Privacy Policy

Last updated: 23 September 2026

This Privacy Policy explains how SweatLofts Enterprises ("SweatLofts", "we", "us") collects, uses and shares information about you.

It applies to the SweatLofts Platform as defined in our Terms of Service: our website at www.sweatlofts.com (the "Site"), our mobile application (the "App"), the booking service, and the SweatLofts Spaces themselves. This Privacy Policy is incorporated by reference into our Terms of Service. If you do not agree with it, please do not use the SweatLofts Services.

1. In short

The mobile App requires no sign-in. It sends us your device location while you are using it, so we can show you the nearest studios. The map itself is powered by Google Maps, which separately collects diagnostic and usage information, including device and user identifiers — see section 2.2.
An account — with your name, email address, mobile number and payment card — is created when you book a session. Card details are handled by our third-party payment processor and are never stored by us.
We do not sell your personal information.
The App contains no advertising software and no advertising identifier, and does not track you across other companies' apps or websites.

2. Information we collect

2.1 Through the mobile App

Precise location. When you open the studio map, the App asks permission to use your location. If you allow it, your device's latitude and longitude are sent to our servers so we can return the studios nearest to you and display the distance to each one.

Location is used only while the App is in use. The App never accesses your location in the background.
You may refuse, or withdraw permission at any time in iOS Settings → Privacy & Security → Location Services. The App remains usable; nearby sorting and distances will not be available.
The App itself has no sign-in, so we receive these coordinates without any account or name attached to them.

Technical request data. Our servers automatically record standard technical information whenever the App contacts them: the originating IP address, the date and time, and the address of the resource requested — which includes the coordinates described above. These records are used for security, troubleshooting and service reliability, and are kept for a limited period before deletion.

Held on your device only. The App caches studio images and display preferences locally so that screens load faster. This information stays on your device, is never sent to us, and is removed when you delete the App.

2.2 Collected by Google Maps

The studio map inside the App is provided by the Google Maps SDK. According to Google's own privacy manifest, this component collects:

crash reports and performance data;
product interaction data — how the map is used;
a device identifier and a user identifier.
other data, which Google does not itemise further in its own manifest.

Google uses this information for analytics and to make the map function. It is sent to Google, not to us, and is handled under the Google Privacy Policy (https://policies.google.com/privacy). None of it is used to track you for advertising purposes.

2.3 Account and booking information

To reserve a SweatLofts Space you create an account. At sign-up and when booking we collect:

your name and email address;
your mobile telephone number;
your payment card details, which are collected and processed by our third-party payment processor under its own terms and privacy policy — SweatLofts does not store your full card number;
your booking history: which space, on what date, for how long.

If you register as a personal trainer, we also collect evidence of your professional liability insurance, as required by our Terms of Service.

Booking is handled through our scheduling provider's page at sweatlofts.as.me. When the App opens that page you leave the App, and the information you enter there is processed by that provider on our behalf.

2.4 SMS messages

With your consent, we may send you SMS messages about your bookings and your use of the SweatLofts Spaces — including access codes — and, where you have agreed to it, promotional messages. You can opt out at any time by replying STOP. Please note that opting out may also stop operational messages such as room access codes.

2.5 Access to the Spaces and on-site sensors

Access to a SweatLofts Space is granted through an access code or a smart lock supplied by a third party. We may record when a space is accessed, in order to operate the service and for security.

As set out in our Terms of Service, sensors in the SweatLofts Spaces track the location of equipment and items within the space, so that we can optimise how the spaces are arranged and maintained.

2.6 Through the website

The Site is hosted on Squarespace, which sets cookies and records standard visitor analytics on our behalf.

3. What the App does not collect

Through the mobile App we do not collect:

your photos, contacts, calendars, microphone or camera;
health or fitness measurements;
advertising identifiers (IDFA) — the App contains no advertising software.

The App sends no push notifications, and none of the information described in this policy is used to track you across other companies' apps or websites.

4. Why we use this information

Precise location, collected by the App — to show nearby studios on the map and the distance to each one.
Diagnostics, usage data and identifiers, collected by Google Maps — to allow the map to function, and to provide Google with analytics on its own component.
Your name, email address and mobile number — to create and manage your account, confirm bookings and send access codes.
Your payment card, handled by our processor — to take payment for your bookings.
Your booking history — to provide the service, resolve disputes and meet accounting obligations.
Technical server logs — to keep the service running, diagnose faults and protect against abuse.
On-site sensors — to optimise the layout and upkeep of the Spaces.

We do not sell your personal information.

As set out in our Terms of Service, we may compile and share non-identifiable, aggregated information about use of the Services — for example overall occupancy patterns — with service providers and partners. This does not identify you.

5. Legal basis (visitors in the EEA and the UK)

Where the General Data Protection Regulation applies, we rely on:

Consent — for access to your device's location, and for promotional SMS. You may withdraw either at any time.
Performance of a contract — for the information needed to create your account, take payment and manage your booking.
Legitimate interests — for technical server logs, security, and optimising the Spaces.
Legal obligation — for accounting and tax records.

6. Who we share information with

We share information only with providers who help us operate the Services:

Acuity Scheduling / Squarespace — booking and scheduling;
our third-party payment processor — payment card processing;
Google Maps Platform — map display within the App; Google processes the data described in section 2.2 under its own privacy policy;
Amazon Web Services — hosting of our application servers, located in the United States;
Squarespace — hosting of the Site;
the providers of our smart locks / access codes and of our SMS delivery.

We may also disclose information where the law requires it, or where it is necessary to establish, exercise or defend legal claims.

7. International transfers

SweatLofts Enterprises operates from Israel, and our application servers are located in the United States. The information described in this policy is therefore transferred across borders and processed in those countries. Where we transfer personal information out of the EEA or the UK, we do so using a transfer mechanism recognised under applicable law.

8. How long we keep information

Technical server logs: a limited period, after which they are deleted.
Account and booking records: for as long as your account remains open, and afterwards for as long as needed to meet our accounting and legal obligations.
Data cached on your device: until you clear it or delete the App.

9. Security

Communication between the App and our servers is encrypted using HTTPS. We limit access to our systems to the people who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Depending on where you live, you may have the right to ask us for access to the personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive a copy in a portable format, and to withdraw any consent you have given.

To exercise any of these rights, or to close your account, write to us at the address below.

Please note that SweatLofts itself attaches no account or name to the location data the App sends us, because the App has no sign-in. We may therefore be unable to isolate the App data of one individual within our own systems. Information collected by Google Maps inside the App is held by Google under its own privacy policy, and any request concerning it should be addressed to Google.

If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection authority. In Israel, you may contact the Privacy Protection Authority.

11. Age

The SweatLofts Services are intended for people aged 18 and over, as stated in our Terms of Service. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are significant, we will give more prominent notice.

13. Contact us

SweatLofts Enterprises Email: David@SweatLofts.com

This Privacy Policy is governed by the laws of Israel, and the courts of Israel have jurisdiction, as set out in our Terms of Service.