Privacy Policy

Updated: May 29, 2026

We respect your privacy and are committed to protecting your personal information. Any information collected through our app, website, forms, or communication channels is used only to provide services, improve your experience, and communicate with you regarding your account, memberships, sessions, or services.

This Privacy Policy explains what information Steel Room Strong ("Steel Room," "we," "us," or "our") collects, how we use and share it, how long we keep it, how you can delete it, and the choices you have. It applies to our website, the Steel Room Strong mobile app, and related services (collectively, the "Services"). By using the Services, you agree to the practices described in this Privacy Policy.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.

Information We Collect

Information you give us. When you create an account, contact us, or use the Services, we may collect personal information such as your name, email address, phone number, mailing address, username, password, and any content or messages you provide.

Information we collect automatically. When you use the Services, we automatically collect certain information, including your device type, operating system, unique device identifiers, IP address, app usage and activity, and cookies or similar technologies (see "Cookies and Tracking Technologies" below).

Fitness class and event participation data. We collect information about the fitness classes and events you sign up for or attend in order to track participant attendance and ensure space requirements are met.

Information from other sources. We may receive information about you from third parties, such as service providers and analytics providers, and combine it with information we already have.

Location Data

The Steel Room Strong app collects location data only after you have granted permission. This includes background location access to support a core feature that detects when you are near a facility location and enables a seamless check-in experience by prompting access to your access card barcode. Location data is processed on your device to trigger relevant notifications and is not stored by the app, nor is it stored on our servers or shared with any third parties. You can manage or disable location permissions at any time through your device settings.

How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Services;
• Create and manage your account and authenticate you;
• Enable location-based check-in and related on-device notifications;
• Manage class and event registration and track attendance;
• Communicate with you, including responding to inquiries and sending service-related and promotional messages;
• Process transactions and send related information;
• Monitor and analyze usage, trends, and performance;
• Detect, prevent, and address fraud, abuse, security, and technical issues; and
• Comply with legal obligations and enforce our terms.

How We Share Your Information

We do not sell your personal information for money. We may share information:

• With service providers who perform services on our behalf (such as hosting, analytics, payment processing, customer support, scheduling, and messaging);
• With affiliates and subsidiaries for the purposes described in this policy;
• In connection with a business transfer such as a merger, acquisition, or sale of assets;
• To comply with the law, respond to legal requests, or protect the rights, property, and safety of Steel Room, our users, and others; and
• With your consent or at your direction.

We do not share your location data with any third parties; it is processed on your device only.

Mobile and Text Messaging Information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information may be shared with subcontractors or service providers only as necessary to support business operations, such as customer service, billing, scheduling, or text message delivery. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

Data Retention

We retain your personal information only for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

• Account information (such as name, email address, username, and password) is retained for as long as your account remains active.
• Class and event participation data is retained for as long as needed to manage attendance and our records.
• Usage and device data is retained for up to 24 months, after which it is deleted or anonymized so it can no longer be associated with you.
• Location data is processed on your device and is not stored by the app or on our servers.
• We may retain limited information for longer where necessary to comply with legal obligations, resolve disputes, prevent fraud or abuse, or enforce our agreements.

When your personal information is no longer needed, we delete or anonymize it.

How to Delete Your Data

You can request deletion of your account and the personal information associated with it at any time:

• In the app: go to Settings → Account → Delete Account.
• By email: contact us at [email protected] with the subject "Data Deletion Request," and we will delete your personal information within 30 days.

When you delete your account, we delete or anonymize your personal information, except where we are required to retain it to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements. Residual copies may remain in our secure backup systems for a limited period until those backups are overwritten.

Your Choices

• Location: enable or disable location access at any time in your device settings.
• Text messages: reply STOP to opt out of SMS at any time, or HELP for assistance.
• Push notifications: manage these in your device settings.
• Marketing emails: unsubscribe using the link in any marketing message.
• Cookies: adjust your browser settings to refuse or delete cookies (some features may not work properly).

Cookies and Tracking Technologies

We and our partners use cookies, web beacons, device identifiers, and similar technologies to operate the Services, remember your preferences, and analyze usage. You can control cookies through your browser or device settings.

How We Respond to Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal. Because there is no common industry standard for DNT, our Services do not currently respond to DNT signals.

Accessing and Correcting Your Information

You may review and update your account information at any time by logging into the Services or by contacting us at [email protected].

California Privacy Rights

If you are a California resident, you have the right to request access to the personal information we collect, to request deletion of your personal information, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information as defined under California law. We will not discriminate against you for exercising these rights. To make a request, contact us at [email protected].

Virginia Privacy Rights

If you are a Virginia resident, you have the right to confirm whether we process your personal data, to access and obtain a copy of it, to correct inaccuracies, to request deletion, and to opt out of targeted advertising and the sale of personal data. To exercise these rights or appeal a decision, contact us at [email protected].

How We Protect Your Information

We use reasonable administrative, technical, and physical safeguards designed to protect your personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, or to exercise any of your rights, contact us at:

Steel Room Strong
Email: [email protected]