Privacy policy

Who we are

“CrossAdapt”, “we” and “us” mean Always Varied, LLC, which runs the CrossAdapt apps, the web app at app.crossadapt.app and this site. Questions about this policy or your data go to privacy@crossadapt.app.

If you train at a gym that uses CrossAdapt, the gym also has a copy of your member details and decides how it uses them. For questions about what your gym does with your information, ask the gym too.

What we collect

Your account

Your email address and name, from signing up or from Sign in with Apple. If you use Hide My Email, we only see Apple's relay address. Sign-in is handled by Clerk (see below). We also record when you last used the app.

Your athlete profile

The settings you choose: weight unit, maximum heart rate, the plates you have, your time zone and the programming you follow. A gym or an import from another gym system may add your birth date and training age. If you choose one, your leaderboard division (Women or Men) is kept only to filter the whiteboard; nobody else sees it.

Your workouts

What you log: scores, reps, loads, times, distances, rounds, whether you did it as prescribed, scaling, substitutions, effort, notes, the body weight you type in, and when you trained. When the Apple Watch app runs a workout, the result also carries average and maximum heart rate, a heart rate reading for each part of the workout, active calories and distance.

Your profile photo and username

If you add them: a profile photo, and a username of your choosing. Both are optional. Before anyone else sees a new photo, it is checked automatically (see Anthropic below); one that isn't suitable is refused and never shown, and one the check isn't sure about waits for a person at your gym or at CrossAdapt to look at it. Your photo shows wherever your name already does: to members and staff of your gyms, and on your gym's screens if you show on its leaderboard. Everyone without a photo is shown by their initials.

Reports and blocks

If you report someone's photo, username or behaviour, we keep the report, who it's about, why, and what was done about it, so your gym's staff and CrossAdapt's moderators can act on it. The person you report isn't told who reported them. If you block someone, we keep that so they can't high-five you and their moments are hidden from you, and yours from them.

Gym membership

If you join a gym that uses CrossAdapt, the gym keeps your name, email, phone number, birth date, emergency contact, membership and payment history, class bookings and check-ins, signed waivers, and notes its staff write. When you sign a waiver we record the name you typed, the time, and your device's IP address and browser, as evidence of the signature.

Payments

Card details are entered on Stripe's own pages and go only to Stripe. We keep the Stripe customer reference and a record of what was paid, when and how, never the card number.

Device and technical data

A push notification token for your iPhone or Android phone if you allow notifications, and one for Live Activities if you start a workout with one on iPhone. Crash reports and performance samples from the iPhone and Android apps and our servers (see Sentry below). Your IP address is used briefly to limit repeated sign-up and join attempts; apart from waiver signatures we don't store it.

Apple Health and Health Connect

CrossAdapt asks before it touches Apple Health or Health Connect, and you can change what it may read or write at any time in the Health app on iPhone or in Health Connect's settings on Android.

• The Apple Watch app reads heart rate, active energy and walking and running distance while it runs a workout, and saves that workout to Apple Health, including the route when you run outdoors.
• The iPhone app reads your date of birth and your latest body weight to fill in your profile. Both stay on your iPhone. They are not sent to our servers.
• The Android app reads only your latest body weight from Health Connect, to show on your profile. It writes nothing to Health Connect. The weight stays on your phone and is not sent to our servers. Health Connect has no date of birth, so you can type one on your profile instead; that stays on your phone too.
• Sent to our servers: only the workout figures listed above (heart rate readings, calories and distance attached to a result you log), so your history and records work on every device.

Health data is never used for advertising or marketing, never sold, and never shared with anyone for those purposes. It is shared with your gym only as described under “Your gym” below.

Location and camera

The Apple Watch app uses GPS only while a workout is running, to measure how far you have run. The route is saved to Apple Health on your devices. We don't receive your location.

The Android app doesn't use your location.

The iPhone and Android apps use the camera only for a gym's owners and admins to scan the code on a gym TV and pair it. The code is read on the phone itself (on Android, by Google's ML Kit, which runs on the device). Nothing from the camera is saved or uploaded.

How we use it

• To run the service: show your programming, run workouts on Apple Watch, score them, and keep your history and records.
• To let your gym run its classes, memberships, billing, leaderboards and messages, if you belong to one.
• To send the emails and notifications you've allowed. Each email has an unsubscribe link, and you can turn notifications off in the app.
• To fix crashes and bugs, keep the service secure and stop abuse.

We don't use your data for advertising, sell it, or build profiles of you for anyone else.

Your gym

If you belong to a gym on CrossAdapt, its owner and staff can see your member details, bookings and check-ins. Owners, admins and front desk staff can also see billing. Your results on the gym's workouts appear on its whiteboard. Turning off “Show me on the leaderboard” hides them from other members, but the gym's staff still see them. Your live heart rate appears on the gym's screens only if you turn on “Share my workout live”, which is off until you do.

