PRIVACY POLICY

Last updated: October 10, 2026

Who we are

GOLDEN HOUR ATHLETICS LLC. Gym and contact address: 730 Parque Drive Units E, F & G, Ormond Beach FL 32174.

Questions about this policy or your data? Email info@goldenhourathletics.com.

Adults and guardian-managed dependents

The mobile app is intended for adults using their own accounts. Parents and guardians can manage eligible dependent memberships and bookings through their adult accounts. Children are not intended to sign in themselves. We receive dependent details needed for these services, including identity, date of birth, bookings and guardian-managed agreements.

What we collect

When you create an account or use the app, we collect:

  • Account details (name, email, password)
  • Contact details (phone number, address)
  • Emergency contact information
  • Date of birth for account signup and guardian-managed dependents
  • Payment details, processed by Stripe (we do not store your card number)
  • Class bookings and check-ins
  • Results you log (workouts, personal records)
  • Photos you upload
  • Device push tokens, so we can send you notifications
  • Signed agreements, consent choices and acceptance metadata, including time, IP address and browser information
  • App crash and error diagnostics, including account identifiers and navigation history
  • Location coordinates when you allow location-based class check-in
  • Membership freeze duration and the reason you select
  • Website usage and analytics information, such as page views, interactions and browser or device information
  • Community rules acceptance, member reports and details you submit, block choices and moderation records

How we use it

We use your information to run your membership: scheduling and booking classes, checking you in, billing you for your membership, tracking your workout results and personal records, keeping your emergency contact on hand in case of an incident, and sending you the account, billing, and class notifications. We use diagnostics and website analytics to investigate errors, maintain reliability and understand how people use our services.

Community safety

Your public profile and results can be visible to other account holders. We record the community rules version and acceptance time when you accept the rules. When you report a member, we receive your account identifier, the reported member, selected reason and any details you provide so gym staff can investigate. The reported member is not shown who submitted the report. Your block choices control which member content appears to you; gym staff also maintain moderation records to enforce the rules.

App diagnostics and website analytics

We use Sentry for mobile crash and error reporting. Reports can include error details, session stability information, device and operating-system information, app version and update information, screens or routes used before an error, and your signed-in account identifier. The identifier helps us investigate issues affecting an account; these reports are not anonymous.

The app is configured to exclude screenshots and request details from Sentry reports and limit default personal-information capture. These safeguards reduce accidental disclosure but do not guarantee that a report can never contain personal information.

Our website can use PostHog and Vercel analytics. PostHog can record page views, interactions and session replay on marketing pages. PostHog is configured to mask input values in replay and disable replay on signup, drop-in, household invitation/account, account-deletion and mobile-verification pages. Analytics can include browser or device identifiers and usage information; we do not describe all analytics as anonymous.

Bot protection

We use Cloudflare Turnstile to help protect website forms and mobile account verification from automated abuse. The mobile app opens our verification page for the check. Cloudflare processes technical signals such as your IP address, browser information, connection characteristics and the verification page's origin. Cloudflare also uses these signals to improve its bot detection. We receive a verification token to validate the request; completing the check does not subscribe you to marketing. Cloudflare's handling of this information is described in its privacy policy. Provider logs and retention can follow separate processes from deleting your gym account.

Optional location check-in

When you choose class check-in, the app asks for foreground location permission and obtains a location fix. Depending on your device and permission settings, this can provide precise or approximate coordinates. The app sends the coordinates to our Supabase-backed check-in service to check whether you are near the gym. This feature does not request background location. Your attendance record includes the check-in time and method.

You can decline location access and use the manual check-in option offered by the app. Manual check-in is also offered when location is unavailable or your location near the gym cannot be confirmed. Diagnostic or infrastructure logs may have separate retention from your attendance record.

Membership freeze requests

A freeze request includes the duration and your selected reason so we can administer the request and your membership. Choices include medical, financial, travel, voluntary and other. Medical and financial are optional selections; you can choose another reason. A medical selection can reveal health-related information, and a financial selection can reveal information about your financial circumstances. The app's freeze form does not ask for a diagnosis, medical documents, income or credit information.

