Privacy and data use.

Who runs Taper

Taper is operated by its founders, Christo Huntington and Shawn Booth, during a free private pilot. A company will be formed before any paid service. Questions, data requests and reports: christo@tapergym.com.

Who can join

Taper is for adults 18 or older who are invited by their gym. You confirm that you are 18 or older when you create your account and again when you join your gym’s community. Taper does not ask for or store your birthdate. If we learn that a member is under 18, we will remove their access.

What Taper stores

Account: your name, email address, password (stored only as a one-way hash), your gym and your role.

Profile: your display name, introduction, profile photo, whether you appear in the People list, and your notification choices.

Races: the races you register for with category and day, results and splits you add or import with their source, and your corrections.

Community: your messages, photos and short videos, partner interests and outcomes you report, event RSVPs, race weekend and travel plans you choose to share, delivery and read receipts, and your reports, blocks and mutes.

Optional private preparation: if you turn it on, the benchmark entries and evidence used to explain your progress.

Choices and records: which notices you accepted and when, your 18+ confirmation, your data requests, audit records of important actions, and the iPhone device token if you allow notifications.

Taper does not collect your birthdate, GPS location or payment details. Travel plans are text you choose to enter. An event’s meeting point is text the host enters; a coach can also link it to a map place, and then Taper stores the place’s identifier and, for a place found through Google Maps, its coordinates for at most 30 days. Taper never sends a member’s location to a map service.

Link previews: when you post a link, Taper’s server fetches that page’s title and description to show a preview. The linked site sees a request from Taper, not from you or other members. Previews never load images from the linked site, and the person who posted the link can remove its preview.

Who sees what

Crews: posts in a crew are visible to the members of that crew in your gym. Everyone in your gym is in the gym crew. Members join a race crew by confirming a registration for that race. Your gym’s coaches and owner can join any race crew in your gym, and members of a crew can read its earlier messages.

Private conversations: a private conversation between two members opens only after both of you accept an introduction, and only the two of you are in it. Your gym’s coaches and owner can also start private conversations with one or more members.

Your name on messages: your display name and profile photo appear on your messages even if you hide from the People list. Hiding removes you from member lists and partner listings and stops new introduction requests.

Events: when you RSVP to a crew event, your name and profile photo are shown to that event’s crew, its host and your gym’s staff. There is no anonymous RSVP.

Private history: your race history and private race recaps are not shown to other members. A recap becomes a crew post only if you preview and share it.

Private preparation: it is off unless you turn it on. When it is on, your gym’s coaches and owner can see your preparation status, Readiness Score, evidence, trends and benchmark entries for your upcoming races. Other members never see it. Staff notes about you are visible to your gym’s staff only and are included in your data export.

Your gym owner sees a roster with each member’s name, account and notice status, race category and signup date. The owner’s community report shows totals, not what any person wrote.

What founders and gym staff can access

Messages are not end-to-end encrypted. They are stored on Taper’s servers. In the app, message text is visible only to the members of that conversation, with these exceptions.

Reports: when a member reports a message, your gym’s owner sees that message, its photos or videos while the report is open, the conversation name, the reason and the note. The report does not show who reported it or the rest of the conversation. Coaches do not see reports.

Removing content and people: at any time, your gym’s owner and Taper’s founders can remove any message, photo or video in your gym, including in private conversations and staff groups, without joining the conversation. Coaches can remove posts and replies in crews. The owner or a founder can also remove a member from the community or delete a member’s account at any time. Each removal is recorded in an audit log.

Moderation: a message removed by staff disappears for everyone, and its text, photos and videos are deleted; the audit log keeps who removed it, when and why. A message hidden while handling a report is removed from view but kept for the moderation record.

Founders: a founder may hold an administrator role in your gym. It gives the same access as the gym owner and no more. Across gyms, founders see activity totals (never message text), feedback members send through the app, and requests from gyms. Founders also have technical access to the database and hosting accounts that run Taper. They use it only to operate, fix and secure the service, to handle reports and to complete your data requests.

Photos and videos

Photos and short videos you post appear right away; nobody reviews them first. A new profile photo also appears right away. Your gym’s owner, Taper’s founders and, in crews, coaches can remove them at any time (see above).

