Privacy Policy

SWTHZ Analytics ("the Service") is an internal business intelligence tool operated for Sweathouse franchise operators. This Privacy Policy describes what information we collect, how we use it, and the choices you have. By using the Service (web or iOS app), you agree to the practices described below.

SweatHouz sends feedback surveys by SMS and email to customers after a first studio visit and after a membership ends. We store your survey score, any comments you type, and message delivery records so studios can improve their service. Survey responses are kept with your name and contact details and are visible to SweatHouz staff. Reply STOP to any SMS or use the unsubscribe link in any email to opt out of future survey messages at any time. Survey data is stored in the United States by SweatHouz and is never sold to third parties.

• Email address — used to authenticate you and to determine whether your account has been approved for access.
• Authentication identifiers — a unique user ID and session token issued by our authentication provider (Supabase).
• Operational metadata — request timestamps and basic diagnostic logs (e.g., error codes) used to keep the service reliable.

We do not collect device contacts, location, photos, health data, or advertising identifiers. We do not use third-party tracking SDKs.

• To verify your identity and grant access to authorized users.
• To display franchise performance data scoped to your account.
• To investigate errors and maintain the security of the Service.

We do not sell or share your personal information with advertisers, data brokers, or unrelated third parties.

Operational metrics displayed in the Service (e.g., revenue, leads, conversion) are pulled from Sweathouse's internal data warehouse and are not collected from your device. They are surfaced to you under the access controls established by Sweathouse.

Authentication records are retained for as long as your account remains active. Diagnostic logs are retained for a limited rolling window (typically 30 days) and then discarded.

All traffic between the app and our servers is encrypted in transit (TLS). Authentication is handled by Supabase, an industry-standard authentication provider. Access to franchise data is gated on a per-account approval flag.

You may request access to, correction of, or deletion of your account data at any time by emailing us at the address below. We will respond within a reasonable timeframe.

The Service is intended for adult business operators and is not directed at children under 13. We do not knowingly collect information from children.

We may update this policy from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date at the top of this page reflects the latest revision.

Questions about this policy or your data can be sent to Tracey@swthz.com.