Membership emails and marketing

We use Klaviyo for gym email updates and marketing. When a paid membership first becomes active, and during reconciliation, our membership integration uses your email address to look up an existing Klaviyo profile. It updates member status, membership plan code and email audience membership only when that profile already has an email marketing subscription and can currently receive marketing email. Membership activation does not create a marketing profile, subscribe you, or reverse an unsubscribe or suppression. Reconciliation of website leads also preserves existing marketing permission. The membership integration excludes profiles managed by a parent or guardian. You can unsubscribe using the link in a marketing email or contact us about your email preferences.

Who processes it for us

We use the following platforms to operate the gym, app and website:

  • Supabase — our database, authentication, and file storage
  • Stripe — payment processing and billing
  • Klaviyo — email marketing, membership email audiences and member/plan properties
  • Sentry — mobile crash reports, error investigation and session stability diagnostics
  • Resend — transactional email delivery
  • Expo — mobile app push notifications
  • PostHog — website usage analytics and marketing-page session replay
  • Vercel — website hosting and analytics
  • Cloudflare Turnstile — bot protection for website forms and mobile verification

Deleting your account

You can request deletion of your account and personal data in the app (Profile → Account Security → Delete Account) or with the form on our website. Either path requires you to confirm the request before we act on it.

Confirming a request starts the deletion process; it does not mean deletion has already finished. Our account-deletion policy calls for verified requests to be completed within 30 days, with an email confirmation when complete. Contact us if you cannot confirm your request or need information about its progress.

The deletion process covers your account, profile, bookings, logged results and uploaded photos. Billing history, signed waivers and membership agreements are retained under the policy below. Provider records, diagnostics, logs and backups can follow separate retention or deletion processes; a confirmed request is not an assurance that every provider copy has already been removed.

Removing some data while keeping your account

In the app, you can remove your profile photo in Profile → Preferences and your banner in Profile → Public Profile. You can delete an individual logged workout result from its result controls. These actions do not close your account or delete your billing, signed agreements, all activity records or every provider copy. Contact us if you need help removing a specific record or cannot use these controls.

How long we keep records

Our retention policy distinguishes core account data from billing and signed agreements. Retention also depends on the purpose of the record, applicable legal obligations, outstanding disputes and provider retention or backup processes. The billing and agreement periods below are our existing retention policy; we do not promise automatic deletion of retained records on a fixed date. Contact us with questions about a specific record or provider.

CategoryWhatHow long
Billing & payment recordsInvoices, receipts, and subscription/payment historyKept for at least 7 years, for tax and audit purposes
Signed waivers & membership agreementsLiability waivers and membership agreements you signedFor the duration of any applicable legal limitation period
Minor-waiver recordsWaivers signed on behalf of a dependent under 18Until the dependent reaches the age of majority, plus the applicable limitation period
Core account dataAccount details, class bookings, logged results, and uploaded photosOur account-deletion policy calls for deletion within 30 days of a verified request, subject to retained records described here
Diagnostics, infrastructure logs & provider copiesCrash reports, session diagnostics, analytics and service logs, and provider backupsRetention depends on provider settings and backup/deletion processes. Our deletion review of Sentry, Resend and Klaviyo records requires verified cleanup; retaining those records instead requires a stated security, fraud-prevention or regulatory-compliance reason and a confirmed finite expiry
Membership administration & marketingFreeze periods, email audience and membership propertiesBilling history can retain freeze dates and durations. Account erasure clears freeze notes and neutralizes medical/financial reasons in membership history, and redacts those reasons from audit payloads. Marketing records also depend on provider deletion or suppression processes
Community safety recordsRules acceptance, reports, block choices and moderation eventsUsed to investigate concerns and enforce community rules. Account erasure removes block relationships and scrubs known identifiers from details of reports submitted by the deleted account. Reports about the account can remain as moderation evidence, including their narratives. Report identities, reasons, dates and outcomes, rules-acceptance versions/dates and moderation event identities can remain as historical evidence

Your choices

  • Community visibility — control whether your results appear in the community feed
  • Photo/media consent — grant or decline permission for us to use your photo
  • Marketing emails — unsubscribe at any time from the link in any marketing email
  • Check-in location — decline foreground location permission and use manual check-in
  • Freeze reasons — choose an available reason other than medical or financial

General fitness information

Golden Hour Athletics supports general fitness. It is not a medical device and does not diagnose, treat, cure or prevent any medical condition. For advice about your health, diagnosis or treatment, speak with a qualified healthcare professional.

Contact

Questions about this policy or your data? Email info@goldenhourathletics.com or write to us at 730 Parque Drive Units E, F & G, Ormond Beach FL 32174.