GymClass

Privacy policy

Privacy policy

Last updated 14 September 2026.

GymClass is an app for booking classes at a fitness or movement studio. It is operated by Judith Patricia LLC. This policy describes what the app collects, why, who else sees it, and how to get rid of it.

The short version

We hold your name, your contact details, and a record of the classes you booked and attended. Your studio can see all of that. Other studios cannot. We take no payments and hold no card details. You can delete your account from inside the app at any time.

Who holds your information

Judith Patricia LLC operates the app and holds the data in it. Each studio you belong to decides what it does with the information about its own members, and acts independently of us in that respect. If you want to know why your studio keeps something, ask the studio.

What we collect, and why

To give you an account

Your email address and a password. The password is stored only as an irreversible hash, so nobody at Judith Patricia LLC or at your studio can read it.

To let a studio know who you are

Your name, and your phone number if you give one. Your emergency contact's name and phone number, if you provide them. Some disciplines will not let you take part without an emergency contact, which is why the app asks.

An emergency contact is somebody else's information

Please only enter details for someone who is content for your studio to hold them and to call them if something happens to you in a class.

To run your membership at a studio

Which studios you belong to and what part you play at each one. Whether you have agreed to that studio's waiver, which version, and when. How many classes you have left or when your membership runs to. Whether your account is active or on hold.

Studio staff can also record a note or a marker against your membership, for example an injury to work around or that it is your first class. Those are written by your studio, are visible to its staff and instructors, and are not shown to you in the app. Ask the studio what it holds.

To let you book

Which classes you booked and when you booked them, whether you attended, cancelled, cancelled late, or did not turn up, the time an instructor marked you present, and whether a booking came off a waiting list. This is a record of your attendance at a fitness studio, which some rules treat as health or fitness information, so we treat it that way too.

To record what you bought

Which class pack or membership your studio gave you, when, which member of staff recorded it, how you paid described in words such as "card at the desk", and any reference the studio typed in.

No payments happen in this app

You pay your studio directly, however they take payment. We never see a card number, a bank detail, or a payment token, and we do not process, hold, or move money.

To send you messages

Which channels you want to hear on, how long before a class you want reminding, and a copy of every message we sent you with whether it was delivered and whether you read it.

If you ask your studio's front desk to switch on text messages, we hold the mobile number, which member of staff recorded your consent, when they recorded it, when your phone confirmed it, and when you withdrew it if you do. We keep that record because it is the evidence that you agreed.

To keep studio staff accountable

When a member of studio staff does something to your membership, such as granting classes, cancelling a booking, adjusting a balance, or putting an account on hold, we record who did it, what they did, when, and any reason they gave. Your studio's administrators can read that record.

Technical information

Our hosting provider records ordinary server information when the app connects, including your IP address and the time of the request. That is used to run and secure the service and is not used to build a profile of you.

What we do not collect

Who can see your information

WhoWhat they see
YouEverything about yourself except notes written about you by studio staff.
Your studio's staffYour name, contact details, emergency contact, membership, balance, bookings, attendance, and their own notes. Only for their own studio.
Your instructorsYour name on the register for classes they teach, and any marker the studio set, such as a first class or an injury.
Other studentsNothing. Students cannot see each other.
Another studioNothing. If you belong to two studios, neither can see your membership at the other.
UsAccess for support and to keep the service running. Any access to a studio's data is recorded.

Companies that process it for us

CompanyWhat for
SupabaseHosting the database and managing sign-in. Data is held in the United States.
ResendSending our emails, such as booking confirmations and password resets.
Apple and GoogleDistributing the app, and delivering notifications to your phone when you allow them.

When we add text messaging we will name that provider here before any message is sent. We do not sell your information to anybody, and we do not share it for advertising.

How long we keep it

While you have an account, we keep it. When you delete your account, we remove your name, email address, phone number and emergency contact, cancel your upcoming bookings, and delete your sign-in credentials so the account cannot be used again.

We keep the record of which classes were attended, with your name removed from it. That is your studio's own record of how full its classes were, and removing it would put holes in their history. It cannot be traced back to you through the app.

Deleting your account

Open the app, tap Account, and choose Delete my account. It asks twice, because it cannot be undone.

One exception: if you are the only administrator of a studio, the app will refuse, because it would leave that studio with nobody able to run it. Make somebody else an administrator first.

Deleting your account does not clear anything you owe your studio, and does not refund classes you have not used. Settle up with them first.

Your other choices

Children

The app is not intended for children under 13, and we do not knowingly create accounts for them. Studios that run youth classes should hold the child's details under a parent or guardian's account rather than creating one for the child. If you believe a child has an account, write to us and we will remove it.

Security

Information travels encrypted between the app and our servers, and is encrypted where it is stored. Access is controlled per studio at the database level, so a studio cannot reach another studio's data even if the app asked it to. Passwords are stored only as irreversible hashes.

No system is perfect. If we discover a breach affecting your information we will tell you, and where New York law requires it we will also notify the State Attorney General and the other authorities it names. That is an obligation rather than a courtesy.

New York and this policy

Judith Patricia LLC is registered in the State of New York, and this policy is governed by New York law.

New York's SHIELD Act requires any business holding a New York resident's private information to keep reasonable safeguards around it and to notify people affected by a breach. It applies to us regardless of our size, and the safeguards described above are how we meet it. If you are a New York resident and believe we have not, you can raise it with the Office of the New York State Attorney General as well as with us.

Where you live may give you further rights over your information, including to ask for a copy, a correction, or its deletion. We honour those requests whoever asks, rather than checking which state you are in first.

Changes

If we change this policy we will update the date at the top. If a change materially affects you, we will tell you in the app rather than leaving you to notice.

Contact

Write to privacy@jpllc.co with any question about this policy, or to ask for a copy of your information.

Questions about what your own studio holds, or a note they have written about you, are best asked at the studio.