Privacy policy

Matpass is run by Gust Oy, Helsinki, Finland. Write to privacy@getmatpass.com about anything on this page.

For the data a gym keeps about its members (attendance, notes, plans, documents), the gym is the controller and Matpass processes it on the gym's instructions. For your account itself (name, email, sign-in, the profile you own) Matpass is the controller.

• Account: name, email, password hash or Google sign-in id, phone if you add it, photo if you add one, the theme you picked.
• Member profile: date of birth, address, emergency contact, gender and nationality if you choose to give them, belt rank and rank history, which gyms you belong to or belonged to.
• Training: bookings, check-ins, waitlist places, class history, no-shows.
• Money: plans, invoices, payment status and receipts. Card numbers never reach us; Stripe holds them.
• Documents: waivers you or a guardian signed, with the version and the time of signing.
• Gym staff data: roles, notes staff write about members, announcements, audit log entries of who changed what.
• Technical: server logs with IP address and browser, kept for 30 days to keep the service working and to spot abuse.
• Waitlist: the email and the answers you give when you join the waitlist. To suggest your country there, our own server looks up the country of your IP address in IP geolocation by DB-IP; the address itself is not kept and goes to no one else.

• To run the service you or your gym signed up for: the contract (GDPR article 6(1)(b)).
• To keep invoices and payment records for the time Finnish accounting law requires: a legal obligation (article 6(1)(c)).
• To send class reminders, booking confirmations and announcements from your gym: the contract, and you can turn each kind off in the member app.
• To keep the service secure and to improve it from how it is used in aggregate: our legitimate interest (article 6(1)(f)). We do not sell data and we do not build advertising profiles.
• Health information, such as an injury a member mentions, is stored only when the member or guardian gives it to the gym, under the member's explicit consent (article 9(2)(a)). It can be removed on request at any time.

Your gym's staff see what they need for their role. Another gym sees your profile only once you join it. Other members never see your details. A franchisor sees aggregate numbers across its network, and member-level data only where the network has turned that on.

These companies process data for us, each under a data processing agreement:

• Railway (EU West, Netherlands): servers, database and file storage.
• Stripe: payments, invoices and payouts. Stripe is a controller for the payment itself under its own privacy policy.
• Resend: sending email.
• Google: sign-in with a Google account, if you choose it.
• Plausible (EU): counting visits to the marketing site, without cookies or personal data.

Data is stored in the European Union. Where a provider moves data outside the EU, it does so under the European Commission's standard contractual clauses.

• Your account and profile: for as long as the account exists.
• A gym's records about you after you leave: the gym keeps them until you ask for erasure. Rank history is yours and travels with you.
• Invoices and payment records: six years after the end of the accounting year.
• Staff notes: twelve months after a membership ends, then deleted.
• Server logs: 30 days.

You can see, correct, export and delete your data. Export and deletion are in the member app under Settings, and you do not need to ask anyone. Deletion removes your account and profile; the gym keeps only what the law makes it keep, such as invoices.

You can object to processing based on our legitimate interest, ask us to restrict it, and withdraw any consent you gave. Write to privacy@getmatpass.com; we answer within a month.

If you think we have handled your data badly you can complain to the Finnish Data Protection Ombudsman, tietosuoja.fi, or to the authority in your own country.

A member under 18 is set up by a guardian, who signs the waivers and sees the child's attendance and billing. The gym sees the guardian's contact details. Children's profiles are never visible to other members.

The app sets one session cookie so you stay signed in, and stores your theme choice in your browser. The marketing site counts visits with Plausible, which sets no cookies and keeps no personal data: no IP addresses, no profiles, nothing that follows you to other sites. There is nothing to consent to and no banner.

When this page changes in a way that matters we email account holders before it takes effect. The date at the top is the last change. The current version is always at https://staging.getmatpass.com/privacy.