Privacy Policy
Last updated: 12 July 2026
Who we are
Moray Training Club (Moray Performance and Wellbeing CIC), 56 High Street, Lossiemouth, Moray. We run CrossFit Moray and Hyrox Moray, and this app is how members book classes, follow workouts and track their training. Contact: info@morayperformanceandwellbeing.com.
What we collect
Account & membership: your name, email, phone number, bookings, attendance and membership plan.
Training: workout scores, personal records, points, achievements and anything you post to the Pack feed.
Health & fitness data (only if you use these features): steps, calories, sleep and heart-rate figures you sync from your device or enter yourself; nutrition logs; cycle-tracking entries; progress photos; fitness-age inputs.
Enquiries: if you fill in our quiz or contact forms, the answers and contact details you give us.
Health data from your phone or watch
If you connect Apple Health or Google Health Connect in our app, we read your step count and active calories— only after you grant permission on your device — to show your own activity in the app and on club leaderboards. We never write to your health records, and you can revoke access at any time in your phone's Health settings. Cycle-tracking entries and progress photos are private to you — they are never shown to other members.
Why we use it (lawful basis)
To run your membership and bookings (contract); to alert coaches to new enquiries and reply to you (legitimate interest); to show leaderboards, training history and health metrics you choose to sync (consent — you opt in by connecting or entering the data); and to send marketing emails only with your consent, which every email lets you withdraw via unsubscribe.
Where it lives and who else touches it
Your data is stored in our database with Supabase (encrypted at rest and in transit) and the app is hosted on Vercel. Transactional and club emails are sent through Resend. If you buy something or pay for membership in the app, payment is handled by Stripe — we never see or store your card details. We do not sell your data, and we do not share it with anyone else except where the law requires.
How long we keep it
For as long as you're a member, so your training history works. If you leave, we keep basic membership records for our legal/accounting obligations and delete or anonymise the rest on request. Enquiry (quiz) details are kept while we're in touch with you and deleted if you tell us you're not interested.
Your rights
You can ask for a copy of your data, correct it, or have it deleted — email info@morayperformanceandwellbeing.com and we'll act within one month. You can withdraw consent for any optional feature (health sync, cycle tracker, marketing) at any time without affecting your membership. If you're unhappy with how we handle your data you can complain to the ICO (ico.org.uk).