Privacy Policy

Last updated: September 11, 2026

What we collect

The Service stores what gyms and their members put into it: account details (name, email address, role), training data recorded by coaches (workouts, sets, weights, personal records, coaching notes), class schedules and sign-ups, and billing records for memberships and purchases. Sign-in is by emailed magic link — we do not store passwords.

Payments

All card payments are processed by Stripe. Card numbers never touch our servers; we store only the references Stripe returns (such as a subscription or payment id) and the resulting ledger entries.

How data is used

Data is used to run the Service for the gym that entered it: showing a coach their class, an athlete their history, a parent their kids’ schedule, and the front desk its ledger. We send transactional email (sign-in links, invitations, receipts, reminders) — never marketing to gym members. We do not sell personal data, and we do not use training data for advertising.

Tenant isolation

Each gym’s data is isolated at the database layer with row-level security. One gym cannot read another gym’s data, and changes made by platform staff are logged in an audit trail.

Where data lives

Data is hosted on managed infrastructure in the United States (application hosting on Vercel, database on Neon Postgres, transactional email via Resend). The coaching app also keeps a local offline copy on devices the gym signs in, so sessions keep running without a connection; that copy syncs back when the device reconnects.

Minors

Athlete accounts for minors are created and managed by their gym and linked to a parent or guardian account. Parents and guardians can see their own children’s data and nothing else. We collect no more information about minors than the gym needs to run its program.

Your choices

Gyms can export their data at any time by asking us. Individuals can ask their gym, or us directly, to correct their personal data. Contact support@athleteruntime.com.

Deleting your account. Any signed-in person can delete their own account from inside the app (the menu beside Sign out). Deletion is immediate: your login, name, email, phone and photo are removed, every session and sign-in token is revoked, and every role and link you held is ended. Your gym keeps what it is obliged or entitled to keep: its own training records and notes, with your name removed so they read as a former coach or athlete rather than as you; its purchase and payment history; and any emergency-contact card a guardian left. Unused credits and packages are forfeited. An active membership must be cancelled first so nothing keeps billing. Erasing a coaching record itself — an athlete’s sets, results and notes — is the gym’s own action under this policy; ask the gym. A confirmation is emailed to the address that was on the account.

Changes

If this policy changes materially, gym owners are notified by email before the change takes effect.