Privacy Policy

Effective June 2, 2026 · Last updated June 2, 2026

This policy covers the Kaos CrossFit mobile app (iOS and Android) and the signup pages at signup.kaoscrossfit.ca. Kaos CrossFit ("Kaos", "we") operates them. We've kept this in plain English so you can actually understand what we do with your information.

Short version

1. What we collect

Account info

• Your name, email address, and password (encrypted; we never see it in plain text)
• Optional profile picture if you choose to upload one
• Optional gender + date of birth — used only to look up your benchmark percentile against published age/sex norms
• Your role at the gym (member, coach, or admin)

Membership + payment info

• Your plan, billing dates, and payment status
• Payment history (amount, date, method) — actual card numbers are handled by Stripe and never touch our servers
• For self-serve signup or drop-in payments, your contact info is passed to Stripe to set up the charge

Activity in the app

• Class sign-ups and attendance check-ins
• Workout results: scores, dates, RX or scaled selection, optional notes
• Lift PRs and lift history
• Bodyweight log (only if you choose to enter it)
• Reactions, comments, and chat messages
• Achievements and challenge progress

Optional info that helps your coach keep you safe

• Emergency contact name, phone, and relationship — visible to your coach only
• Injury notes (e.g. "recovering rotator cuff, no overhead pressing") — visible to your coach only

Device info

• A push notification token from Expo / Apple / Google so we can send you alerts (class reminders, chat messages, etc.)
• Basic operating system version + device model for crash and error reports

InBody scans (if your gym uses the InBody module)

• Scheduled appointments — date, time, payment status, completion status
• Scan results themselves are NOT uploaded to the app; they stay with your coach and the InBody device

2. What we use it for

• Running the service. Showing you today's workout, tracking your attendance, displaying leaderboards, processing payments, sending push notifications you've opted in to.
• Personalization. Showing your trend chart, your achievements, your benchmark percentile, your training streak.
• Communication. Letting you chat with your coach and other members; sending you the occasional "we miss you" check-in if you go inactive (you can ask the admin to turn this off).
• Safety. Surfacing your emergency contact and injury notes to coaches so they know who to call and what to watch for.
• Improving the app. Aggregated, anonymous usage to understand which features people use.

We do not use your data for advertising, do not sell it, and do not share it with anyone outside the third parties listed below.

3. Who else sees your data

We use a small number of trusted processors to run the service:

• Supabase (Postgres database + authentication + file storage) — stores your account, workouts, chat messages, and profile picture. Hosted in their secure cloud infrastructure.
• Stripe (payments) — processes your card data when you pay membership or drop-in fees. Card numbers never reach our servers.
• Expo Application Services — relays push notifications to your device via Apple Push Notification Service and Google Firebase Cloud Messaging.
• Vercel — hosts the signup.kaoscrossfit.ca pages.
• Gmail (SMTP) — sends transactional emails (free intro confirmations, InBody calendar invites) from info@kaoscrossfit.ca.

Each of these has their own privacy policy. We share only the information they need to perform their function.

Coaches and admins at Kaos CrossFit can see information relevant to running the gym: who's signed up for class, your attendance history, your membership status, your emergency contact + injury notes, and any messages you send in gym chat channels. They can also see your workout results on the gym leaderboards.

Other members see only what shows up on shared screens: your name, profile picture, workout scores on the leaderboard, chat messages in shared channels, and your achievement badges if displayed. They do not see your email, phone number, billing info, emergency contact, or injury notes.

4. How long we keep your data

We keep your data for as long as your account is active. If you cancel your membership but don't delete your account, we keep your historical data (workouts, PRs, attendance) so you can come back later without losing your training history.

If you ask us to delete your account, we remove your profile and personal info within 30 days. Payment records may be retained longer where required by tax / financial regulations.

5. Your rights

You can:

• See your data. Most of it is visible in the app itself (Profile, your workouts, your payment history). Ask us for anything else.
• Edit your data. Update your name, email, profile picture, gender, DOB, emergency contact, and injury notes from the Edit Profile screen at any time.
• Delete your data. Email info@kaoscrossfit.ca with "Delete my account" and we'll remove your profile within 30 days. Or visit our account deletion page for the same flow.
• Export your data. Email us and we'll send you your account history as a CSV.
• Opt out of push notifications. Turn them off in your phone's settings or per-channel inside the app.

6. Children

Kaos CrossFit is not designed for children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, email us at info@kaoscrossfit.ca and we'll delete it.

7. Security

Data in transit is encrypted via HTTPS / TLS. Data at rest in Supabase is encrypted on disk. Passwords are stored hashed by Supabase Auth and are never visible to us in plain text. Payment data is handled by Stripe, a PCI-DSS Level 1 service provider — we never see or store your card numbers.

No system is perfectly secure. If a breach affects your data, we'll let you know promptly.

8. International transfers

Kaos CrossFit is based in Halifax, Nova Scotia, Canada. Our service providers (Supabase, Stripe, Vercel, Expo, Google, Apple) operate globally and may process data in countries other than Canada. By using the app you consent to that processing.

9. Changes to this policy

If we change how we use your data in a meaningful way, we'll update this page and bump the "Last updated" date at the top. For material changes, we'll also let you know inside the app or by email.

10. Contact us

Questions? Concerns? Want your data deleted?

Kaos CrossFit
Halifax, NS, Canada
info@kaoscrossfit.ca