Your personal records and achievements (like “100 classes” or a monthly streak) are worked out from your results and check-ins. While “Share my milestones” is on, which it is until you turn it off, the week's PRs, benchmark firsts and milestones appear in your gym's Highlights for its members and staff, as your first name and last initial. A PR from your own training shows only the lift or benchmark and the result, never the workout. Achievements that would reveal your body weight are never shared, and birthdays never appear. Staff can hide a Highlight, and you can hide your own. Between classes, your gym's screens show the week's PRs and benchmark firsts, but yours only while “Show me on the leaderboard” is also on.

Your gym's staff can write a shout-out that names you (“Huge first ring muscle-up from Dana today”). It sits at the top of your gym's Highlights for a week, you get a notification about it, and it goes on the gym's screens unless it names someone who has turned off “Show me on the leaderboard”. When a coach logs your score for you, you get a notification too. Both follow your gym notifications setting.

Members and staff of your gym can give your results and milestones a high five, which records who gave it. You see who did; you can turn high fives off with “Let members high-five my results”, and turn off their notifications separately.

Your own programming and personal results outside the gym's workouts are not visible to gym staff unless you give a coach access to them.

Your gym's chat

Each gym has one chat room, for its current members and staff; there are no private messages. What you post there (text and links), with your name as your gym knows you and your photo, is seen by your gym's members and staff. Staff can take any message down, and mute or remove someone from the chat. You can report a message or block its author, and blocked members' messages are hidden from you. You get a notification only when someone mentions you or staff post, which you can turn off. Messages are kept for 12 months and then deleted, and deleting your account deletes yours.

Friends

You can be friends with other people on CrossAdapt, at your gym, another gym or none. There's no directory: someone finds you by your exact username, your link or QR code, or by your name where they can already see it, such as your gym's whiteboard. A request needs your accept before anything about you shows to them, and either of you can unfriend the other at any time without the other being told.

Friends see your photo, name, username, home gym, shared achievements and monthly streak, and your PRs and firsts of the week (not while “Share my milestones” is off). Unless you turn off “Let friends compare my bests”, they see your lift and benchmark bests beside their own. Friends never see your notes, heart rate, bodyweight, workouts or anything only your gym sees, and your coach doesn't see who your friends are. Friends can high-five each other's moments. Blocking someone ends a friendship and stops their requests. You get a notification for a friend request, when one is accepted, and when a friend high-fives you (at most one an hour for each moment, never at night), which you can turn off. Deleting your account deletes your friendships and requests.

Points and levels

CrossAdapt gives you points for what you do and works them out from your own data: classes you check in to, workouts you log, the load, reps, distance and calories your logs record, where you place on your gym's whiteboard, doing a workout as prescribed, PRs and firsts, achievements, months in your streak, and high fives you give (up to 20 a day). Your level comes from your lifetime points and never goes down. Editing or deleting a result changes its points.

You see every line of your own points. Your gym's members see your level and points on its points board while “Show me on the leaderboard” is on and the gym has its board on, as your first name and last initial. Your gym's staff see every member's level and points, and which of their results at the gym earned them, and can keep a result they judge wrong off the gym's board. Friends see your level and points on your card and on the friends board. Boards can be filtered by Women or Men, which lists only the people who chose that leaderboard division. A coach you give access to your training doesn't see your points. The points board never goes on your gym's screens, and points never send notifications. Deleting your account deletes your points.

Gym challenges

Your gym's staff can run challenges: a number of classes in a month, classes every week, a daily check-off, a benchmark you do at the start and again at the end, or a total the gym reaches together. You join one yourself, or staff put you in, and you can leave at any time. Your progress is worked out from your own data: your check-ins at the gym, the results you log, and the days you check off or the amounts you add yourself. There is no weight-loss or body-measurement challenge, and none reads your bodyweight.

Members of your gym in the challenge see your progress and place in its standings while “Show me on the leaderboard” is on, as your first name and last initial; your gym's staff see everyone in it. While a challenge runs, your gym's screens show its leaders between classes, only for members on the leaderboard; a together challenge's total counts everyone in it. Standings can be filtered by Women or Men, which lists only the people who chose that leaderboard division. Finishing a challenge is an achievement, shared like your others. If you're in one, you get a notification when it starts, at halfway, three days from the end and with the final standings, never at night, which you can turn off. Deleting your account deletes your places in challenges and your check-offs; the challenge itself stays your gym's.

