Privacy Policy

1. Who handles what

For your students’ data, the gym is the controller: the gym decides what to record and why. Athlon acts as a processor, handling that data on the gym’s behalf and instructions.

For your manager account and subscription data, Athlon is the controller.

2. Data we collect

Account and gym: name, email, phone, role, plus the gym’s name, locations and branding.

Operational data you enter: students and guardians, attendance, schedule, workouts, belt promotions, plans, announcements and the media attached to them.

Subscription: the plan you chose, payment status and transaction identifiers. Card data is handled by the payment provider and never reaches our servers.

The minimum technical data needed for authentication, security and running the dashboard.

3. How we use your data

To authenticate access, run the dashboard and the student app, send transactional email (sign-up, verification and password reset), charge the subscription and provide support.

We do not sell your data and do not use it for third-party advertising.

4. Sharing and providers

Google Firebase (authentication, database, files and notifications) and Cloudflare R2 (announcement media) host the data and process it on our behalf.

Brevo delivers transactional email. Mercado Pago processes subscriptions purchased on the website; inside the apps the purchase is processed by the store — Apple on iOS, Google Play on Android — which only reports the subscription status back to us.

Your gym’s operational data is visible to the staff you register and, for the part that concerns them, to each student in their own app.

5. Storage and security

Data is stored on Google Cloud/Firebase and Cloudflare R2 infrastructure, with encryption in transit and access rules that keep each gym isolated.

6. Your rights

You can access, correct, export and delete your account and gym data at any time.

To delete your account, open the panel and go to My account → Delete my account. If you are the owner, the whole gym goes with it: logins, records and history tied to it.

Prefer us to do it for you? Write to support@studiokori.com.br.

Students exercise their rights with the gym where they are enrolled; requests that reach us directly are forwarded to the gym.

7. Retention

We keep the data for as long as the account exists. After deletion, it is removed from our active systems.

Announcement media is deleted automatically once the retention period set by the gym expires.

8. Children and teenagers

Registering an underage student includes their guardians, who get access to the app. It is the gym’s responsibility to obtain parental consent before registering a minor.

9. Changes

We may update this policy. Material changes are announced in the dashboard or by email.

10. Contact

Privacy questions: support@studiokori.com.br.