Uploaded photos and videos are re-encoded and their embedded metadata, such as camera location, is removed. Automatic image screening by an outside service is turned off. Text messages are checked by an automatic word filter that runs on Taper’s own servers. Taper does not analyze your movement or count repetitions.

Notifications and email

iPhone notifications are optional and need your permission. They follow your notification choices (replies, logistics, events, introductions and crew posts) and carry generic text with no member names and no message text; the only name that can appear is a crew title set by your gym. Taper limits how often notifications are sent, but there are no quiet hours: a notification can arrive at any time of day or night. You can turn off any kind of notification or mute a conversation in Notifications.

Taper sends account emails, such as invitations, email confirmation and password resets. Community messages and notices are never sent by email.

Service providers

Taper uses these providers to run the pilot. They process data on Taper’s behalf.

Vercel: hosting for the website and app, and private storage for photos, videos and notification device records.

Neon: the database that stores account, race and community data.

Resend: delivery of account emails.

Apple: TestFlight to distribute the iPhone app, and Apple Push Notification service if you allow notifications.

Google Maps Platform: when a coach searches for an event’s meeting point, the text they type is sent to Google to suggest places, and Taper keeps the chosen place’s identifier (and its coordinates for at most 30 days). Google’s Privacy Policy (https://policies.google.com/privacy) applies to that search, and using Google Maps features in Taper is subject to the Google Maps/Google Earth Additional Terms of Service (https://maps.google.com/help/terms_maps/). Open in Google Maps and Open in Apple Maps take you to Google’s or Apple’s own service under their terms.

Public results: if you choose to import your own past results, Taper sends the name you type to Pyrox, an independent public HYROX results service, and saves only the results you confirm are yours. Search matches you do not import are cleared after one day.

Visits to Taper’s public pages (such as the home, privacy and terms pages) can be counted with Google Analytics when it is turned on. It is not loaded inside the signed-in app, and it does not load when your browser sends Do Not Track or Global Privacy Control.

No payment is taken during the pilot. No outside AI service screens or reads your messages, photos or videos.

What Taper does not do

Taper does not sell your data or use it for advertising, and your community content is not used to train AI models. Optional product research is off unless you turn it on in Privacy and data; it covers event crew posts you allow, never private conversations with coaches or preparation evidence, and you can withdraw at any time. Withdrawal stops future use; content already reviewed cannot be recalled.

Cookies and security

Taper uses one sign-in cookie, which lasts up to 30 days on the web. To slow down repeated sign-in and signup attempts, Taper stores a keyed hash of your IP address and email address, never the raw values. Your browser keeps your theme and unsent drafts on your device.

How long Taper keeps data

Taper keeps your information while your account is active. There is no automatic deletion schedule during the pilot; deletion happens when you ask (see below). Some items expire on their own: invitations after 7 days, email confirmation links after 48 hours, password reset links after 30 minutes, unimported results search matches after one day, and data export download links after 7 days.

Your controls and rights

In the app, you can mute, leave or report a conversation or message, block a member, delete your own messages, hide from the People list, and turn private preparation and product research on or off.

From Privacy and data you can download a copy of your account and your own community content right away, and request a correction, a restriction or deletion. You can also email christo@tapergym.com. Your gym owner and the founders see your request so they can complete it, and Taper aims to complete requests within 30 days.

Restriction takes effect immediately: it stops your community access and new preparation processing.

A deletion you request is carried out by your gym owner or a founder. Your gym owner or a founder can also delete an account at any time; that deletion takes effect immediately. When a deletion is completed, your name on your messages becomes “Deleted member”, your messages are replaced with “[removed after deletion]”, your photos and videos are deleted, your name, email and password are removed from your account, and mentions of your name or email in other members’ messages are replaced with “[deleted]”. Taper keeps limited audit records with personal details removed, the record of your request, and race performance history that no longer identifies you.

Health and independence

Taper is not medical advice or a diagnosis. Taper is independent and is not affiliated with, endorsed by or sponsored by HYROX. Event names are used only to identify races.

Changes

When this notice changes in a way that matters, Taper updates the date and the notice version and asks you to review and accept the new notice in the app before you continue.