A challenge can be a team season, such as an intramural Open. Its teams are made by your gym's staff, or you pick your own. Your share of your team's points is worked out from your own points in the season's dates: workouts you log, classes you check in to at the gym, doing a workout as prescribed, PRs and firsts, and the season's workouts you do. Results your gym's staff keep off its points board don't count. Your gym's coaches can also give your team, or you on it, spirit points with a reason, which are kept with the name of the coach who gave them. Your teammates and the gym's members in the season see your share of your team's points while “Show me on the leaderboard” is on, as your first name and last initial; otherwise your points still count for your team without your name. The points log shows each spirit award, its reason and the coach's first name and last initial. Your gym's staff see everyone's share. Your gym's screens show the teams' places and points between classes, naming only members on the leaderboard. Deleting your account deletes your place on a team and the spirit points that name you; the teams and the rest of their points stay your gym's.

Who else receives data

We use a small number of service providers, each only for the job described:

• Clerk: account sign-in, including Sign in with Apple. Receives your email address and name.
• Stripe: payments for gym memberships and CrossAdapt plans. Receives your name, email and payment details.
• Resend: sends email from CrossAdapt and from your gym. Receives your email address and the message.
• Apple Push Notification service: delivers notifications and Live Activity updates to your Apple devices.
• Firebase Cloud Messaging (Google): delivers your gym's notices to Android phones, and nothing else. Receives your phone's notification token and the notice's title and text. We don't use Firebase Analytics or any other Firebase service.
• Google ML Kit: reads a TV's pairing code on an Android phone. It never receives the camera image, but sends Google figures on how the scanner performs: the phone model and Android version, the app's version, and an identifier for the app's install that isn't tied to you.
• Sentry: crash and error reports from the iPhone and Android apps and our servers. Set up not to send personal information such as your name or email, and never screenshots of the app.
• Anthropic: reads the text of a written workout (for example “5 rounds for time: 400 m run, 15 squats”) so the app can run it, and checks each new profile photo is suitable before anyone else sees it. Only the workout text or the photo is sent, with nothing that identifies you.
• Cloudflare: carries traffic to our websites and servers.
• Google Analytics: measures visits to this website, www.crossadapt.app, and not the apps or the web app. Google receives the pages you visit, the site that sent you, your browser and device, and your IP address, from which it works out roughly where you are. Google uses this as described in How Google uses information from sites that use its services.

If you connect your Beyond the Whiteboard or SugarWOD account, the iPhone app signs in to that service directly and sends a result there only when you choose to submit it. Your password for those services is not stored; the sign-in token stays in your iPhone's keychain. Disconnecting removes it. What those services do with your results is covered by their own privacy policies. The Android app doesn't connect to these services.

We may also disclose information if the law requires it, or to protect the safety of our users or the service. If Always Varied, LLC were sold or merged, this policy would continue to apply to your data.

Where it is kept, and for how long

Your data is stored on servers in the United States. We keep it while you have an account. When you delete your account we delete your profile, results and account details, except records we must keep by law, such as payment records, and records your gym keeps of its own members under its own policies. Backups are overwritten on their normal cycle.

Your choices and rights

• See and correct: most of your data is in the app, where you can edit or delete individual results.
• Delete your account: Profile › Delete account in the iPhone or Android app or on the web, or email privacy@crossadapt.app from the address on your account. Deleting in the app removes your account and the data described above straight away; by email, we'll do it within 30 days and confirm when it's done. If you're the only owner of a gym, make someone else an owner first, or email us to close the gym.
• Get a copy: email us for a copy of your data.
• Stop sharing: turn Apple Health or Health Connect permissions, notifications, “Show me on the leaderboard”, “Share my workout live”, “Share my milestones” and “Let members high-five my results” on or off in the app, in iOS Settings or in Android's settings at any time. Remove your photo or username in Profile.
• Report and block: report a photo, a username or a person, or block someone, from the whiteboard or Highlights. Reports are answered within a day. To reach us about anything else, email support@crossadapt.app.

Depending on where you live, you may have further rights to access, correct, delete or move your data, or to object to how it is used. Email us to use any of them; we won't treat you differently for doing so.

Cookies

This site uses Google Analytics to count visits and see which pages are read. Google Analytics sets its own cookies, which hold a random identifier so a returning visitor can be told from a new one. You can block them in your browser's settings, or with Google's opt-out browser add-on. Apart from those, the site's sign-up forms use one cookie that protects against forged submissions. The web app uses cookies to keep you signed in, and to keep a paired gym TV signed in to its screen; it doesn't use Google Analytics. Signing in through Clerk sets Clerk's own cookies.

Children

CrossAdapt is not meant for children under 13, and we don't knowingly collect their data. If you think a child under 13 has given us information, email us and we'll delete it.

Security

Data travels encrypted between the apps and our servers, access is limited to the people who need it, and sign-in is handled by a dedicated provider. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you.

Changes

If we change this policy, we'll update it here and change the date at the top. If a change matters to how your data is used, we'll tell you in the app or by email before it takes effect.

Contact

Always Varied, LLC · privacy@crossadapt.app