Skip to main content

PRIVACY POLICY

Last updated: May 2026

1. Who We Are

Gaindup ("we", "us", "our") is a fitness booking platform operated from Israel. We help personal trainers create booking pages and manage their clients. Contact us for privacy matters at privacy@gaindup.com.

2. Data We Collect

We collect only what is necessary to operate the service:

  • Account data: Email address, name, profile photo, timezone — collected at signup
  • Trainer profile data: Bio, tagline, Instagram handle, services, availability — entered voluntarily
  • Booking data: Client name, email, phone, fitness goals, session details — collected at booking time
  • Payment data: Processed entirely by Stripe. We never see or store card numbers, CVV, or expiry dates
  • Usage data: Page views, browser type, IP address — collected via analytics cookies (only with your consent)

3. How We Use Your Data

  • To provide and operate the Gaindup service
  • To send booking confirmations, reminders, and cancellation notices (transactional emails)
  • To send marketing emails about Gaindup features — only with your explicit consent
  • To process payments via our payment providers
  • To improve the platform based on usage analytics — only with your consent

4. Third Parties We Share Data With

We do not sell, rent, or share your personal data with advertisers or data brokers.

5. How Long We Keep Your Data

  • Account data: retained while your account is active and for 30 days after deletion
  • Booking records: retained for 3 years for accounting and legal purposes
  • Email logs: retained for 1 year
  • Analytics data: retained for 26 months

6. Your Rights (GDPR — EU Residents)

If you are in the European Union, you have the right to:

  • Access: Request a copy of all personal data we hold about you
  • Correction: Request we fix inaccurate data
  • Erasure (Right to be Forgotten): Request deletion of your account and all associated data
  • Portability: Receive your data in a machine-readable format
  • Objection: Object to processing of your data for marketing purposes
  • Withdraw Consent: Withdraw any consent you have given at any time

To exercise any of these rights, email privacy@gaindup.com. We respond within 30 days.

7. Data Transfers Outside the EU

We use Firebase (Google Cloud, US-based) and Stripe (US-based) to store and process data. These transfers are covered by Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework where applicable. By using Gaindup, you consent to these transfers.

8. CCPA / CPRA — California Residents

If you are a California resident, you have the right to:

  • Know what personal information we collect and how we use it
  • Request deletion of your personal information
  • Opt out of the sale or sharing of your personal information
  • Non-discrimination for exercising your privacy rights

We do not sell personal information. To submit a CCPA request, email privacy@gaindup.com. We respond within 45 days.

9. COPPA — Children's Privacy

Gaindup is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us at privacy@gaindup.com and we will delete it immediately.

10. Israel Privacy Protection Law (PPL)

We comply with Israel's Privacy Protection Law 5741-1981 and its 2023 amendments. Israeli residents have the right to access, correct, and request deletion of their personal data. Data processing is lawful under the PPL on the basis of contractual necessity and consent. To exercise your rights, contact privacy@gaindup.com.

11. Cookies

We use cookies for essential functionality, analytics, and marketing. See our Cookie Policy for full details. You can manage your preferences at any time using the Cookie Preferences button in the footer.

12. Data Breach Notification

In the event of a personal data breach, we will notify affected users and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33.

13. Contact

For any privacy questions or requests: