Privacy Policy

General

At GloboGym Inc. (“GloboGym,” “we,” “us,” or “our,” also d/b/a “Huddle”) we care about your personal information, so we have prepared this Privacy Policy to explain how we collect, use, and share it. This Privacy Policy applies to the Huddle websites, mobile applications (iOS), any related web dashboards, and related services (collectively, the “Service”). By using the Service, you acknowledge our collection, use, and sharing of your personal information in accordance with the terms of this Privacy Policy. Certain GloboGym services are subject to additional or different terms.

Please note that GloboGym is constantly testing and improving our product features. Any features discussed in this Privacy Policy may not be available to all users or in all jurisdictions.

Identity and Contact Details of the Data Controller

Huddle is the data controller of your data for the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR”), The UK General Data Protection Regulation as retained under the Data Protection Act 2018 (“UK GDPR”), The California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), The Personal Information Protection and Electronic Documents Act (“PIPEDA”), and any other applicable privacy legislation (each of the foregoing individually and collectively, in addition to any other applicable laws, “Privacy Laws”).

Huddle's headquarters are located in Canada at:

Global Gym Inc.

165 Manning Ave.

Toronto, ON M6J 2K6 Canada

For all data privacy inquiries and any questions or concerns about this data privacy policy, please contact our Data Protection Officer at privacy@huddlefit.co and for all support inquiries, please go to https://www.huddlefit.co/contact.

Collection of Data

When you use the Service, we collect the following personal information about you:

3.1 Account Registration

To register for a Huddle account (an “Account”), you provide us with your age. email address, first name, last name, and password (stored in hashed form). In some countries, you may also provide us with your phone number.

You may also register for an Account using certain social logins, such as Apple Sign-In or Google. If you register for Huddle using a social login, GloboGym may receive information about you from your social or login provider, including your name, email address, profile image URL and a unique user identifier (e.g., Apple User ID or Google Profile User ID).

We also collect and store your e-mail verification status, e-mail verification tokens, (and their expiry), password reset tokens (and their expiry), user roles, time zone preference, and last sign in timestamp.

3.2 Profile Page & User-Generated Content

After you register for your Account a profile page will be created for you (“Profile”). Your Profile will be populated by information you submit, such as your name, username, bio, and profile picture (“User-Generated Content”). You may also set a weekly workout goal, a body gender preference (used for anonymity view display), and accumulate experience points through posting and engagement. Your age, phone number, and email address are not included in your public Profile and are not considered User-Generated Content under this Privacy Policy. Other Huddle users that have been admitted to the same in-app group (as the context requires, a “huddle” or “Group”) may be able to search for your Profile using de-identified codes, links, QR codes or your name or username.

Your Profile will also include information about your activity progress which includes aggregated accountability statistics derived from your use of the Service, such as weekly workout counters, group leaderboard rankings (including rank, streaks, and goal achievement) and historical recap data. These statistics are derived from your posts and Group activity and are visible to other members of your group.

Moreover, your Profile will show other users you have formed a Group with. By default, your Profile is not public or visible to other Huddle users and anyone else on the Internet. Your data and User-Generated Content become mutually accessible only if you choose to accept a Group join-request from the other user to form or join a Group. Codes for a join-request are randomly generated and temporary. Certain features are in development which may make your Profile accessible to third-party websites or web scrapers to read, collect, and use your public information for their own purposes should you provide or permit public access to your data and/or credentials. You can set your Profile to private through the settings function in your Profile (“Settings”).

You may be able to submit comments that will supplement content feed visible to other users and other users may be able to submit comments that will supplement your feed. Any comments you submit are considered User-Generated Content under this Privacy Policy. You can delete comments you submit or comments that other users submit to your Profile.

Huddle may scan or review any User-Generated Content, or share your User-Generated Content with a third-party content moderation service provider, to ensure compliance with our Community Guidelines at https://www.huddlefit.co/community-guidelines. Huddle may restrict or delete User-Generated Content if it violates our Community Guidelines or for any other reason.

3.3 Posts and other User-Generated Content

When you create a post when using the Service, we collect the following information: your rear- and front-facing camera photo, aN automatically generated photo-thumbnail, post caption and title, the Group to which the post is shared, a sequential post-number, a timestamp, GPS latitude and longitude (subject to the device permissions you grant), and a text description of your location at the time you post. Your location data is sensitive personal information under applicable privacy laws and you may revoke your permission for collection of such data at any time through your device settings and through your mobile device settings.

3.4 Activity Data & IP Addresses

When you use the Service, we generate data about your use of the Service including your browser and device data, log data, and IP address. We also generate data regarding your engagement in fitness and social activities on the Service.

We use your IP address to display an approximate location on your profile, which you may disable at any time through your mobile device settings or through your Settings. We will retain your IP address for no more than thirty (30) days, unless exceptional circumstances require longer retention.

3.5 Device and Push Notification Data

When you grant notification permissions, we collect your push notification token, a unique installation ID, your device platform, iOS or Android, device name, operating system version, app version, push notification permission status, and activity timestamps. One user may have multiple devices recorded., meaning one per installation or device. We use data to deliver push notifications to you and you can manage your notification preferences in your mobile device settings or through your Settings.

3.6 Group and Social Data

When you create or join a huddle group, we collect the group name, description, weekly goal, time zone, membership status, join source, notification preferences (individually and by group), and relevant timestamps. We also collect data about group invitations, including invite tokens, status, and the identities of the inviting and accepting users.

*3.7 Challenge Participation *

If you participate in challenges on the service, we collect your challenge ID participation status (including active, completed, or given up), and applicable timestamps, each of which can form the basis for other User-Generated Content and statistics.

3.8 Subscription Data

If you subscribe to a paid plan, we collect your subscription status (active, applicable category, cancelled, or expired), and start and expiry timestamps. Payment transactions are processed by third-party payment processors (such as RevenueCat and Paddle.com, and the Apple App Store or Google Play Store, as applicable to your account). Huddle does not directly collect or store your payment card details.

3.9 Cookies

When you access the Huddle website, we store certain data from your browser using cookies. A cookie is a piece of data stored on the user’s computer tied to data about the user. We use session ID cookies to confirm that users are logged in. If you do not want your data to be collected by cookies, there is a simple procedure in most browsers that allows you to deny or accept the cookie feature. However, cookies may be necessary to provide you with certain features available on the website (e.g., customized information).

Our cookies include the following categories:

• Strictly Necessary Cookies: These are essential for the Service to function and cannot be switched off. These include session ID cookies to confirm that you are logged in.
• Analytical Cookies: We use analytics cookies (e.g., from LogRocket) to understand how users interact with the Service and to detect and fix bugs.
• Targeting/Advertising Cookies: Cookies from Google, Facebook, Amazon, TikTok, or other advertising networks are used.

For any users in the European Economic Area (“EEA”) and United Kingdom, analytics and advertising cookies are disabled by default until you provide consent through our in-app consent manager. You may withdraw your consent at any time.

You can see a list of all cookies used at Huddle on our Cookie List page at https://huddlefit.co/cookies and manage your cookies through your Settings.

How We Process Your Information

Huddle will process your personal information only where we have a valid legal basis to do so under Privacy Laws to provide and improve the Service, including: (a) performance of a contract with you; (b) our legitimate interests, provided those interests are not overridden by your rights; (c) to comply with any legal obligation and (d) with your consent. Under applicable Privacy Laws, we rely on your meaningful consent (express consent for sensitive data such as your health and approximate location, and implied consent where appropriate for non-sensitive data), and process related personal information for the business and commercial purposes described below. In particular, we may process and share your personal information in the following ways:

4.1 Providing and Improving the Service

We process your personal information to provide and improve the Service. For example, we will use the information you provide to maintain your Profile and fitness progress, display your Profile to other users, personalize fitness content, detect and fix bugs, perform research, and provide customer service to you.

We may share personal information with third parties that help us provide or improve the Service (“Service Providers”) for business purposes and related services including: (1) hosting; (2) search engine; (3) analytics; (4) payment processing; and (5) others.

We may share your information with third-party vendors that support product features such as content moderation.

If you redeem a promotion code to get a Huddle subscription, we may share data regarding your usage of the Service with the organization that provided the promotion code to you.

4.2 Communicating with You

GloboGym will use the email address or phone number you provide to send you the following types of messages:

• Essential messages to support the operation of the Service.
• Notifications about your Group members’ progress activity on the Service.
• Announcements regarding changes to the Service or products.
• Announcements of new products, services, and offers, or research opportunities.

You may opt-out of receiving non-essential messages in your Settings.

4.3 Complying with Law and Preventing Harmful Activities

GloboGym may process and share personal information if necessary to comply with legal requests, such as subpoenas or court orders. GloboGym may share personal information when we believe it is necessary to comply with law, to protect our interests or property, to prevent fraud or other illegal activity, to assist law enforcement, or to prevent imminent harm. This may include sharing information with other companies, lawyers, agents, or government agencies.

[4.4 Personalized Advertising

GloboGym may process and share your personal information for the purpose of providing you with personalized advertising. To provide personalized advertising, we may work with third-party advertising networks, marketing analytics service providers, and website analysis firms. These third-party advertising service providers may collect and use personal information about your visits to and use of the Service, as well as other websites, in order to serve you with advertisements and content tailored to meet your preferences and improve such service. Aggregate demographic and interest data may also be used for market research purposes.

