1. Who We Are and Scope
This Privacy Policy explains how Tech Girl LLC ("Company," "we," "us") collects, uses, shares, and protects personal information when you use the Gym Atlas website and mobile applications (the "Platform"). It applies to both Trainers and Clients.
The Platform connects independent Trainers with Clients for remote fitness programming and message-based guidance. For most personal information you provide, we act as the "controller." With respect to content a Client shares with a Trainer, the Trainer independently determines how they use it; we are not responsible for a Trainer's independent data practices.
2. Information We Collect
2.1 Information you provide:
- Account/identity: name, email, username, password, date of birth, profile photo.
- For Trainers: certifications, qualifications, bio, payout details.
- For Clients — health & fitness data: age, sex, height, weight, body measurements, body-fat percentage, fitness level, training history, injuries, medical conditions you disclose, goals, workout logs, and progress data.
- Communications & messages: the content of messages you exchange with Trainers or with us (including any photos or health details you choose to include), support requests, and related metadata (timestamps, read status). We store message content to deliver the service, for safety and moderation, and to comply with legal obligations.
- Payment information: processed by our third-party payment processor (Stripe); we do not store full card numbers.
2.2 Information collected automatically:
- Device & usage data: IP address, device identifiers, app version, operating system, pages/ screens viewed, and interactions.
- Cookies and similar technologies (web).
2.3 Information from connected services: We do not currently integrate with third-party health or fitness services. All health and fitness data is provided directly by you. If we add such integrations in the future, we will update this Policy and obtain any consent required before receiving data from them.
3. How We Use Information
We use personal information to: (a) create and manage accounts; (b) deliver the Platform's core function — connecting Clients and Trainers and enabling delivery of programs and messages; (c) process payments and Trainer payouts; (d) provide customer support; (e) maintain safety, security, and prevent fraud; (f) comply with legal obligations; and (g) with your consent, send marketing communications (which you can opt out of at any time).
We do not sell your personal information, and we do not sell or share your health or fitness data for advertising or cross-context behavioral advertising.
4. How We Share Information
- With Trainers / Clients: A Client's profile and health/fitness information is shared with the specific Trainer(s) that Client chooses to work with, so the Trainer can create programs and provide guidance. Trainers receive only the data needed for that relationship.
- Service providers: vendors that provide hosting, payment processing (Stripe), in-app messaging/chat (Stream), analytics, customer support, and communications, under contracts limiting their use of the data to providing services to us.
- Safety & moderation: authorized personnel may access message content to investigate reports, enforce our Terms, or protect users.
- Legal and safety: when required by law, subpoena, or to protect rights, safety, or property.
- Business transfers: in connection with a merger, acquisition, or sale of assets (you will be notified).
We do not sell personal information as defined under applicable law.
5. Washington Consumer Health Data (My Health My Data Act)
This section is required if you collect "consumer health data" from Washington residents.
Because the Platform collects information about your physical and fitness condition, some data we collect may be "consumer health data" under the Washington My Health My Data Act ("MHMDA").
- We collect consumer health data only with your consent, for the purpose of providing the Platform's fitness-coaching functionality.
- We obtain your separate, specific authorization before sharing consumer health data with any third party (including your chosen Trainer), where required by law.
- We do not sell consumer health data without your valid written authorization.
- You have the right to access, withdraw consent to the collection of, and request deletion of your consumer health data, and to a list of third parties with whom it has been shared.
Full details, and how to exercise these rights, are in our separate Consumer Health Data Privacy Policy at https://gymatlas.fitness/legal/consumer-health-data. To exercise MHMDA rights, contact privacy@gymatlas.fitness.
6. Not Subject to HIPAA
The Company is a fitness and wellness service, not a healthcare provider, health plan, or healthcare clearinghouse. We are not a "covered entity" or "business associate" under HIPAA, and the information we handle is generally not "protected health information" under HIPAA. We do not represent that our practices meet HIPAA requirements.
7. Your Privacy Rights
Depending on where you live (including under the Washington My Health My Data Act and the California Consumer Privacy Act), you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Delete your personal information;
- Opt out of marketing and of any "sharing" for targeted advertising;
- Withdraw consent where processing is based on consent;
- Receive a list of third parties we have shared data with (health data, under MHMDA);
- Not be discriminated against for exercising these rights.
To exercise any right, contact privacy@gymatlas.fitness. We will verify your identity before responding and respond within the timeframe required by law.
8. Cookies and Tracking (Web)
We use cookies and similar technologies for authentication, preferences, and analytics. You can control cookies through your browser settings. [If you use any advertising/analytics SDKs, list them and provide opt-out.]
9. Mobile App Disclosures
Our mobile app may request permissions (e.g., notifications). We collect and use data as described above. We comply with Apple App Store and Google Play data-handling and disclosure requirements, including their privacy "nutrition label" / Data Safety disclosures, which summarize the categories of data the app collects.
10. Data Retention
We retain personal information for as long as your account is active and as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. We delete or de-identify consumer health data following a valid deletion request, except where retention is legally required.
11. Security
We implement administrative, technical, and physical safeguards (including encryption in transit) designed to protect personal information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
12. Children's Privacy
The Platform is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it.
13. International Users
The Platform is operated from the United States. If you access it from outside the US, you consent to processing your information in the US. [If you serve EU/UK users, add a GDPR/UK-GDPR section with legal bases, SCCs, and the right to lodge a complaint with a supervisory authority.]
14. Changes to This Policy
We may update this Policy. Material changes will be notified through the Platform or by email, and the "Last Updated" date will change.
15. Contact Us
Tech Girl LLC — Privacy Kirkland, WA, USA · privacy@gymatlas.fitness