Privacy Policy

Last updated 29 October 2026

Welcome to Muscle Radar, operated by MR ECO SYSTEM LTD (“we,” “us,” or “our”). We value the privacy of our users and have written this Privacy Policy to explain what information we collect, how we use it, and your rights over it. By using the Muscle Radar app or website (the “Service”), you agree to the collection and use of information as described here. If you do not agree, please discontinue use of the Service.

1. Information We Collect

We collect the following types of information to provide and improve the Service:

1.1 Account & profile information

Account data: your name or username, email address, password (stored securely and hashed), and account role (user, trainer, or gym owner).
Full name: we store your full name, which only you and Muscle Radar staff can see. Everyone else sees your @username, or a trainer’s or gym’s business name. People search matches usernames, never full names.
Profile data: profile photo, bio, gym affiliation, and any other details you add to your profile.
Business data: if you claim a gym or trainer profile, the business details, listings and content you provide.

1.2 Location information

With your permission, we collect precise or approximate location data to power the radar and map — showing gyms, trainers and people near you.
You can disable location sharing in your device settings at any time. Some features (such as radar discovery) may be limited without it.
What we store: one approximate location for your account. It covers an area of about 500 metres and is never your exact position. It comes from your device’s location, updated only when you open or return to the app (never in the background), or from the first part of your postcode (for example E10) if you enter that instead, which we keep with it until your device location replaces it. Turning off location access stops updates. It does not remove the last location we stored.
What other people see: people near you see roughly how far away you are (for example “1-2 miles”), never your exact position.
Ghost Mode: on a member account, turning off “Show me on Radar” in your Profile hides you from other people on the radar, the People list and name search. We still store your approximate location while Ghost Mode is on, and you can still see other people. Ghost Mode does not hide you everywhere:
- You can still appear in other members’ match suggestions, so they can still like you.
- Your friends and mutual matches can still see your recent gym check-ins.
- If you check in at a gym, you are counted in its “here now” number, but your name is not shown.
- People who reach your profile another way, such as friends, people you chat with or a trainer’s followers list, can still see your profile, your area and when you were last active.
- Someone who knows your exact username can still start a chat with you.
- If you open someone’s profile, they may see your visit in their list of profile viewers.
Your stored location is deleted when you delete your account.

1.3 Usage & device data

How you interact with the Service — features used, pages viewed on our website, and time of activity.
Device information such as IP address, device model, operating system, browser type and app version.
App analytics: in the iPhone and Android apps only (not this website or the web version of the app), we use Google Analytics for Firebase, a Google service, to collect usage statistics. This means counting how the app is used so we can improve it. We never use it for advertising.
- What is counted: when you finish sign-up, open the radar, swipe in matches, send a message, open the upgrade screen, start a purchase and complete a purchase (with the plan chosen: Premium, Trainer Pro or Gym Business), plus Firebase’s automatic usage events such as first open and sessions. Firebase also receives basic app and device information, such as app version, device model, operating system and version, language, an identifier for your copy of the app, and an approximate location (country, region or city) that Google works out from your IP address.
- What is not sent: your name, email address, account ID, exact location, message text, photos or any health information. We do not collect your device’s advertising identifier. Google signals and Google’s ads data sharing are switched off for our analytics, and we do not use it to track you across other companies’ apps or websites.
- Your choice: usage statistics are on by default. To switch them off, go to Profile, then Account & support, then “Share app usage statistics” and turn it off. This applies to that phone, whichever account is signed in, and stays off after you restart the app or sign out, until you turn it back on. Switching it off stops collection straight away and deletes any statistics stored on your phone that have not been sent yet. Analytics is always switched off in development builds of the app.

1.4 Content & communications

Messages, posts, matches and other content you create within the Service.
Information you provide when you contact support or communicate with us.
Reports: if you report a message or a post, we keep a copy of it with your report so our moderators can review it, even if the original is later changed or deleted. For a message, the copy is its text and when it was sent. For a post, it is its text, picture, the business that posted it and when it was posted. Our moderators use the copy to review your report; it is never shown to the person you reported. We keep it for as long as we keep the report, and it is deleted if you or the person you reported deletes their account.

1.5 Payment information

If you subscribe to a paid tier, payments are processed by our payment provider, Stripe, and (on mobile) by the Apple App Store and Google Play. We receive limited billing details such as subscription status and renewal dates. We do not store your full card details.

2. How We Use Your Information

Service provision: to create and manage accounts, power the radar and map, connect users, display profiles, and enable messaging and matching.
Improvement & personalisation: to analyse usage, improve the experience, and develop new features.
Communication: to send service updates, security alerts and administrative messages, and — where you have opted in — occasional product news.
Payments: to manage subscriptions and process transactions through our payment providers.
Legal compliance & safety: to comply with the law, enforce our terms, prevent abuse, and keep users safe.

