Privacy Policy

1. Who we are

SixPecs is a software platform that helps boutique fitness studios run their business: scheduling classes, managing members, selling packs, and running in-studio check-in. This policy describes how we handle personal data you provide when you use sixpecs.com or any of our studio-branded subdomains (e.g. yourgym.sixpecs.com).

2. What we collect

• Account data: name, email address, and (for gym-owner accounts) the studio you operate.
• Authentication data: if you sign in with Google or Apple, we receive your name, email, and profile photo from that provider. We do not receive or store your password.
• Booking and purchase history: classes you book, packs you purchase, and attendance records.
• Payment data: processed by our payment providers (HitPay, Stripe). We store a reference ID, amount, and status — never full card numbers.
• Technical data: IP address, browser, and device info from standard server logs for security and debugging.

3. How we use your data

We use your data to operate the platform: authenticate you, show you the classes and packs offered by studios you belong to, process payments, send booking confirmations, and keep the system secure. We do not sell personal data, and we do not use it for advertising.

4. Who we share with

• Your studio. When you book a class or buy a pack at a studio, that studio sees your name, email, booking history, and pack balance.
• Infrastructure providers: Supabase (database + storage, Singapore region), Firebase Authentication (Google), and Vercel (hosting).
• Payment processors: HitPay and Stripe for checkout.

We do not share your data with anyone else unless required by law.

5. Your rights

You can request a copy of your data, correct it, or ask us to delete your account at any time by emailing privacy@sixpecs.com. Note that studios may be required to retain booking and payment records for tax or regulatory reasons even after account deletion.

6. Data retention

We keep your account data for as long as your account is active. If you delete your account, we remove your profile within 30 days, though anonymised booking records may be retained for studio analytics and accounting.

7. Cookies

We use a small number of cookies to keep you signed in and to remember your theme preference. We do not use advertising or cross-site tracking cookies.

8. Changes to this policy

If we make material changes, we will notify account holders by email before the change takes effect. The “last updated” date at the top of this page always reflects the current version.

9. Contact

Questions? Email privacy@sixpecs.com.