Privacy Policy

Last updated: June 17, 2026

Athletes Club, LLC ("Athletes Club," "we," "us," or "our") operates the Athletes Club platform, including our website at athletesclub.app, facility management web application, and member mobile applications for iOS and Android (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Services. By accessing or using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

1. Information We Collect

We collect information in the following ways:

Information you provide directly

• Account and profile information: name, email address, phone number, date of birth, gender, profile photo, and other details you choose to provide when creating or updating an account.
• Facility and business information: for facility operators, business name, branch details, staff information, and operational settings.
• Communications: messages you send through contact forms, support requests, or other correspondence with us.
• Payment-related information: when you make purchases or subscribe to a facility plan, we and our payment processors may collect billing details, subscription status, invoice history, and payment method metadata. Payment card data is processed by Stripe; we do not store full card numbers on our servers.
• Subscription and billing data: for facility operators, we store plan tier, trial dates, billing email, billing address, tax identifiers, dunning history, and platform subscription status needed to operate SaaS billing.

Information collected automatically

• Usage data: pages viewed, features used, actions taken, timestamps, and interaction data within the Services.
• Device and technical data: device type, operating system, browser type, app version, IP address, and general diagnostic information.
• Location information: with your permission, we may collect precise or approximate location data to support features such as facility discovery, check-in validation, and map-based search.
• Cookies and similar technologies: on our website, we use cookies and similar tools for essential functionality, analytics, and preferences. See our cookie banner for choices where available.

Information from third parties

• Authentication and identity providers when you sign in through supported methods.
• Payment processors such as Stripe regarding transaction status and fraud prevention signals.
• Facility operators who may add or manage member records within their workspace.

2. How We Use Your Information

We use collected information to:

• Provide, operate, maintain, and improve the Services.
• Create and manage accounts, authenticate users, and enforce access controls.
• Process memberships, class bookings, personal training sessions, marketplace orders, and other transactions.
• Enable QR check-in, attendance tracking, and facility access workflows.
• Send service-related communications, including account notices, booking confirmations, security alerts, trial reminders, payment-failure notices, subscription renewal reminders, and billing receipts.
• Send optional marketing or promotional messages where permitted and subject to your preferences.
• Provide customer support and respond to inquiries.
• Monitor, detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Comply with legal obligations and enforce our Terms of Service.

3. How We Share Your Information

We do not sell your personal information. We may share information in these circumstances:

• With your facility: if you are a member of a gym, academy, or facility using Athletes Club, relevant profile, booking, check-in, payment, and waiver information may be visible to authorized staff of that facility.
• Service providers: we use trusted vendors that help us operate the Services, including hosting (for example, Vercel), database and authentication (for example, Supabase), payments (Stripe), email delivery (for example, Resend), analytics, and push notification infrastructure.
• Legal and safety: when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect rights, safety, and security.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.
• With your consent: when you direct us to share information or otherwise consent.

4. Data Retention

We retain personal information for as long as necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of data and the facility's operational needs.

Subscription data: canceled facility accounts may be archived after 90 days. Billing logs (for example, `subscription_history`, `dunning_attempts`, and email delivery logs) may be retained for audit, tax, and dispute resolution purposes as permitted by law.

5. Your Rights and Choices

GDPR and data subject rights

If you are in the EEA, UK, or other regions with applicable privacy laws, you may request access, correction, deletion, export, or restriction of your personal data. Email privacy@athletesclub.app. Facility operators are the data controller for member records; Athletes Club is the controller for platform billing data.

Depending on your location, you may have rights to:

• Access, correct, or update personal information through your account settings or by contacting us.
• Request deletion of your account or certain personal information, subject to legal and contractual limitations.
• Opt out of marketing communications by using unsubscribe links or contacting us.
• Manage location, notification, and camera permissions through your device settings.
• Manage cookie preferences on our website where supported.

If you are located in the European Economic Area, United Kingdom, or other regions with applicable privacy laws, you may have additional rights, including the right to object to or restrict certain processing and the right to lodge a complaint with a supervisory authority.

6. Security

We implement administrative, technical, and organizational measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International Data Transfers

Athletes Club is based in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries where we or our service providers operate.

8. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us so we can take appropriate action.

9. Third-Party Links and Services

The Services may contain links to third-party websites or integrate third-party services. Their privacy practices are governed by their own policies, not this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

• Email: privacy@athletesclub.app · billing@athletesclub.app
• Website: athletesclub.app

Athletes Club, LLC