Privacy Policy

1. Data controller and contact details

Address:

Ra'anana, Israel

Email:

support@gymnasos.com

2. Introduction

This policy explains how Gymnasos (the "Service") collects, uses, and stores personal information when you use our website, app, and studio tools. Use of the Service is also subject to our Terms of Service.

3. Information we collect

Depending on how you use the Service, we may collect:

• Account details: name, email, studio name, and login data (including Google sign-in).
• Business and client data you enter: leads, customers, schedules, programs, forms, and health declarations.
• Technical usage data: IP address, browser type, device identifiers, and error logs — for security and operations.
• Product analytics and session recordings (PostHog) on the studio app and marketing site: pages opened, in-product actions, and errors. Typed input is masked in recordings. We do not send client PII or health-declaration answers.

4. How we use information

We use information to provide the Service, verify identity, secure accounts, support users, improve the product, and meet legal obligations. We do not sell personal information to third parties.

5. Service providers

Data may be processed by infrastructure, authentication, and analytics providers (for example cloud hosting, Supabase, Google sign-in, and PostHog in the EU) solely to operate and improve the Service. Those providers are required to protect the data under their agreements and applicable law.

6. Retention and security

We retain information while your account is active or as needed to operate the Service and comply with the law. We use reasonable security measures, but no system is completely secure. Your responsibility to back up critical data is also described in the Terms of Service.

7. Your rights

Under Israel's Protection of Privacy Law, 5741-1981 (including Amendment 13), and other laws that may apply to you (including the GDPR where relevant), you may inspect the personal information we hold about you, request its correction if it is wrong or out of date, and request its deletion, subject to exceptions in law. We will respond within the time the law allows. Contact us using the details in section 1.

8. Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember language preference, operate the site, and run analytics (PostHog). Visitors from the EEA are asked before analytics runs. You can block cookies in your browser, but parts of the Service may not work.

9. Changes

We may update this policy from time to time. Continued use of the Service after an update is posted constitutes acceptance of the revised policy. Please review this page periodically.