Privacy policy.

Container 04 is a calisthenics and functional training gym in Amman, Jordan. This policy covers the website at container04.com and the Container 04 app for iPhone and Android. Container 04 is responsible for the personal data described here.

• Your account: first and last name, email address, password (stored only as a secure hash by our sign-in provider), and, if you give them to us, your phone number, date of birth and an emergency contact name and phone number.
• Training: the classes and workshops you book or cancel, your check-ins at the door, attendance marked by your coach, your memberships and their dates.
• Intake questionnaire: your goals, experience level, preferred classes, availability, how you heard about us, and any health conditions or injuries you choose to tell us. This is health information, and we use it only to coach you safely.
• Coaching records: notes, assessments and progress measurements (for example reps or body weight) that you or your coaches record.
• Credits and purchases: your credit balance and history, credit pack requests, merchandise you redeem, and receipts. Payment is in cash at the gym. We never collect card or bank details.
• Messages: what you send through the contact form or a trial request (name, email, phone if given, and your message), and the notifications we send you in the app.
• Your device (app only): a push notification token, and whether the device is an iPhone or an Android phone, so we can send you notifications. The app uses the camera only to scan QR codes. It does not save or upload photos.
• Error reports (website): when something breaks on the website, a technical report goes to Sentry: the error, the page, browser details, and for some visits a recording of the page with all text and form inputs masked. We strip cookies, sign-in tokens, IP addresses and email addresses from these reports. The app does not send error reports at the moment.

We use your data to run your training with us:

• to manage your account, bookings, check-ins, memberships and credits;
• to let your coaches plan sessions around your goals, experience and any injuries;
• to send you notifications and emails you need, such as class reminders, cancelled sessions, membership updates, receipts, and password resets;
• to answer your messages;
• to keep the gym's financial records and to fix problems with the website and app.

We do not sell your data, we do not use it for advertising, and we do not track you across other apps or websites. The website uses only the cookies it needs to keep you signed in.

Inside Container 04, the gym's admins can see your records. Coaches can see what they need to coach you: your name and contact details, memberships, bookings and attendance, intake answers, notes and progress. Other members cannot see your data. Database access rules enforce this, not just the screens.

We use these service providers to run the website and app. They handle data only for us:

• Supabase: our database, sign-in and file storage. All the data above is stored there.
• Netlify: hosts the website.
• Resend: sends emails, such as receipts and contact form messages.
• Expo, Apple and Google: deliver push notifications to your phone.
• Sentry: receives the website error reports described above.

These providers may store data on servers outside Jordan. We share data with anyone else only if the law requires it.

We keep your data while you have an account with us. When you ask us to delete your account, we delete your profile, intake answers, bookings, notes, progress records and device tokens. We may keep records of payments and receipts for as long as accounting rules require.

You can see and update your details, intake answers and notification history in your profile on the website or in the app. You can turn off push notifications in your phone's settings at any time.

To get a copy of your data, correct something you can't edit yourself, or delete your account and its data, contact us using the details below. We aim to reply within 30 days.

Data travels over encrypted connections (HTTPS). In the app, your sign-in session is kept in your phone's secure storage (the iOS Keychain or the Android Keystore). No system is perfectly secure, so tell us straight away if you think your account has been misused.

We handle personal data in line with the laws of the Hashemite Kingdom of Jordan, including its Personal Data Protection Law. If we change this policy, we will update the date at the top of this page.

For anything about your data, including deletion requests:

• Email: admin@container04.com
• Phone or WhatsApp: +962 790 444 167
• Or use the contact form, or ask at reception.