1. Who this policy covers
This Privacy Policy applies to StayRetained, an attendance and client-retention tracking service for personal trainers and small gym owners. In this policy, “StayRetained,” “we,” “us,” and “our” refer to Caleb Castro, operating StayRetained.
2. Information we collect
We collect information you provide when creating and using an account, including your name, email address, authentication information handled by our authentication provider, and account or billing status. We also collect the information you choose to enter while using StayRetained.
We may receive basic technical information needed to operate and secure the service, such as browser type, device information, IP address, timestamps, and diagnostic or security logs generated by our infrastructure providers.
3. Client data entered by trainers
Trainers may enter client names, optional goals, and attendance or session records. This information is provided and controlled by the trainer who enters it. Trainers are responsible for having an appropriate legal basis, permission, or consent to enter and use their clients’ information in StayRetained.
Please do not enter sensitive information that the service does not request or need, including payment card details, government identification numbers, medical records, or account passwords.
4. How we use information
- Provide, maintain, and secure accounts and the StayRetained service.
- Display clients, attendance history, at-risk indicators, and personalized check-in messages.
- Process subscriptions and maintain billing access status.
- Send transactional messages such as account confirmation and password recovery emails.
- Troubleshoot errors, prevent misuse, and improve service reliability and usability.
- Comply with applicable law and enforce our Terms of Service.
We do not use trainer-entered client data to send marketing messages to those clients.
5. Service providers
We use service providers to operate StayRetained. These currently include Supabase for authentication and database infrastructure, Stripe for subscription billing and payment processing, and Resend for transactional email delivery. These providers process information on our behalf or as independent service providers under their own terms and privacy practices.
6. Payments
Stripe processes subscription payments. StayRetained does not directly store full payment card numbers or card security codes. We may receive and store billing-related identifiers and subscription details from Stripe, such as a Stripe customer ID, subscription status, plan, renewal information, and payment status.
7. Transactional emails
We use Resend and our authentication infrastructure to deliver service-related emails, including account confirmation, password recovery, and other operational notices. These are transactional communications needed to provide or secure the service.
8. Data security
We use reasonable administrative and technical safeguards intended to protect information, including authenticated access and database access controls. No internet service or storage system is completely secure, so we cannot guarantee absolute security. Keep your password confidential and notify us if you suspect unauthorized account access.
9. Retention and deletion
We retain account and service data while an account is active and as reasonably needed to provide the service, maintain security and billing records, resolve disputes, or meet legal obligations. Retention periods may vary by data type and provider.
You may request account or personal-data deletion using the contact information below. Some records may be retained when required by law or for legitimate security, fraud-prevention, billing, or dispute-resolution purposes. Trainers are responsible for handling requests concerning client data they entered.
10. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of certain personal information, or to object to certain processing. You may update your display name in account settings, manage or cancel billing through the billing portal, and contact us about other requests. We may need to verify your identity before completing a request.
11. Children
StayRetained is intended for business users who are able to enter into a binding agreement. It is not directed to children. Trainers should not enter information about a minor unless they have the authority and any permission required by applicable law.
12. Changes to this policy
We may update this policy as the service or legal requirements change. We will post the revised policy with a new effective date and provide additional notice when required by law. Continued use after an update means the revised policy applies to future use.
13. Contact
Questions, privacy requests, or deletion requests can be sent to support@stayretained.co. StayRetained is operated by Caleb Castro.