Privacy policy

Signing in

We securely pass your email and password through our server to your gym, then discard them. We don’t save or log them. Your gym gives us sign-in tokens: permission to show your account and make the bookings, cancellations and seat changes you request.

What stays on your device

Remember me saves your sign-in and basic account details on this device. Without it, your session is temporary, although browsers may restore it. The mobile app uses secure storage and asks you to sign in again within 30 days; browser sign-in lasts as long as your gym allows. Preferences and favourites stay until you clear the app’s data. Avoid Remember me on shared devices.

Bookings and seat changes

We load bookings when needed, without keeping a booking history. To safely make changes, we temporarily save booking details, including your original and requested seats. We delete recovery records once the result is confirmed; unresolved records stay until reviewed, even after sign-out. These records can be linked to your account. Completed mobile requests may keep a copy of your bookings for 24 hours so a lost connection won’t cause duplicate changes.

Faster browsing

We save public timetables for up to 48 hours, room layouts for up to 30 days and space counts for up to five minutes. Booking changes get a fresh check. App files stay on your device until updated or cleared. Your search terms stay on your device; personal booking lists stay in memory while the app is open.

Reminders and calendars

Optional class reminders stay on your phone. We don’t upload reminder settings or use a push notification provider. Turning reminders off or signing out removes pending alerts. Calendar exports go only where you choose to save or share them; those copies are yours to manage.

Optional calendar invitations

When enabled, invitations update when you use MyLocker and it checks your bookings. We keep your sign-in email as an encrypted invitation destination, your preference and consent date, and records of managed invitations. This mode does not save gym passwords or sign-in tokens on our server. We do not read your personal or work calendar.

Google sends invitations from our organizer account. Personal invitations contain class details. Additional calendar addresses do not require a verification code. You choose Busy blocks or full class details for each address, with optional before/after buffers. Busy blocks omit class details; MyLocker remains visible as the sender. We store these addresses and preferences encrypted. Google and your calendar or email provider process these messages under their own policies, potentially outside Singapore. Verification codes, when enabled, expire after 10 minutes.

Background booking checks are separately controlled and require an additional gym sign-in and consent. When available and enabled, that mode saves encrypted gym tokens, never your password. Signing out stops foreground checks; already queued invitation delivery can finish. Separately enabled background checks continue until turned off.

Turning invitations off removes any background gym token and queues cancellations for future invitations. Additional calendar addresses and preferences stay saved so you can turn invitations on again; remove an address in Settings to stop using it. Delivery records are retained while cleanup is pending and to preserve started events. Your encrypted sign-in email remains available for a later opt-in and is removed on account data deletion. Started events and calendar-file copies stay in your calendar. Delivery failures may delay cleanup; backups follow our retention policy below.

Helping improve MyLocker

On the website, PostHog helps us understand usage and fix errors. We count visits and actions such as bookings, without sending names, account or booking details, searches or screen recordings. A random identifier links actions within a visit, not to your membership. Analytics are on by default; turning them off won’t affect booking. We don’t sell your information or use it for advertising or marketing profiles.

App feedback

Sending feedback is optional. We save the message you choose to send, when it arrived and whether we have read it, to investigate app problems and improve MyLocker. We don’t ask for contact details or attach your gym account, membership information or app diagnostics. Please don’t include personal or membership details; contact your gym directly about membership or gym enquiries. We can’t reply to individual submissions.

Feedback is available only to the MyLocker operator and expires from our live store after 90 days. Private backups may retain copies longer under the schedule below. An operator alert may announce new feedback without including your message. Sending feedback doesn’t create an analytics event, and your message is never added to analytics. To limit abuse, we keep separate short-lived counters based on a rotating hash of the connection address for up to ten minutes; they are not attached to feedback or used to count users.

Where analytics go and how long they stay

PostHog processes analytics in the US. We disable location tracking and discard recorded IP addresses, though connections still involve your IP. Its plan lists seven years of retention but does not enforce automatic deletion. Opting out stops new collection, not earlier records. Older versions may have sent account IDs and names. See PostHog’s privacy policy.

Hosting and backups

Expo delivers mobile app updates. It receives connection and app-version information to send the right files, not your sign-in or bookings. The mobile app also uses Expo Observe for startup performance, update reliability and crash diagnostics. Reports include app build and update identifiers, installation/session identifiers, and device and operating-system information. We don’t attach your membership identity, booking details or navigation history. JavaScript error messages are replaced with fixed categories before reporting; native crash reports contain system diagnostic information. Providers may retain connection logs and process diagnostics outside Singapore. See Expo’s privacy policy.

Vercel runs our app servers in Singapore. Our storage service holds temporary data and recovery records. Providers may process information elsewhere and keep security logs, including IP addresses. Private recovery backups rotate through seven daily, four weekly and six monthly copies, so deleted records may remain there. See Vercel’s privacy policy. Your gym manages membership records under its own policies.

Your choices

Signing out clears this device’s sign-in, not other devices or gym bookings. Clearing app or browser data removes preferences too and resets website analytics to on. Contact us to request access, corrections or deletion; we may need to verify you or retain records for unresolved bookings or legal reasons. Limited analytics identifiers can make older events hard to locate. We’ll publish policy changes here with an updated date.

Contact

For MyLocker support, privacy questions or requests about your data, contact support@cutler.sg. Please do not include passwords or session tokens.