Privacy, in plain language.

The Giant Brands Patch Program member apps

Effective 16 September 2026. The Patch Program apps are operated by Giant Brands LLC. Privacy contact: travis.mccormick@giantbrands.com. Accounts are for users aged 13 and older.

What these apps do

The Patch Program apps connect members with their participating gyms to track attendance, follow patch requirements, request coach sign-offs and arrange physical patch pickup. Each branded app has separate accounts and gym access.

Account and gym information

We process your name, account email, sign-in identity, gym and coach assignment, and account and membership identifiers. Staff can optionally enter a phone number. Passwords are stored as hashes, not readable passwords. Apple sign-in can use Apple’s private relay email.

When your membership is linked, we process ClubReady membership identifiers and recorded attendance to calculate progression. The app does not collect your gym’s billing card details or ClubReady password.

Progress and messages

We store class attendance, patch enrollments, progress, earned badges, belt history, sign-off requests, member messages, staff notes and pickup records. Authorized gym staff can review the gym information needed to help members, approve skills and manage pickup. Program administrators manage the program and documented corrections.

Camera and notifications

The camera reads connection QR codes on your device. The app does not upload camera photos or record microphone audio. Camera access is optional; staff can also enter the manual connection code.

If you allow notifications, device notification tokens are associated with your account to deliver patch and request updates. You can change notification permission in your phone’s settings.

Crash diagnostics

We use Sentry to diagnose crashes and app hangs. Reports include technical details such as app version, device and operating-system information, error stacks and limited action context. An anonymous installation identifier may be included. We do not attach your app account, name, email or message text to these reports.

Session replay, screenshots, view hierarchies, advertising tracking, performance tracing and Sentry logs are disabled. Reports are filtered to remove account details and credentials; server-side scrubbing removes IP addresses and location fields from retained diagnostic events.

Service providers

Vercel hosts the service, Neon stores application data, Resend delivers account email, and Expo and the phone platform deliver notifications. Sentry processes diagnostics. ClubReady supplies membership and attendance data for connected gyms. These providers process the data needed to perform their functions.

The app has no advertising, data-sale feature, cross-app tracking, location collection or HealthKit integration. Information is transmitted using encrypted HTTPS connections.

Retention and deletion

Account information remains while the account is active. The in-app deletion process revokes sessions; removes password credentials, notification tokens, verification records and member request notes; and anonymizes profile, email identity, optional phone and staff-directory information.

Progression, award and audit records remain for gym history. Invitation records and some historical free text may also remain. Diagnostic events are retained by Sentry for its standard rolling window, and service backups age out on our providers’ standard schedules. We do not promise a fixed deletion deadline or complete erasure of all gym records; contact support to request review of historical records that contain your personal information.

Delete your account or request deletion. Your gym membership and billing remain subject to your gym’s separate terms and are not canceled by deleting the app account.

Youth accounts

These apps are for users aged 13 and older. Children under 13 may not create an account. Creating an account requires confirming you are 13 or older, and the service refuses to create an account without that confirmation — for email registration and for Apple and Google sign-in alike. Age is self-attested; we do not collect a birth date or verify identity documents.

Accounts the operator provisions directly (staff and review access) are attested by the operator when they are created. Accounts created before 6 September 2026 were attested by the operator under the same policy. If you believe a child under 13 has provided personal information, contact app support so we can investigate and handle the account and associated information.

Questions and requests

Use the support page to request help with account access, correction or deletion. Privacy requests may require verification of account ownership.