Privacy Policy

At Gruperly we take privacy seriously. This Privacy Policy explains what personal data we collect, how we use it, who we share it with and what rights people have over it. It applies to the website gruperly.com and to the Gruperly web application (together, the "Service").

In this policy, a "User" is a person who creates a Gruperly account (for example, a teacher, personal trainer or instructor), and a "Participant" is each person a User registers in their groups, classes or events.

1. Data controller

Gruperly is the controller of the personal data of Users and website visitors. For Participant data, each User is the controller and Gruperly acts as a processor, handling that data only to provide the Service and in accordance with the User's instructions (see section 5).

For any privacy question, you can write to us at legal@gruperly.com.

2. Data we collect

Data provided by the User

• Account data: name, email address and password (stored in hashed form, never in plain text).
• Activity data: information about groups, classes, schedules, capacity, prices, special events and attendance that the User enters into the Service.
• Participant data: name, contact details and any other information the User chooses to record about their Participants, along with the status of their payments.
• Billing data: if the User subscribes to a paid plan, the data needed to process the payment. Card details are processed directly by our payment providers; Gruperly does not store full card numbers.
• Communications: the content of messages the User sends us (for example, support requests).

Data we collect automatically

• Technical and usage data: IP address, browser and device type, pages visited, date and time of access, and technical logs needed to operate and protect the Service.
• Analytics: we use a cookieless analytics tool that produces aggregated visit statistics without identifying individuals.
• Approximate location: we estimate the visitor's country from their IP address and browser time zone, only to show prices in the right currency. We do not collect precise location.

3. How we use data

• To create and manage the User's account and provide the features of the Service.
• To process subscription payments and let the User manage payments from their Participants.
• To send operational messages: email verification, account notices, and changes to the Service or to these policies.
• To provide support and answer questions.
• To keep the Service secure, prevent fraud and abuse, and diagnose errors.
• To analyze usage in aggregate and improve the product.
• To send news or marketing communications, only where the User has agreed. They can unsubscribe at any time.
• To comply with legal, accounting and tax obligations.

4. Legal bases

We process personal data on the basis of: (a) performance of our contract with the User, to provide the Service; (b) consent, where applicable; (c) our legitimate interest in keeping the Service secure and improving it; and (d) compliance with legal obligations.

5. Participant data

The User decides what Participant data to record in Gruperly and how to use it. The User is therefore responsible for:

• Having a valid legal basis (such as consent) to record that data, and informing their Participants about the processing.
• Recording only the data that is necessary and keeping it up to date.
• Obtaining consent from parents or guardians when recording data about minors.
• Not entering sensitive data (such as health data) unless strictly necessary and with the data subject's explicit consent.

Gruperly processes Participant data only to provide the Service to the User; we do not use it for our own purposes or sell it. A Participant who wishes to exercise their rights should first contact the User who registered their data; if they contact us, we will forward the request to that User.

6. Who we share data with

We do not sell or rent personal data. We only share it with:

• Service providers that help us run the Service: hosting and infrastructure, email delivery, payment processing, analytics and support. They access data only as needed and under confidentiality obligations.
• Payment providers that the User connects to collect payments from Participants, which handle data under their own policies.
• Authorities, when required by law or court order, or to protect our rights or the safety of others.
• A successor, in the event of a merger, acquisition or asset sale, which must honor this policy.

7. International transfers

Some of our providers may store or process data outside the User's country of residence. In those cases we take steps to ensure the data receives an adequate level of protection under applicable law.

8. Retention

We keep data for as long as the account is active. If the User deletes their account, we delete or anonymize their data and their Participants' data within 30 days, except for data we must keep to meet legal obligations (such as billing records) or to resolve disputes. Backups are deleted on their regular rotation cycles.

9. Security

We apply reasonable technical and organizational measures to protect data, including encrypted connections (HTTPS), hashed passwords, access controls and monitoring. No system is completely secure; if we detect a breach affecting personal data, we will notify the people affected and the authorities where required.

10. Your rights

Depending on applicable law, anyone can request access to, correction, updating or deletion of their data, object to certain processing, withdraw consent and request data portability. Many of these actions can be done directly from the account; for anything else, just write to legal@gruperly.com. We will respond within the legal time limits.

You also have the right to lodge a complaint with the data protection authority in your country of residence. In Argentina, that authority is the Agencia de Acceso a la Información Pública (Law No. 25,326).

11. Cookies and local storage

The website does not use advertising or tracking cookies. We use the browser's local storage to remember preferences such as theme (light or dark) and language. The application uses strictly necessary cookies or technical storage to keep you signed in. You can clear this data at any time from your browser settings.

12. Children

Gruperly accounts are intended for people aged 18 or over. We do not knowingly collect data from minors as Users. Data about minors that a User records as Participants is subject to section 5.

13. Changes to this policy

We may update this policy to reflect changes to the Service or to the law. We will post the new version on this page with its update date and, if the changes are significant, notify Users by email or in the app.

14. Contact

If you have any questions about this policy or about how personal data is handled, write to us at legal@gruperly.com.