// Legal
Privacy Policy
Effective date: July 2026 · Last updated: July 2026
Welcome to Muscle Radar, operated by [COMPANY LEGAL NAME] (“we,” “us,” or “our”). We value the privacy of our users and have written this Privacy Policy to explain what information we collect, how we use it, and your rights over it. By using the Muscle Radar app or website (the “Service”), you agree to the collection and use of information as described here. If you do not agree, please discontinue use of the Service.
Note for review: Placeholders in [square brackets] — company legal name, registered address, company number, ICO registration and the minimum age — must be confirmed, and this document should be signed off by a qualified data-protection adviser before it goes live.
1. Information We Collect
We collect the following types of information to provide and improve the Service:
1.1 Account & profile information
- Account data: your name or username, email address, password (stored securely and hashed), and account role (user, trainer, or gym owner).
- Profile data: profile photo, bio, gym affiliation, and any other details you add to your profile.
- Business data: if you claim a gym or trainer profile, the business details, listings and content you provide.
1.2 Location information
- With your permission, we collect precise or approximate location data to power the radar and map — showing gyms, trainers and people near you.
- You can disable location sharing in your device settings at any time. Some features (such as radar discovery) may be limited without it.
1.3 Usage & device data
- How you interact with the Service — features used, screens viewed, and time of activity.
- Device information such as IP address, device model, operating system, browser type and app version.
1.4 Content & communications
- Messages, posts, matches and other content you create within the Service.
- Information you provide when you contact support or communicate with us.
1.5 Payment information
- If you subscribe to a paid tier, payments are processed by our payment provider, Stripe, and (on mobile) by the Apple App Store and Google Play. We receive limited billing details such as subscription status and renewal dates. We do not store your full card details.
2. How We Use Your Information
- Service provision: to create and manage accounts, power the radar and map, connect users, display profiles, and enable messaging and matching.
- Improvement & personalisation: to analyse usage, improve the experience, and develop new features.
- Communication: to send service updates, security alerts and administrative messages, and — where you have opted in — occasional product news.
- Payments: to manage subscriptions and process transactions through our payment providers.
- Legal compliance & safety: to comply with the law, enforce our terms, prevent abuse, and keep users safe.
3. Legal Basis for Processing (UK GDPR)
Under the UK General Data Protection Regulation (UK GDPR), we process your personal information on the following legal bases:
- Consent: where you have given clear consent — for example, location access, non-essential cookies, or marketing emails.
- Contract: where processing is necessary to provide the Service you have signed up for (our Terms of Service).
- Legitimate interests: where processing is needed for our legitimate interests — such as securing and improving the Service — provided these are not overridden by your rights.
- Legal obligation: where processing is necessary to comply with the law.
4. How We Share Your Information
We do not sell your personal data. We may share it in the following circumstances:
- With other users: your public profile (e.g. username, gym affiliation, photo) is visible to other users within the app, subject to your privacy settings and features such as Ghost Mode.
- Service providers: trusted third parties that help us run the Service, each bound to use your data only as needed on our behalf. These currently include:
- Supabase — database, authentication and hosting.
- Stripe — payment processing.
- Google Maps Platform — maps and location features.
- Firebase (Google) — push notifications.
- Google Analytics / Google Tag Manager — website and app analytics (only with your consent — see Cookies below).
- Business transfers: in connection with a merger, acquisition or sale of assets, your information may be transferred as part of that transaction.
- Legal compliance: where required by law or in response to valid requests by public authorities.
5. Cookies & Tracking Technologies
Our website uses cookies and similar technologies to make the site work and — with your consent — to understand how it is used.
- Strictly necessary cookies: required for the site to function and to remember your cookie choice. These are always on and do not need consent.
- Analytics & measurement: we use Google Tag Manager and Google Analytics to measure traffic and improve the site. These are only loaded after you accept via our cookie banner. Until then, they are held in a “denied” state using Google Consent Mode and set no analytics or advertising cookies.
Managing your choice: when you first visit, a banner lets you accept or reject non-essential cookies. You can change your decision at any time by clearing your browser’s site data for muscleradar.co.uk, which will make the banner appear again. You can also block or delete cookies in your browser settings.
6. Data Retention
We keep your personal information for as long as needed to provide the Service or to meet our legal obligations, resolve disputes and enforce our agreements. When it is no longer required, we securely delete or anonymise it. You can delete your account at any time from within the app, which removes your personal data in line with the above.
7. Your Rights and Choices
Subject to UK GDPR, you may have the right to:
- Access a copy of the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure of your data where we no longer have a lawful basis to keep it.
- Objection to certain processing.
- Restriction of processing in certain cases.
- Data portability — a copy of your data in a structured, common format.
- Withdraw consent at any time, where we rely on consent, without affecting prior processing.
To exercise any of these rights, contact us at contact@muscleradar.co.uk. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
8. Security Measures
We take protecting your data seriously. While no system is completely secure, we follow industry best practices, including:
- Encryption of data in transit (HTTPS).
- Row-level security and access controls on our database.
- Secure coding practices and regular updates.
- Restricting access to personal data to authorised personnel only.
9. International Data Transfers
We are UK-based and operate the Service primarily from the UK. Some of our service providers may process data outside the UK. Where that happens, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses or an adequacy decision — to protect your information.
10. Children’s Privacy
Muscle Radar is not intended for users under the age of [16 / 18 — confirm]. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at contact@muscleradar.co.uk and we will remove it.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. When we do, we will revise the effective date at the top of this page and, where appropriate, notify you through the app or by email.
If you have any questions about this Privacy Policy or our data practices, please contact us at:
[COMPANY LEGAL NAME]
[Registered address line 1]
[City, Postcode], United Kingdom
Company number: [00000000] · ICO registration: [ZA000000]
Email: contact@muscleradar.co.uk
