Mamute Mobile Apps Privacy Policy

Effective date: March 29, 2026

This Privacy Policy applies to the Mamute mobile apps:

• Mamute Student (com.jsondubs.mamutestudent)
• Mamute Instructor (com.jsondubs.mamuteinstructor)

1. Information We Collect

We collect information needed to operate gym membership, class, and communication features.

• Account and authentication data: email address, user ID, and sign-in session data.
• Student and guardian data: student number, student name, guardian name/email, membership status, and linked access records.
• Class and attendance data: class selections, check-ins, attendance history, and related timestamps.
• Notifications data: push notification token(s), platform/app variant, and notifications addressed to your profile.
• Optional uploaded media: images/files selected by instructors from their device library for badges/news content.
• Technical data: basic app/device context needed to run and secure the service.

Student app only: Foreground location (precise) is requested during class check-in to verify proximity to the gym check-in radius.

2. How We Use Information

We use information to authenticate users, manage access permissions, process class check-ins and attendance, deliver app content, send gym-related notifications, maintain security, and improve reliability.

3. Sharing of Information

We do not sell personal information.

We may share data with service providers that operate the platform (for example, Supabase and Expo services), with authorized gym staff/admin users to run gym operations, or when required by law.

4. Permissions

Depending on app and feature use, we request:

• Location (Student app): used for check-in proximity verification.
• Notifications: used to send account and gym updates.
• Media library (Instructor app): used only when an instructor chooses to upload content.

You can control permissions in your device settings.

5. Data Retention

We retain data as long as needed to provide the service, maintain records, and comply with legal/operational requirements. When no longer needed, data is deleted or de-identified in accordance with our retention practices.

6. Security

We use reasonable technical and organizational safeguards to protect personal data. No method of transmission or storage is 100% secure, but we work to reduce risk and limit access.

7. Children's Privacy

The service may be used for student accounts, including minors, under gym and family participation workflows. If you believe data about a child was handled inappropriately, contact us so we can review and take action.

8. Your Choices and Requests

You may request access, correction, or deletion of your data, subject to legal and operational limits. You may also disable location/notification permissions in your device settings (some features may stop working).

9. Changes to This Policy

We may update this Privacy Policy from time to time. When updated, we will revise the effective date on this page.

10. Contact

For privacy questions or data requests, open an issue in this repository.