Privacy Policy
We are committed to protecting your personal data and your privacy.
Last updated: April 11, 2026
This Privacy Policy describes how PriPass collects, uses, stores and shares your personal information when you use our platform, applications and services.
1Information We Collect
We collect the following types of personal information: name, email, phone, tax ID, profile photo, location data, payment information, device information, app preferences.
Facial Data: When required by a partner gym for facial recognition at their turnstile, we collect a photo of your face (selfie). This is a standard 2D photo — we do not use Face ID, 3D biometrics, TrueDepth camera, or any advanced biometric technology. The photo is taken once, with your explicit consent.
2How We Use Your Information
We use your information to: provide services, process payments, enable check-ins, send notifications, improve the platform, comply with legal obligations, prevent fraud.
Facial Data: The facial photo is used exclusively for identity verification during check-in at partner gyms that use facial recognition at their turnstiles. The photo is sent to the gym at the time of check-in to validate your entry.
3Legal Basis for Processing
We process your personal data based on: your consent, performance of a contract, compliance with legal obligations, and our legitimate interests in providing and improving our services.
4Data Sharing
We may share with: partner gyms, payment processors, cloud providers, analytics providers, and legal authorities.
Facial Data: The facial photo is shared exclusively with partner gyms that use facial recognition, solely for identity verification purposes during check-in. Gyms do not receive access to the stored photo, only the image at the time of verification.
We do not sell your personal data to third parties.
5Data Retention
We retain your data while your account is active. After deletion, data is removed within 30 business days. Data for legal obligations may be retained for the legally required period.
Facial Data: The facial photo is stored securely on AWS (Amazon Web Services) in a private bucket while your account is active. When you delete your account, the facial photo is removed along with other personal data within 30 business days.
6Your Rights
You have the right to: access your personal data, correct inaccurate data, request deletion, request data portability, withdraw consent at any time, lodge a complaint with a supervisory authority.
Contact us at [email protected] or use our data deletion request page.
7Data Security
We implement appropriate technical and organizational security measures including encryption, access controls, regular security audits, and employee training on data protection.
8Cookies and Tracking
We use cookies and similar technologies to improve your experience, analyze usage patterns, and personalize content. You can manage cookie preferences through your browser settings.
9International Data Transfers
Your data may be processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international data transfers.
10Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us.
Email: [email protected]
PriPass Technologies Inc.
