Privacy Policy

1. Information We Collect

• Account and profile information: name, email address, username, profile photo, belt rank, biography, home gym, social links, authentication information, and other profile details you choose to provide.
• Training and activity information: gym check-ins, training sessions, journal entries, streaks, goals, belt progress, favorites, attendance, achievements, and related activity you record through the Service.
• Community content: messages, posts, comments, reviews, group activity, follows, connections, reports, photos, and other content you submit or share.
• Location information: approximate or precise location when you grant permission, used for nearby gyms, distance, check-ins, local content, and location-based features. You can change location permissions in your device settings.
• Health and fitness information: if you choose to use Apple Health or Apple Watch features, the Service may access or create workout information such as workout duration, heart rate, active energy burned, and related workout metrics with your permission. Health and fitness information is used to provide training and workout features and is not used for advertising.
• Photos, camera, microphone, and speech: photos or images you choose to upload, camera access for supported features such as QR codes or image capture, and microphone or speech-recognition access when you choose voice-enabled features such as journal dictation.
• Gym and business information: gym names, addresses, schedules, instructors, photos, contact information, claimed-listing information, events, membership or promotional information, and information submitted by gym owners or obtained from publicly available sources.
• Transaction information: subscription, advertising, merchandise, or other purchase information. Payment card processing is handled by payment providers such as Stripe; we do not store complete payment card numbers.
• Device, diagnostics, and usage information: IP address, device and operating-system information, app version, browser information, identifiers, pages or features used, performance information, crash reports, and diagnostic logs.
• Notifications and device tokens: push-notification tokens and notification preferences when you enable notifications.
• Cookies and local storage: session information, preferences, consent choices, and similar technologies used on our website and in our applications.

2. How We Use Information

• Provide, operate, personalize, and maintain the Service, including gym discovery, schedules, check-ins, Passport, Journal, community, messaging, notifications, and Apple Watch features.
• Authenticate users, maintain sessions, secure accounts, prevent abuse and fraud, enforce our terms, and protect users and the Service.
• Calculate training statistics, streaks, achievements, rankings, distances, and other features requested by users.
• Process transactions, subscriptions, advertising services, and merchandise orders and provide related customer support.
• Diagnose crashes and errors, monitor performance, understand feature usage, and improve our products and services.
• Send transactional messages, account notices, service updates, and, where permitted, marketing communications. You can opt out of marketing communications without opting out of essential service messages.
• Comply with applicable law, respond to lawful requests, resolve disputes, and enforce agreements.

3. How We Share Information

We may share information with service providers that help us operate the Service, including:

• Supabase: authentication, database, storage, and backend infrastructure.
• Vercel: website hosting, delivery, performance, and web analytics infrastructure.
• Sentry: crash reporting, error monitoring, and diagnostics.
• PostHog: product analytics and feature-usage measurement where enabled.
• Stripe: payment and subscription processing.
• Apple and Google: sign-in, mobile-platform, mapping/location, notification, or other platform services you choose to use.
• Printful and fulfillment providers: merchandise fulfillment when you place an applicable order.
• Email and communications providers: delivery of transactional or permitted marketing communications.

Some information you choose to make public—such as your profile, posts, reviews, activity, or gym-related content—may be visible to other users or the public depending on the feature and your settings. We may also disclose information when required by law, to protect rights or safety, in connection with a business transaction, or with your direction or consent.

We do not sell your personal information. We do not use HealthKit or Apple Health data for advertising or sell it to data brokers.

4. Apple Health and HealthKit

Health and fitness features are optional and require your permission. When enabled, Let’s Roll may read or write health and workout data needed to provide the feature you requested. You control Health permissions through Apple’s Health app and device settings. We do not use information obtained through HealthKit for advertising, marketing profiling, or sale to third parties. Health information is shared only as necessary to provide the health or fitness functionality you request, as permitted by you, or as required by law.

5. Location Information

Location access is optional. If you grant permission, we may use your device location to show nearby gyms, calculate distance, support check-ins, and personalize local experiences. Depending on the feature, location may be processed while you are actively using the Service. You can disable location access through your device settings, although some location-based features may no longer work.

6. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, maintain security, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by the type of information and why it is collected. When information is no longer needed, we may delete or de-identify it. Backup copies may remain for a limited period before being overwritten or deleted.

7. Your Choices and Privacy Rights

• Profile and permissions: update profile information in the Service and manage location, camera, microphone, notifications, Health, and other device permissions in your device settings.
• Account deletion: eligible users can initiate permanent account deletion from the app through Settings → Delete Account. You may also contact us for assistance with privacy requests.
• Access, correction, and export: contact us to request access to or correction of personal information we maintain about you, subject to applicable law.
• Marketing: use the unsubscribe link in marketing emails or contact us to change marketing preferences.
• Cookies: manage applicable cookie choices through our website controls or your browser settings.

Depending on where you live, you may have additional rights regarding your personal information, including rights to know, access, correct, delete, obtain a portable copy of, or restrict certain uses of personal information, and to appeal certain decisions. We will not discriminate against you for exercising applicable privacy rights. To submit a request, email privacy@letsroll.co. We may need to verify your identity before completing a request.

8. Children’s Privacy

Let’s Roll is not directed to children under 13, and children under 13 may not create their own accounts. If we learn that we collected personal information directly from a child under 13 without legally sufficient authorization, we will take appropriate steps to delete it. Parents or guardians who believe a child has provided personal information to us may contact privacy@letsroll.co.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encrypted network connections, access controls, authentication protections, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International Data Transfers

Let’s Roll is operated from the United States. We and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards for international transfers of personal information.

11. Changes to This Policy

We may update this Privacy Policy as the Service evolves or legal requirements change. We will post the updated version here and revise the “Last updated” date. When appropriate, we may provide additional notice through the Service or by email.

12. Contact Us

For privacy questions or requests, email privacy@letsroll.co. For general support, email support@letsroll.co.