GymBuddy legal
Data Deletion Policy
Effective date: July 8, 2026.
This Data Deletion Policy explains how GymBuddy handles deletion requests for personal data and gym operational data.
Request channels
Users can request deletion through the Account Deletion page instructions or by emailing support@gymsbuddy.org. Gym owners may also request deletion or export of gym workspace data, subject to verification and any applicable legal or contractual obligations.
Verification
We verify requests using the email/phone number, role, gym code, and account history associated with the GymBuddy account. We may ask for additional information if the request could affect other users, a gym workspace, payment records, or staff access.
Deletion methods
- Delete: records are removed from active systems where deletion is safe and lawful.
- Anonymize: direct identifiers are removed where the record must remain for operational, accounting, safety, or legal reasons.
- Restrict: access is limited while a dispute, security review, or legal hold is pending.
Data categories
- Account data is normally deleted after account ownership is verified.
- Payment and transaction records are retained as required for accounting, settlement, refunds, fraud prevention, and legal compliance.
- Gym records may be retained by the gym owner where they are needed for legitimate gym operations or legal compliance.
- Community content may be deleted or anonymized; harmful or disputed content may be retained in restricted form for investigation.
- Device tokens are deleted when a user signs out or when an account deletion request is completed.
Timeline
Most verified deletion requests are completed within 30 days. Complex requests may take up to 90 days. Backup deletion follows normal backup lifecycle and may not be immediate, but deleted data is not restored to active use except for security, continuity, or legal reasons.