Privacy Policy

You provide: name, username, email, phone, date of birth, password, billing address, profile details (city, goals, optional stats), gym listing information (address, photos, hours, access instructions), booking notes, reviews, and messages you send us.

Payments: card payments are handled by Stripe. We receive a Stripe customer ID, subscription or payment status, and a masked card (brand, last 4, expiry) — not the full card number or CVV. Hosts who receive payouts also complete Stripe Connect identity checks with Stripe, not on our servers.

Automatically:log data (IP address, browser, pages, approximate time), session cookies needed to keep you logged in, and — if you tap "Near me" — your device location so we can sort gyms by distance. Location is requested in the browser or Android shell; we do not continuously track you.

From hosts and members: booking history, visit counts, and ratings tied to your account.

• Create and secure your account, and reset passwords
• Show gyms, process bookings, and unlock access instructions after confirmation
• Charge pay-per-use visits, process any existing membership billing, and pay hosts
• Review listings for spam, scams, and safety before they go public
• Email you about bookings, account, and (if you ask) city waitlist updates
• Improve the Service, prevent fraud, and comply with law

We do not sell your personal information.

We share information only as needed to run sqtr:

• Hosts and members. A host sees your name, profile, and booking details for their gym. After confirmation, you see access instructions. Public profiles show the name, username, and information you put on your profile — not your email, phone, or exact home address.
• Stripe. Payment and payout processing, fraud prevention, and tax forms Stripe may be required to file.
• Email delivery (currently Resend or SMTP) to send password resets and booking emails.
• Geocoding of listing addresses so we can place gyms on the map / sort by distance.
• Legal and safety. If required by law, or to protect people, property, or the Service.

Gym street addresses are used to locate the listing and are shown to members after a booking is confirmed — not as a public directory of home addresses.

We use an httpOnly session cookie (sqtr_session) to keep you logged in. It is required for accounts. We do not use third-party advertising cookies.

We keep account, booking, and payment records for as long as the account is open and as needed for disputes, payouts, taxes, and legal obligations. You may ask us to delete your account; we may retain limited records where the law requires (for example, completed payments).

Passwords are hashed (scrypt) with a per-user salt. Session tokens are stored as SHA-256 hashes. Payment card data is handled by Stripe. No method of transmission or storage is 100% secure; you use the Service at your own risk in that respect.

sqtr is for adults 18 and older. We do not knowingly collect information from children. If you believe we have, contact us and we will delete it.

• Edit your profile and listing from your account
• Manage or cancel an existing membership from your account
• Decline location permission; search will still work by city name
• Request access, correction, or deletion by emailing support@sqtr.app

If you are a California resident, you may have additional rights under the CCPA/CPRA, including to know, delete, and opt out of "sale" or "sharing" of personal information. We do not sell personal information. To exercise rights, email us from the address on your account. We will not discriminate against you for exercising privacy rights.

sqtr is operated in the United States. If you use the Service from another country, you understand your information is processed in the U.S., which may have different data protection laws than your country.

We may update this policy. The "Last updated" date will change. Material changes may be noted in the product or by email. Continued use after the effective date means you accept the updated policy.

Privacy questions: support@sqtr.app.