Privacy policy.

1. What we collect

We collect only what running the gym requires:

• Contact & account info — name, email, phone, login credentials.
• Membership info — plan, status, join date.
• Activity — class reservations, attendance, logged workout scores, badges earned.
• Messages you send us — contact-form submissions and chats with our website assistant.
• Sign-up & waiver details — date of birth, home address, emergency contact, and your signed waiver (typed signature, initials, date).
• Health information you give us — joint pain in the past six months and any conditions affecting your training. We ask so a coach can keep you safe on the floor. It is visible only to the gym owners and coaching staff.
• Optional extras — athletic background, fitness goals, how you heard about us, and a profile photo if you upload one.

For members under 18, a parent or guardian provides this information and signs on their behalf.

1b. About your profile photo

If you upload a profile photo it is stored on a public web address — anyone who has that exact link can view the image, though the link is not listed or searchable anywhere. Uploading one is entirely optional, and you can ask us to remove it at any time.

2. What we use it for

Running your membership: booking classes, taking attendance, showing the whiteboard and badges, notifying you about the classes you’re signed up for, and helping our coaches know who to check on. That’s it.

3. What we never do

• We never sell your information.
• We never send marketing text messages.
• We never share your data with third parties for their advertising.

4. Payments

Card and bank details are handled entirely by Square, our payment processor. They never touch our servers. Square’s handling of your payment data is covered by their privacy policy.

5. Where your data lives

Member records live in our database with Supabase (United States). We also use:

• Square — payments. Card numbers go straight to Square; we never see or store them.
• Anthropic — powers our website assistant. What you type into that chat is sent to Anthropic to generate a reply.
• Resend — sends email on our behalf.
• Netlify — hosts the site.

We keep member records for as long as you’re a member and for seven years afterward (signed waivers are kept for that period for legal reasons). Ask us and we’ll delete anything we’re not legally required to keep.

6. Community visibility

If you log a score on a workout, your first name and last initial appear on that day’s whiteboard to other members, along with your score and any reactions or comments. Don’t log a score if you’d rather sit a day out of the whiteboard — attendance still counts either way.

7. Your data, your rights

You can export your complete workout history anytime from your profile. If you leave the gym, ask us and we’ll delete your account data (attendance records tied to billing may be retained as required for bookkeeping). To exercise any of this, email dustin@crossfitgratitude.com.

8. Kids

Kids-class rosters are managed by parents/guardians. We don’t knowingly create accounts for children under 13.

9. Changes and contact

If this policy changes meaningfully, we’ll say so in the portal and update the effective date above. Questions: dustin@crossfitgratitude.com or julie@crossfitgratitude.com.