You can opt out of receiving personalized advertising by emailing privacy@huddlefit.co. In addition, your mobile device may offer settings that let you make choices about the collection, use, and transfer of app information for personalized ads.

Please note that opting out of personalized advertising does not prevent the display of all advertisements to you. Certain subscriptions obtained using the Services may offer an ad-free experience.]

4.5 Anonymous Information

We may process aggregated, de-identified, or otherwise anonymous or anonymized information for any purpose. Such information is not considered personal information. We commit not to attempt to re-identify any de-identified data, including in respect of relationships with Service Providers.

Data Subject Rights

You also have the following rights in relation to the personal information we hold about you, subject to Privacy Laws in the jurisdiction where you reside, in addition to any other rights required by applicable law:

• Know what personal information we have collected about you.
• Access a copy of the personal information that we hold about you.
• Know what personal information about you we have disclosed to third parties, including the categories of recipients. *
• Opt out of the sale of your personal information with third parties for advertising.
• Object to our processing of your personal information where we rely on legitimate interests as our legal basis.
• Request that we limit our use of your sensitive personal information to what is necessary to perform the services you requested.
• Not be discriminated against for exercising your data subject rights.
• Request that we delete any personal information we have collected from you.
• Request that we correct any inaccurate personal information about you.
• Export the personal information you have provided to Huddle in a format that can be transferred electronically to a third party.
• Withdraw any consent you previously gave us to process your personal information, at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Request that we restrict or limit our processing of your personal information.
• Appeal a denial of a rights request.
• Request de-indexation of your personal information from search results.
• Delete your Account by following the instructions in the Service.

You may update or correct your information, and exercise certain opt-out rights, in your Settings page. You may request to access or delete your personal information stored by GloboGym. To make another privacy-related request, please send an email to privacy@huddlefit.co. We will respond to your verifiable requests within the timeframe required by Privacy Laws and no later than thirty (30) days.

Please note that these rights are not absolute and we may refuse requests to exercise data subject rights if there is a legitimate reason, such as if we cannot authenticate your identity, if the request could violate the rights of a third party or applicable law, or if the request could interfere with GloboGym’s operations or prevent us from delivering a service you requested.

For UK residents, contact the Information Commissioner's Office at https://ico.org.uk/global/contact-us/. For Canadian residents, contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy commissioner. For EEA residents, a list of Supervisory authorities is available at: https://ec.europa.eu/newsroom/article29/items/612080.

Security Safeguards

We employ industry-standard physical, administrative, and technical measures to protect your information, including but not limited to: encryption in transit and at rest, pseudonymization, regular security audits and penetration testing, access controls, staff training, and incident response protocols. While we strive to protect your information, no system can be guaranteed 100% secure. In the event of a data breach involving your personal information, we will notify you and relevant authorities as required by law, including within seventy-two (72) hours of becoming aware of a qualifying breach under applicable Privacy Laws.

Data Retention

We retain personal information only as long as necessary for identified purposes or as required by law. We may retain certain information longer if necessary to provide our Service, defend our legitimate interests or those of third parties, comply with legal requirements, resolve or defend ourselves in disputes, investigate misuse or disruption of the Service, or perform agreements. We may also retain de-identified or aggregated data indefinitely as follows:

Children’s Privacy

The Service is not directed to children under the age of thirteen (13). We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. Under the CCPA/CPRA, we do not sell or share the personal information of consumers we know to be under the age of 16 without affirmative authorization. Under the EU GDPR, consent of a holder of parental responsibility is required for children under 16 (or a lower age set by member state law, but no lower than 13). Under the UK GDPR, the age threshold is 13.

Do Not Track and Opt-out Signals

The Service is not currently configured to respond to “do not track” signals sent by some browsers.

Links to Third-Party Websites

The Service may contain links to other websites. GloboGym is not responsible for the content or privacy practices of other websites, including any personal or financial information collected by third-party payment processors. We encourage users to be aware of the privacy policies of other websites they visit. This Privacy Policy applies only to information collected by GloboGym. Any time you click on a link (including advertising banners) or submit your personal information to a third-party website, you will be subject to that third party’s privacy policies.

International Data Transfers

Huddle is based in Ontario, Canada and processes data in Canada and the United States, each of which may not provide equivalent levels of data protection as your home jurisdiction. If you are located in the EEA, the United Kingdom, or another jurisdiction with data protection laws that restrict international transfers of personal information, your personal information may be transferred to, stored in, and processed in Canada and the United States.

Privacy Policy Updates

We may update our Privacy Policy to reflect changes to our information practices. If we do this and the changes are material, we will post a notice that we have made changes to this Privacy Policy on the Services and we will indicate the date these terms were last revised at the top of the Privacy Policy. Any revisions to this Privacy Policy will become effective at the end of that seven (7) day period.