Privacy Policy

1. Who controls your data

Stride is operated by TryStride ltd, 48, akin fakorede, satellite town, Calabar, Nigeria.

For member data, your gym is the data controller. The gym decides what member records it keeps and why; we process that data on its instructions as its data processor. If you are a member, start with your gym for questions about your records — and come to us if that does not resolve it.

We are the controller for the accounts of gym owners and staff, for billing our own subscriptions, and for enquiries made through this website.

2. What we collect

From members

• Identity and contact: name, phone number (this is how you sign in), email, gender, date of birth, and an emergency contact if the gym records one.
• Membership: plan, status, start and expiry dates, payment records, and which branch your membership belongs to.
• Attendance: check-in and check-out times and the branch, so the gym can see visits and you can see your own history.
• Training: assigned plans, assigned trainer, workout sessions, and the sets, reps, weights and durations you log.
• Device: a push notification token if you allow notifications, and an attestation from Apple or Google confirming the app is genuine before a check-in is accepted.

We do not collect continuous location. A check-in records the branch you scanned at, not where your phone goes.

From gym owners and staff

• Name, phone number, email, role and permissions.
• Business details needed to run the account, including branch addresses, opening hours and payout details.
• Records of actions taken in the dashboard, so gyms can audit them.

From this website

• What you enter in the pilot enquiry form, so we can respond to you.
• Basic technical data our hosting provider logs to keep the site running and secure.

3. Why we use it, and our lawful basis

• To run the service— signing you in, recording check-ins and workouts, showing your membership. Basis: performance of a contract, and the gym's legitimate interest in operating its business.
• To take payments and keep financial records. Basis: contract and legal obligation.
• To send service messages — one-time sign-in codes, renewal reminders, and announcements your gym posts. Basis: contract and legitimate interest; marketing messages need your consent and you can withdraw it.
• To keep the platform secure — verifying the app is genuine, rate-limiting abuse, investigating problems. Basis: legitimate interest.
• To improve the product, using aggregated figures that do not identify you. Basis: legitimate interest.

We do not sell personal data, and we do not use member data to advertise other products to you.

4. Who else sees your data

Your gym. Staff with the right permissions can see your profile, membership, payments, visits and training. Other members cannot.

Service providers who process data on our behalf, under contract, only for the purpose listed:

We also disclose data where the law requires it, and to professional advisers or a buyer if the business is sold — in which case this policy continues to apply until you are told otherwise.

5. Transfers outside Nigeria

Some providers above host data outside Nigeria. Where that happens we rely on the safeguards permitted by the Nigeria Data Protection Act 2023, including contractual protections with each provider, and we only send the data the provider needs to do its job.

6. How long we keep it

• Member records — for as long as the gym keeps you as a member, and then as its own retention policy requires.
• Payment and financial records — for as long as tax and accounting law requires, typically six years.
• One-time sign-in codes — minutes. Check-in QR codes expire within a minute.
• When a gym leaves Stride — we delete its data, including its member records, after any agreed export window.

7. How we protect it

• Traffic is encrypted in transit; the apps refuse unencrypted connections.
• Sign-in uses a one-time code rather than a password you could reuse elsewhere.
• Staff access is limited by role, so people see only what their permissions allow.
• Exercise images and other media are served through short-lived signed links rather than public URLs.
• Check-in from the app requires an attestation that the app is genuine and unmodified.

No system is perfectly secure. If a breach affects your data we will notify the gym, and the regulator and affected people where the law requires it.

8. Your rights

Under the Nigeria Data Protection Act 2023 you may ask to:

• see the personal data held about you;
• correct it if it is wrong;
• delete it, where there is no legal reason to keep it;
• restrict or object to how it is used;
• receive a copy in a portable format;
• withdraw consent where we relied on consent.

Members: ask your gym first — they control your record and can correct or delete it in their dashboard. If they do not respond, contact us at trystride26@gmail.com and we will help.

Deleting your account: you can ask your gym, or email us, to delete your account and personal data. We will confirm within 30 days. Some records — payments, for instance — must be kept for the periods above; we delete the rest.

If you are unhappy with how we have handled your data, you can complain to the Nigeria Data Protection Commission.

9. Children

Stride is not intended for children under 13. A gym may register a member under 18 only with the consent of a parent or guardian, and is responsible for obtaining it. Tell us if you believe we hold a child's data without that consent and we will remove it.

10. Cookies

This website uses only what is needed to serve the pages and keep them secure. We do not use advertising cookies or cross-site tracking. The mobile apps do not use cookies; they store your session securely on your device.

11. Changes

We will post any update here with a new effective date, and tell gyms in advance where the change is significant.

12. Contact

Privacy questions or requests: trystride26@gmail.com, or write to us at 48, akin fakorede, satellite town, Calabar, Nigeria.