Privacy Policy

Last updated: October 25, 2026

This policy explains how the Against Gravity Fitness website handles information when you contact the gym, book a class, use staff access, or authorize the gym's Gmail connection. Against Gravity Fitness is located at 55 Doncaster Ave #210, Thornhill, ON L3T 1L7, Canada.

Information handled by the website

• Consultation requests: your name, email address, phone number, training interest, and any message you choose to provide.
• Class bookings: your name, email address, phone number, selected class, and booking and notification records.
• Staff access: authorized staff email addresses, authentication sessions, and class-management records.
• Technical information: hosting, authentication, and security services may process IP addresses, browser and device information, request details, and security logs. The website saves your language preference in your browser.

Provide only information needed for your inquiry or booking. Please do not include medical records, passwords, or payment-card information in the contact form.

How information is used

Information supports responding to inquiries, arranging consultations, reserving class places, sending service messages and confirmations, authenticating authorized staff, managing the schedule, and protecting the website from abuse. The website does not use these records for advertising profiles or sell them.

When enabled, a consultation request is delivered to the gym's Gmail inbox. Class-booking details are stored in the booking database; confirmation messages may be sent to the participant and the gym. Some features may be unavailable while setup is being completed.

The gym's Google and Gmail connection

Only the owner of againstgravity.toronto@gmail.com is asked to connect a Google account. Website visitors do not need to authorize Gmail to contact the gym or book a class.

The connection requests the Google permissions openid, email, and gmail.send. It receives the Google account's email address and verification status to confirm the correct gym account, and authorization tokens to send messages through that account. It does not request permission to read the inbox, contacts, calendar, or Google Drive files. Google handles sign-in; the website does not receive the account's Google password.

Gmail access is used only to send website service emails, including consultation notifications, class-booking confirmations, and authorized staff sign-in messages. These messages can contain the submitted contact details, class information, and any inquiry message relevant to their delivery. Recipients are the gym, the person making a booking, or the authorized staff member receiving their own sign-in link.

Google authorization is processed by backend functions. The refresh token obtained through the private connection page is encrypted in Supabase Vault and retrieved only by authorized backend services. Short-lived access tokens are used by those services to send email. Google authorization tokens are not included in public website files or sent to visitors.

Google account information and Gmail authorization are not sold, used for targeted advertising, or used to train general-purpose AI models. We follow the Google API Services User Data Policy, including its Limited Use requirements, when handling information received from Google APIs.

Service providers and sharing

The website uses Vercel for hosting, Supabase for database storage, authentication, backend functions, and encrypted credential storage, and Google for Gmail authorization and sending. Submitted information is processed by these services as needed to provide those features. Authorized gym staff and website administrators may access records needed to operate and maintain the service.

The website also uses Google reCAPTCHA to help prevent spam, Google Maps for directions, Google Fonts, and third-party asset delivery services. Loading these services can send technical information, such as your IP address and browser details, to their providers. Google's processing is described in its Privacy Policy; reCAPTCHA is also subject to Google's Terms of Service.

If a class provides an external payment link, payment takes place with the linked payment provider. The website's booking form does not collect payment-card details. Review that provider's privacy information before paying.

Service providers may process information outside Canada. Information may also need to be disclosed to comply with applicable legal requirements.

Storage, security, and retention

The website uses HTTPS for transmitted information, access controls for booking records, and encrypted storage for the hosted Gmail refresh token. No method of transmission or storage can guarantee complete security.

Booking records and correspondence are retained for handling inquiries, providing services, and maintaining necessary business records. This website does not apply a fixed automatic deletion period to all records. Contact the gym to request deletion or ask about a particular record. Copies may remain in email accounts, provider backups, or records required for legal or security purposes.

The Gmail connection credential remains in protected backend storage until removed. Messages already sent can remain in the sender's and recipients' mailboxes under their account settings.

Your choices and requests

You can contact the gym to ask about information held about you, request a correction or deletion, or withdraw consent for future optional communications. We may need to verify your identity before handling a request; some records may need to be retained for applicable obligations.

The Gmail account owner can revoke the website's Google access through Google Account connections. Contact the gym to request removal of the stored connection credential as well. Disconnecting Gmail does not delete messages already delivered or automatically erase booking records.

You can clear saved language preferences through your browser settings. If you prefer not to submit a website form, contact the gym by phone.

Contact and policy updates

For privacy questions or requests, email againstgravity.toronto@gmail.com, call (647) 237-5228, or write to Against Gravity Fitness at 55 Doncaster Ave #210, Thornhill, ON L3T 1L7, Canada.

Changes to this policy will be posted here with an updated date. If the Google connection's purpose or requested access changes, the account owner will be informed and asked to authorize any new access as required.