1. Data stored on the device
- Door link. The access link entered by the user is stored in the device’s secure storage (Keychain) and is shared with the Doorza widget and Apple Watch app so that they can function.
- Device identifier. A random identifier generated by the App. It is not linked to the user’s name or Apple ID and is used by the gym’s door system to recognise the device.
2. Location data
Where the user grants permission, location data is processed exclusively on the device in order to sort locations by distance and preselect the nearest door. Location data is not transmitted to the Doorza server or to any third party. Permission may be withdrawn at any time in the device settings.
3. Data transmitted during use
To display and open doors, the App sends requests via the Doorza server to the gym’s door service (OpenAir / Gymkeeper). A request may contain:
- the details contained in the door link (gym address and access token);
- the selected door and card, and a PIN where the door requires one;
- technical device information required by the door service: the device identifier, device type, operating system version, screen size, time zone and language.
The Doorza server forwards these requests and returns the responses. It does not maintain a database of users, links or door openings. The server may create short-lived technical logs (for example, IP address and request details), which are used solely for troubleshooting and are deleted at regular intervals.
The gym’s door service processes the data it receives in accordance with its own privacy policy.
4. Clipboard
The App accesses the clipboard only when the user taps Paste.
5. Reminders
If the user enables reminders, they are scheduled locally on the device based on the card’s expiry date. No reminder data is transmitted to the Doorza server. Reminders may be disabled at any time in the App or in the device settings.
Buying tickets
If your gym sells tickets in Doorza, the app opens your gym's own online shop inside the app. Logging in, payment and your order are handled by the gym's shop under its own privacy policy, and none of it passes through my server. To find out whether your gym has a shop, the app sends your door link details to the Doorza server, the same way it does when loading your doors.
The shop's login stays on your device so you don't have to log in again, and the app keeps your name from the shop account on your device to show which account is connected. Deleting the app removes both.
6. Ticket purchases
Where the user’s gym offers online sales, the App opens the gym’s own online shop within the App. The purchase is completed on that website, and any data entered there, such as name, email address, personal identification code and payment details, is transmitted directly to the gym and its payment providers (for example Montonio or Stebby); it is not received or stored by Doorza. The login to the gym’s shop is kept in the App’s web storage on the device so that the user remains logged in, and the App reads the login status on the device in order to display it. This information is not transmitted to Doorza. Data entered in the shop is processed in accordance with the gym’s own privacy policy.
7. Third parties
- The App does not contain tracking, advertising or analytics software.
- Data is not sold or disclosed to third parties, except to the gym’s door service as described in section 3.
8. Deletion of data
The user may change or remove the door link in the App at any time. Uninstalling the App deletes all data it has stored on the device.
9. Children
The App is not directed at children under the age of 13 and does not knowingly collect their data.
10. Changes to this policy
This Privacy Policy may be updated from time to time. Any changes will be published on this page, and the date above will be revised accordingly.
11. Contact
Questions regarding this Privacy Policy may be sent to privacy@example.com.