This Privacy Policy explains how Ryderwear Gym Pty Limited (ABN 22 644 664 317), trading as Ryderwear Gym ("Ryderwear Gym", "we", "us" or "our"), handles personal information when you use the Ryderwear Gym mobile application for iOS or Android (the "App").

This policy is specific to the App. It should be read with our general privacy policy, which covers our gyms, websites and other services. If there is an inconsistency about information handled through the App, this App Privacy Policy applies.

Account, membership and casual visits

We may collect or access:

• your name, email address, phone number and member number;
• date of birth, gender and home club;
• membership type and status, contracts, freezes, club visits, entry history, payments, charges, purchased visits and member documents;
• emergency contact name and phone number;
• a typed signature, the version of the casual-visit terms you accepted and the time you accepted them; and
• account credentials and authentication tokens.

Passwords are transmitted to the relevant sign-in service for verification and are not stored by the App. Session and access tokens are stored using the device's secure credential storage where supported.

We obtain this information directly from you and from Ryderwear Gym's membership system, PerfectGym. We use it to create and manage accounts, verify membership and access rights, provide membership features, process casual visits, display membership records, manage freezes, provide customer support and meet legal, safety and accounting obligations.

Location and door access

With your permission, the App accesses your location while you are using it to show or sort nearby Ryderwear Gym clubs, and to check whether you are close enough to use a supported door.

Location used only to sort nearby clubs is processed on your device and is not retained by Ryderwear Gym.

When you attempt to unlock a supported door, the App sends a fresh precise location fix, location accuracy, your member number, the selected door and the time of the attempt to our systems. We use this information to verify proximity, decide whether access should be allowed, prevent misuse, register a visit where applicable, troubleshoot access and maintain a safety and security audit. The audit may include the result and a reason for denial.

Background location (optional)

If you switch on "Unlock on arrival" in the App's Account settings, the App will ask for permission to access your location in the background, including when the App is closed or not in use. You will see an explanation in the App before your device asks for this permission.

Background location is used for a single purpose: to detect when you arrive at a Ryderwear Gym club that supports app door entry, so the App can show you a notification offering to unlock the door.

Your background location is compared against club door locations on your device only. It is not sent to Ryderwear Gym, not stored by us, not logged, and never used for advertising, profiling, building a movement history or any purpose other than the arrival notification described here.

This feature is off by default and entirely optional. You can turn it off at any time under Account in the App, or withdraw the permission in your device settings. Everything else in the App, including unlocking a door while you have the App open, works exactly the same without it. If you later tap the notification to unlock a door, the ordinary door-access process above applies and a single precise location fix is sent at that moment.

Workout, body and progress information

The App lets you record workout names, exercises, sets, repetitions, weights, duration, distance, effort, notes, workout times, templates and custom exercises. You can also record height, body weight, sex, body measurements, progress-photo notes and progress photos.

This information is stored locally on your device. Ryderwear Gym does not upload it to its servers. It remains until you delete the relevant record, clear the App's storage or uninstall the App. If you choose to share a workout card, photo or other content, the destination you choose through your device's share sheet handles that content under its own privacy practices.

Apple Health and Health Connect

If you choose to connect Apple Health on iOS or Health Connect on Android, and grant the relevant permissions, the App may read heart-rate samples and active-calorie data for the time window of a workout, and write completed exercise sessions and related information such as duration, workout type, calories, distance and heart-rate samples.

The App uses this information to display workout summaries and share cards, estimate workout results and save completed workouts to your chosen health platform. Health information is processed on your device and is not sent to Ryderwear Gym servers, used for advertising, sold or provided to data brokers.

You can disconnect the integration in the App and revoke permissions at any time in Apple Health or Health Connect settings. The health platform controls information already saved there.

Photos, camera, microphone and sharing

If you grant permission, the App can access the camera or a photo you select so you can take or choose a progress photo, create and share a workout card or, if you are an authorised staff user, send an attachment or participate in a voice or video call in the staff messaging area.

On Android, choosing an existing photo uses your device's system photo picker, which gives the App access only to the item you pick. The App does not request broad access to your photo or video library.

Progress photos and photos used to build workout cards remain on your device unless you choose to share them. Staff attachments and communications are sent only when a staff user chooses those features. Camera and microphone access for staff calls is not used for advertising. Ryderwear Gym does not record staff calls through the App unless a separate, clear notice is provided before recording.

Shopping and payments

The App can display products, maintain a cart and, if you connect a retail account, display recent order information. Shopify processes store account, cart, checkout and order information.

Casual-visit checkout is provided on a PerfectGym-hosted payment page and may use Worldpay or another disclosed payment provider. Retail checkout is hosted by Shopify and its payment providers. Card and bank details are entered into hosted checkout and are not collected or stored by the App or Ryderwear Gym's App servers. We may receive transaction details such as order number, product, price, payment status and purchase date for fulfilment, account history, support, fraud prevention and accounting.

Notifications and staff communications

If you enable push notifications, we collect an Expo push token and may associate it with your member number or email, device platform and App version. We use it to send service messages, membership updates, staff messages and, where permitted, news or offers. We may record whether a notification was delivered or opened.

You can turn notifications off in the App or device settings and opt out of marketing without losing essential service communications we are permitted or required to send.

Authorised staff users may use a separate staff sign-in. If used, we handle staff account details, messages, attachments, read status and call-related information to provide the staff communication service.

Diagnostics, device and network information

The App and our service providers may automatically handle App version, device type, operating system, platform, language, push tokens or similar identifiers, IP address, request time, user-agent information, crash reports, error messages, performance information, diagnostic context, security events and rate-limit events.

We use this information to keep the App secure, deliver notifications, detect misuse, diagnose faults and improve reliability. We do not use advertising identifiers for tracking or combine App data with other companies' data for targeted advertising.

We collect or access information:

• directly from you when you sign in, create a casual account, enter information, contact us, accept terms or use an App feature;
• from device features you choose to permit, such as location (including background location if you enable "Unlock on arrival"), camera, photos, microphone, Apple Health, Health Connect and notifications;
• from systems connected to the App, including PerfectGym, Shopify and the Ryderwear Gym staff intranet; and
• automatically when the App communicates with our servers, including security logs, door-access records, push delivery records and crash diagnostics.

Where information is required for an account, membership, purchase, safety or access feature, we will indicate this. If you do not provide required information, that feature may not be available. Optional permissions can be declined, although the feature needing that permission may not work.

We use App information to:

• provide, personalise and maintain App, gym, membership, shopping and staff features;
• authenticate users and protect accounts;
• create casual-visit accounts and record agreements;
• verify door proximity and membership access, open doors and maintain access audits;
• notify you that door entry is available when you arrive at a club, if you have enabled "Unlock on arrival";
• display membership, visit, billing, order and account information;
• send requested notifications and communications;
• provide customer support and respond to enquiries and complaints;
• detect, investigate and prevent fraud, misuse, safety incidents and security threats;
• diagnose errors, monitor reliability and improve the App; and
• comply with contracts, court orders and legal, tax, accounting, safety and regulatory obligations.

We disclose information only as reasonably necessary for the purposes above, including to:

PerfectGym

Hosts member, membership, visit, casual-access, agreement and billing records.

Cloudflare

Hosts the App's secure service layer, door-access audit records, notification registry and related security services.

Shopify and hosted payment providers

Process store accounts, carts, orders and hosted retail checkout. Worldpay or another provider shown at checkout may process hosted casual-visit payments.

Expo, Apple and Google

Support App distribution, updates and push-notification delivery.

Sentry

If crash reporting is enabled, processes error and performance diagnostics.

Railway and staff-intranet providers

Support authorised Ryderwear Gym staff messaging and communications.

Legal, safety and business recipients

Professional advisers, insurers, auditors, law-enforcement bodies, courts, regulators and emergency services where reasonably necessary or required by law. Information may also transfer to a buyer or successor if our business is reorganised, sold or transferred, subject to appropriate protections.

Apple Health and Health Connect information is not disclosed to these providers by Ryderwear Gym. It stays on your device unless you separately choose to share it. Background location used for arrival notifications is not disclosed to any of these providers, because it never leaves your device.

Overseas processing

Some providers operate global infrastructure and may process or store information outside Australia. Depending on the service and configuration, these locations may include Australia, the United States, Canada and countries in the European Union or European Economic Area.

Where required, we take reasonable steps to ensure overseas recipients handle personal information consistently with the Australian Privacy Principles. Contact us for current information about relevant providers and processing locations.

We use safeguards appropriate to the information, including encrypted network connections, device secure credential storage for authentication tokens, access controls, authentication, logging, rate limits and restricted staff access. No storage or transmission method is completely secure.

We keep personal information only for as long as reasonably needed for the purpose collected or as required by law. In general:

• device-only workout, body and progress information remains until you delete it, clear App storage or uninstall the App;
• background location used for arrival notifications is evaluated on your device and is not retained by Ryderwear Gym at all;
• authentication tokens remain until you sign out, delete your account, they expire or they are replaced;
• push tokens remain until notifications are disabled, the token becomes invalid or the related account is deleted;
• membership, agreement, transaction, access and support records are retained for the period needed to provide services and meet safety, fraud-prevention, dispute, tax, accounting and other legal obligations; and
• diagnostic and server-security records are retained according to operational and provider retention settings, then deleted or de-identified when no longer reasonably needed.

Where records must be kept after an account deletion request, we restrict them to the permitted legal, security or administrative purpose and do not use them for advertising.

You can:

• change App permissions in iOS or Android settings;
• turn "Unlock on arrival" off under Account in the App, which stops all background location use, or withdraw the background location permission in your device settings;
• disconnect Apple Health or Health Connect in the App and revoke access in system settings;
• disable push notifications in the App or device settings;
• choose whether to provide photos, camera, microphone and location access;
• delete individual local workout, body-measurement and progress-photo records using the App's controls;
• sign out of Ryderwear Gym, Shopify or the staff service; and
• ask us to access or correct personal information we hold by emailing hello@ryderweargym.com.

Account deletion

You can request deletion from Account > Delete account in the App or by emailing hello@ryderweargym.com. We may need to verify your identity before completing an emailed request.

Deletion removes or de-identifies information associated with the App account unless we must or are permitted to retain a record for an active membership or contract, payment and accounting requirements, fraud prevention, safety and door-access investigations, disputes or another legal obligation.

Information stored only on your device can be removed using the App's delete controls, by clearing the App's storage or by uninstalling the App. Information written to Apple Health or Health Connect is controlled through those services and may need to be deleted there separately.

The casual-visit sign-up flow is for people aged 16 or older. The App is not directed to children under 16. If a younger person is permitted to hold a Ryderwear Gym membership, their account must be created and used with the involvement and consent of a parent or legal guardian as required by our membership rules and applicable law.

If you believe a child has provided information without appropriate consent, contact us so we can investigate and take appropriate action.

The App links to or opens services operated by other organisations, including hosted store, checkout, health and sharing services. Their own privacy policies apply to information you give directly to them or ask the App to share with them. This policy does not control independent handling by those third parties.

We may update this policy when the App, our providers or legal obligations change. We will publish the updated version at this URL and change the "Last updated" date. If a change materially affects how we handle sensitive information, we will provide an additional notice or request consent where required.