Privacy Policy

Introduction

American Iron Gym ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our fitness training platform and services, including our remote training booking system with Google Calendar integration.

Information We Collect

Account Information

• Name, email address, and phone number
• Profile information and fitness goals
• Payment and billing information
• Membership and subscription details

Google Calendar Integration

When trainers connect their Google account to enable automatic Google Meet link generation, we collect:

• Google account email address
• OAuth access tokens (encrypted)
• Calendar event information for scheduled training sessions
• Google Meet video conference links

Usage Data

• Training session attendance and history
• Workout logs and progress data
• Equipment usage and check-in records
• Platform usage analytics and preferences

How We Use Your Information

• Training Services: To schedule sessions, create Google Meet links, and manage trainer-client relationships
• Communication: To send booking confirmations, reminders, and important service updates
• Payment Processing: To process membership fees and training package purchases
• Platform Improvement: To analyze usage patterns and enhance our services
• Security: To protect against fraud and unauthorized access
• Legal Compliance: To comply with applicable laws and regulations

Google Calendar API Data Usage

Our use of Google Calendar API is limited to:

• Creating calendar events for confirmed training sessions
• Generating unique Google Meet video conference links
• Updating or canceling events when sessions are modified or canceled
• Reading calendar availability to prevent double-booking

Important: We only access calendar data for trainers who explicitly connect their Google account. We never access your emails, contacts, or other Google services. You can disconnect your Google account at any time from your dashboard settings.

Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Payment processors (Stripe), email services, and cloud hosting providers
• Trainers: Your assigned trainer receives necessary information to provide training services
• Legal Requirements: When required by law or to protect our legal rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Data Security

We implement industry-standard security measures to protect your data:

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive credentials and OAuth tokens
• Regular security audits and updates
• Restricted access to personal data
• Secure payment processing through PCI-compliant providers

Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Disconnect Google: Revoke Google Calendar access at any time
• Opt-Out: Unsubscribe from marketing communications
• Data Portability: Receive your data in a portable format

To exercise these rights, contact us at davidhamilton473@gmail.com

Cookies and Tracking

We use cookies and similar technologies to enhance your experience, maintain sessions, and analyze platform usage. You can control cookie preferences through your browser settings.

Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we remove or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., payment records, legal compliance).

Children's Privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a prominent notice on our platform. Continued use of our services after changes constitutes acceptance.

Contact Us

If you have questions or concerns about this privacy policy or our data practices:

Google API Services User Data Policy

American Iron Gym's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.