Data processing addendum (gyms)

Last updated 17 September 2026 · Terms · Privacy · Refunds · Data processing (gyms)

This addendum applies to a gym (the controller) using the Gym tier, and to Ikuzo (the processor) processing personal data on its behalf. It forms part of the terms.

1. What is processed

Coach email addresses (to sign in and be invited); the gym's name, logo, colours, timezone, social links and class calendar (public, published by the gym); workouts the gym saves and publishes; pairing records for the gym's screens (a label, when paired, when revoked — no personal data). Members of the public who open a gym's page or screen are not identified: usage counters carry no name, no email and no device id.

2. Purpose and instructions

Processing serves only to provide the Gym tier as described in the terms, on the gym's documented instructions given through the product (creating the gym, inviting coaches, publishing, pairing screens). We do not use the data for any other purpose.

3. Sub-processors

Stripe (payments), the email provider named in our privacy page (transactional email), Cloudflare (network). Hosting is our own. We tell gyms by email at least 14 days before adding a sub-processor.

4. Security

Data lives in one encrypted-at-rest database with nightly verified backups; access is by the operator only; sign-in is by expiring link; screens hold only a hash of their pairing token on our side. We notify a gym without undue delay of a breach affecting its data.

5. Rights and deletion

A gym can export and delete its data by writing to us; coaches can remove themselves. When a Gym subscription ends and is not reactivated within 90 days, the gym's coach list and pairings are deleted; the public page keeps only what the gym had published, until the gym asks for it to go.

6. Location

Data is processed in the operator's country and at the sub-processors above; where a transfer outside the EEA occurs it relies on the sub-processor's standard contractual clauses.

7. Audit

On request, once a year, we answer a reasonable written questionnaire about the measures above.

Ikuzo is an independent timer and is not affiliated with or endorsed by any race organiser or training brand. Questions: contact.