Privacy policy

This privacy policy explains how Evgeny Andzhelo ("we", "the operator") collects, uses and stores information through the "Standard" application ("the app") — a platform for evaluating coaches at gyms. As of this update the service is provided free of charge as part of a beta period; see the terms of use regarding future payments. Use of the app is conditional on agreeing to this policy.

What information we collect

• Account details: name, email address and role (owner / manager / coach / front desk / maintenance).
• Evaluation data: scores, answers and notes recorded during coach evaluations.
• Fault reports and checklists: the description of the fault, who reported it and who dealt with it, and a record of opening and closing checklists being carried out.
• Injury and accident reports: reports the gym's staff record about an injury or accident involving a member at the gym: the member's name, what happened, the body part and type of injury, what was done, witnesses (if given), the class it happened in, who reported it and when, follow-ups, and up to three photos. This is health information, so the rules in "Injury reports" below apply to it.
• Trial class feedback: feedback a coach writes about someone who came to a trial class: their name, gender, whether they have trained before, impressions of their level and of how they enjoyed the class, injuries or limitations (if given), notes, the class, who wrote it and when, and whether they joined the gym. See "Trial class feedback" below.
• Gym details: the gym's name, its logo (where uploaded), display settings, the list of coaches and the questionnaire associated with it.
• Device identifiers for notifications: if you have allowed notifications, we store a device token issued by Apple's or Google's notification service, together with the platform type (iOS / Android / browser) and the time it was last used. The token is used solely to send notifications to that device, and does not let us identify you outside the app.
• Notifications sent: a record of the notifications created for you in the app and whether they were read.
• Technical data: sign-in identifiers and basic usage data required for security and operation.

We do not collect payment details. The app is intended for gym staff and is not intended for use by minors. Injury reports and trial class feedback may concern people who are minors, for example in youth classes; see "Injury reports" and "Trial class feedback" below.

How we use the information

• Running the coach evaluation service and presenting feedback and reports.
• Managing user accounts and permissions (owner / manager / coach / front desk / maintenance).
• Sending operational email — invitations to the system and password resets.
• Recording injuries and accidents at the gym on the gym's behalf, and showing them to those allowed to see them.
• Recording feedback on trial classes on the gym's behalf, so it can get back to people who came and know who joined.
• Sending notifications to your device about events at the gym, such as a new fault report.
• Securing the system, preventing misuse, and technical support.

We do not use the information for advertising, we do not carry out profiling, and we do not pass information to advertisers.

Injury reports

Injury reports contain health information about the gym's members, who are not users of the app. For this information the gym is the controller, and we process it on the gym's behalf and only on its instructions. The gym is responsible for telling its members that injuries are recorded, for example in its membership terms or health declaration. For a member who is a minor, the gym is also responsible for telling their parents or guardian.

• Who can see them: the gym's owners and managers see all of the gym's reports. A coach sees only the reports they recorded themselves. Our support accounts cannot see the reports in the app. We do not access this information except where needed to run and secure the service, at the gym's request, or as required by law.
• Only what is needed: a report holds no ID number, medical history or diagnosis, only what happened and what was done.
• Editing and deleting: once a report is saved, nobody can edit it, so that it reflects what was recorded at the time. Corrections and later updates are added as follow-ups. The gym's owners and managers can delete a report, which also deletes its follow-ups and photos for good.
• Photos: stored privately and shown only to those allowed to see the report. Before upload, the app removes location data (GPS) and other metadata from the photo. The report records whether each photo was taken on the spot or picked from the gallery.
• Notifications: when a report is added, the gym's owners and managers are notified. The notification does not include the member's name or any details of the injury, only who reported it and when.
• Members' requests: a member who wants to see, correct or ask for deletion of information about them should contact the gym. We will help the gym deal with the request.

Trial class feedback

Trial class feedback is about someone who came to try the gym, who is not yet a member and does not use the app. It may include injuries or limitations, which are health information. For this information too the gym is the controller, and we process it on the gym's behalf and only on its instructions. The gym is responsible for telling people who come to a trial class that it is recorded, and for a minor, their parents or guardian as well.

• Who can see it: the gym's owners and managers see all of the gym's feedback. A coach sees only the feedback they wrote themselves. Our support accounts cannot see it in the app.
• Only what is needed: feedback holds no phone number, email or ID number.
• Editing and deleting: the coach who wrote the feedback can edit it for 24 hours. The gym's owners and managers can edit it at any time and delete it. Only they record whether the person joined the gym.
• Notifications: when feedback is added, the gym's owners and managers are notified with the person's name, the class and the coach. The notification does not include injuries, limitations or notes.
• Requests: anyone who wants to see, correct or ask for deletion of information about them should contact the gym. We will help the gym deal with the request.

Notifications — consent and opting out

Notifications are sent only after you have allowed them on your device. You can withdraw that permission at any time in your device or browser settings; from that point no further notifications will be sent to you. The device token is deleted when you sign out, when the account is deleted, or when the notification service reports that the token is no longer valid.

Storage and information security

Information is stored on the cloud services of Supabase (our data and authentication infrastructure provider). Photos from injury reports are stored in Supabase Storage, in private storage that is not publicly accessible. We apply accepted security measures, including encryption in transit and row level security, which ensures that each gym sees only its own data.

Service providers acting for us

We do not sell personal information and we do not share it with third parties for their own purposes. To operate the service we rely on the following providers, each of which receives only the information needed for its role:

• Supabase — database and file storage, account management and authentication.
• Netlify — hosting the browser version of the app.
• Resend — sending operational email (invitations and password resets); receives a name and email address.
• Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service) — delivering notifications to the device. These providers receive the device token and the content of the notification.

In addition, information may be disclosed to the extent required by law or by an order of a competent authority. Some providers store or process information outside Israel, including in the United States and the European Union.

Retention

We retain information for as long as the account or the gym is active and to the extent required for the purposes described in this policy. Deleting a gym or an account entails deletion of the data associated with it. Device tokens for notifications are deleted earlier — as described in the notifications section above.

Evaluations carried out by a user who has deleted their account remain with the gym without being attributed to them, so as not to break the continuity of the gym's records or the feedback given to coaches.

Injury reports are kept for as long as the gym is active, unless the gym's owners or managers delete them. They are not deleted automatically before then, because they may be needed years after the event. Deleting the gym deletes its reports and their photos. If a user who recorded a report deletes their account, the report stays with the gym, with the reporter's name as it was recorded at the time.

Feedback on a trial class by someone who did not join the gym, or for whom nobody recorded whether they joined, is deleted automatically a year after the class. Feedback on someone who joined is kept for as long as the gym is active, unless the gym's owners or managers delete it.

Your rights

Subject to applicable law, you have the right to review the information collected about you, to correct it, or to request its deletion. For privacy requests and enquiries you can contact us at: support@standardwod.com.

Changes to this policy

We may update this policy from time to time. The updated version will be published on this page with an update date.

Contact

For questions about this policy you can contact Evgeny Andzhelo at support@standardwod.com.