Privacy Policy
Last updated: March 2026 · Effective immediately
OS4Gyms ("we", "us", or "our") is committed to protecting the privacy of children and families who use our platform. This policy explains how we collect, use, and protect personal information — including information about children under 13 — in compliance with the Children's Online Privacy Protection Act (COPPA) and applicable state laws.
1. Information We Collect
From gym operators: Business name, contact details, billing information, and platform usage data.
From parents/guardians: Name, email, phone, address, and payment method for membership billing.
From/about children (with parental consent): Child's name, age, gender, skill progress, class attendance, and related training records. We do not collect more information than necessary.
Automatically: IP address, browser/device type, and usage logs for security and performance.
2. COPPA — Children Under 13
We collect personal information about children only with verified parental consent obtained through our consent flow before enrollment or booking.
Parents may at any time: review their child's information, request corrections, or request deletion of their child's data by contacting us at privacy@os4gyms.com or through the Parent Portal → Settings → Delete My Account.
We do not share children's personal information with third parties for marketing purposes.
3. How We Use Information
To operate the gym management platform and process memberships, bookings, and payments.
To send transactional communications (booking confirmations, payment receipts, class reminders).
To improve our services through aggregated, de-identified analytics.
To comply with legal obligations.
4. Data Sharing
We share data only with: (a) the gym operator who enrolled your family, (b) payment processors (Stripe) to handle billing, and (c) service providers under strict confidentiality agreements.
We never sell personal data, especially children's data.
5. Data Retention & Deletion
Family and athlete data is retained as long as an active membership exists, or up to 2 years after the last activity for legal/tax compliance.
You may request full deletion of your family's data at any time. Requests are processed within 30 days. Submit requests via the Parent Portal or email privacy@os4gyms.com.
6. Security
We use industry-standard encryption (TLS in transit, AES-256 at rest), access controls, and regular security audits to protect your data.