personal data the app handles and your choices. Contact: [email protected].

Data we collect

• Account: your email address and a password, or the identifier returned by Sign in with Apple or Google.
• Profile: your first and last name, phone number, date of birth and, optionally, your city. They are used to pre-fill the gym's official free pass form.
• Settings: your language, notification settings and analytics choice.
• Passes: the gyms for which you requested a free pass, and the status of each request.
• Notifications: a push token, only if you allow notifications.
• Usage analytics: only if you opt in. Events such as app opened or gym viewed, never your name, email, phone number or precise location.
• Crash reports: technical diagnostics with personal data removed.

Location

If you allow it, your location is used on your device to show nearby gyms. It is never sent to or stored on our servers.

Free pass forms

To get a free pass, the app opens the gym brand's official form. The details you enter there are sent to that gym operator, under its own privacy policy. We never submit a form without you pressing "Send".

Why we use data

To run your account, show gyms, handle your pass requests, send the notifications you allowed, keep the app secure and, with your consent, understand how the app is used.

Service providers

We use these processors, hosted in the EU or Switzerland where available:

• Supabase: database and authentication.
• Brevo: sending sign-in emails.
• PostHog (EU): product analytics, only with your opt-in.
• Sentry: crash reports.

Map data

Gym locations come from OpenStreetMap (© OpenStreetMap contributors, ODbL) and from files we review ourselves.

Your rights

In the app, under Account, you can export your data and delete your account. Deleting your account removes your profile, passes and push tokens. You can also write to [email protected] to exercise your rights under applicable law (access, correction, deletion, objection, complaint to your data protection authority).

Changes

We will update this page when this policy changes and show the date above.