3. Legal Basis for Processing (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we process your personal information on the following legal bases:

Consent: where you have given clear consent — for example, location access, non-essential cookies, or marketing emails.
Contract: where processing is necessary to provide the Service you have signed up for, as set out in our terms.
Legitimate interests: where processing is needed for our legitimate interests — such as securing and improving the Service, including the app usage statistics described in section 1.3 — provided these are not overridden by your rights. For those statistics, the app stores and reads a small amount of data on your phone. We rely on the exemption in the UK’s electronic communications rules (PECR) for data used only to produce statistics that improve a service. That is why the statistics are on without asking first, and why you can switch them off at any time.
Legal obligation: where processing is necessary to comply with the law.

We do not sell your personal data. We may share it in the following circumstances:

With other users: your public profile (e.g. username, gym affiliation, photo, your area and when you were last active) is visible to other users within the app. People near you also see roughly how far away you are, never your exact position. Ghost Mode hides you from the radar, the People list and name search, but not from everywhere: see section 1.2.
Service providers: trusted third parties that help us run the Service, each bound to use your data only as needed on our behalf. These currently include:
- Supabase — database, authentication and hosting.
- Stripe — payment processing.
- Google Maps Platform — maps and location features.
- Firebase (Google) — push notifications and crash reports in the app.
- Google Analytics for Firebase (Google) — app usage statistics in the iPhone and Android apps only, never used for advertising (see section 1.3).
- postcodes.io — postcode and area lookups. The app sends approximate coordinates to find the local postcode area; no personal identifiers are included.
- Google Analytics / Google Tag Manager — website analytics (only with your consent — see Cookies below).
Business transfers: in connection with a merger, acquisition or sale of assets, your information may be transferred as part of that transaction.
Legal compliance: where required by law or in response to valid requests by public authorities.

5. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to make the site work and, if you allow it, to understand how the site is used.

Strictly necessary: what the site needs to work. Your cookie choice is saved in your browser’s local storage, so we don’t ask you again on every page. This is always on and does not need consent.
Analytics: we use Google Tag Manager and Google Analytics to count visits and see which pages are useful. Google Tag Manager loads on every page, but Google Consent Mode keeps analytics storage switched off until you choose Allow analytics. Until then, Google Analytics sets no cookies.
Advertising: we do not use advertising cookies. Advertising storage, ad user data and ad personalisation stay switched off whatever you choose.

Managing your choice: when you first visit, a banner lets you choose Only what’s needed or Allow analytics. You can change your choice at any time with the Cookie settings link at the bottom of every page. If you switch to Only what’s needed, analytics stops straight away and we remove the Google Analytics cookies from your browser. You can also block or delete cookies in your browser settings.

6. Data Retention

We keep your personal information for as long as needed to provide the Service or to meet our legal obligations, resolve disputes and enforce our agreements. When it is no longer required, we securely delete or anonymise it. You can delete your account at any time from within the app, which removes your personal data in line with the above. For step-by-step instructions and exactly what is removed, see how to delete your account.

7. Your Rights and Choices

Subject to UK GDPR, you may have the right to:

Access a copy of the personal data we hold about you.
Rectification of inaccurate or incomplete data.
Erasure of your data where we no longer have a lawful basis to keep it.
Objection to certain processing.
Restriction of processing in certain cases.
Data portability — a copy of your data in a structured, common format.
Withdraw consent at any time, where we rely on consent, without affecting prior processing.

To exercise any of these rights, contact us at support@muscleradar.co.uk.

Raising a complaint

If you are unhappy with how we handle your personal data, you can complain to us directly at support@muscleradar.co.uk. We will acknowledge your complaint within 30 days and let you know the outcome of our investigation. If you remain dissatisfied, you also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. MR ECO SYSTEM LTD is registered with the ICO under registration number ZC199555.

8. Security Measures

We take protecting your data seriously. While no system is completely secure, we follow industry best practices, including:

Encryption of data in transit (HTTPS).
Row-level security and access controls on our database.
Secure coding practices and regular updates.
Restricting access to personal data to authorised personnel only.

9. International Data Transfers

We are UK-based and operate the Service primarily from the UK. Some of our service providers may process data outside the UK. Where that happens, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses or an adequacy decision — to protect your information.

10. Children’s Privacy

Muscle Radar is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at support@muscleradar.co.uk and we will remove it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you through the app or by email.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

MR ECO SYSTEM LTD
696 Lea Bridge Road
London E10 6AW, United Kingdom
Registered in England & Wales · Company number: 17329370
Email: support@muscleradar.co.uk