Privacy Policy

1. Information We Collect

When you sign up for GymText, we collect information you provide on the signup form: your name, email address, mobile phone number, age, gender, fitness goals, experience level, training availability, training location, equipment access, and your preferred daily message time. We also collect your timezone (detected from your browser) and a timestamp recording when you provided SMS consent.

When you receive or send SMS messages, we and our messaging provider (Twilio) process the message body, sender and recipient phone numbers, and delivery status information.

When you make a payment, our payment processor (Stripe) collects payment card information directly. We do not store full payment card numbers on our servers.

For clarity, the categories of personal information we collect are:

• Identifiers and contact information — name, email address, mobile phone number.
• Demographic and fitness profile information — age, gender, fitness goals, experience level, training availability, training location, and equipment access.
• Commercial information — programs you have enrolled in and subscription status (payment card details are processed by Stripe and not stored by us).
• Internet or other electronic activity information — timezone detected from your browser at signup.
• SMS opt-in record — the timestamp at which you provided SMS consent and the consent text shown to you on the signup form.
• SMS message content and delivery metadata — the body of messages we send to and receive from you and the associated delivery status information from our messaging provider.

2. How We Use Information

We use the information we collect to:

• Deliver daily workout messages to your phone via SMS;
• Personalize the workouts you receive based on the answers you provided at signup;
• Process subscription payments and send billing-related notifications;
• Honor opt-out requests and other support requests;
• Diagnose and fix problems with the messaging service; and
• Comply with legal obligations.

3. Mobile Information and SMS Opt-In Data — No Third-Party Sharing

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

For clarity, “mobile information” as used above includes your mobile phone number, your SMS opt-in record (the timestamp at which you consented and the consent text shown to you on the signup form), the contents of SMS messages you send to or receive from us, and any associated delivery metadata. We do not sell, rent, lease, or trade this information, we do not share it with data brokers, and we do not use it for cross-context behavioral advertising.

In plain language: we do not sell, rent, or share your phone number or your SMS opt-in consent information with any third party for marketing. We share it only with the service providers strictly necessary to deliver the SMS service to you (today: Twilio, our messaging provider).

4. Service Providers

We share information with the following service providers solely to operate the service:

• Twilio — SMS delivery, inbound message handling, delivery status callbacks.
• Stripe — subscription billing and payment processing.
• Hosting and infrastructure providers — serve the GymText website and store the database. These providers act on our behalf as data processors and are bound by confidentiality and data-protection terms.

We do not share information with third parties for their own marketing or advertising purposes.

5. Coaches and Programs

Coaches and trainers who author programs on the GymText platform do not have access to your phone number, SMS replies, or personally identifying information. The coach authors the program content; GymText sends the messages. Inbound SMS replies are handled by GymText; the coach does not receive them.

6. Data Retention

We retain account and messaging records for as long as your account is active and for a reasonable period afterward to support customer service, comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your account and associated personal information at any time by emailing support@gymtext.co.

7. Data Security

We use industry-standard administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. The subprocessors named in Section 4 are contractually obligated to maintain comparable safeguards. No system is perfectly secure, however, and we cannot guarantee the security of information transmitted to or from the service.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port the personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, email support@gymtext.co. You can also opt out of SMS at any time by replying STOP to any message we send.

We do not sell personal information and we do not share personal information for cross-context behavioral advertising, as those terms are defined under California law. California residents may exercise their rights under the California Consumer Privacy Act (including the CPRA amendments) by contacting us at the email address above.

9. Children’s Privacy

GymText is not directed to children under 16 and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us at support@gymtext.co and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by SMS or email.

11. Contact

Questions about this Privacy Policy or our data practices can be sent to support@gymtext.co.