THE HAMMER

Privacy notice

Effective 14 September 2026

This notice explains how The Hammer handles information in its gym software, including the iPhone and iPad app and the connected website. The service is operated by The Hammer in Malé, Maldives. Contact [email protected] for privacy questions.

Information used by Hammer

• Account information: names, usernames, member or staff identifiers, phone numbers and other profile or contact details provided to the gym. Sign-in uses a password or an SMS verification code, depending on the account.
• Membership and activity: membership plans, expiry dates, attendance, fitness goals and workout records.
• Body composition: InBody results linked to your member profile, including measurements such as weight, muscle and body fat. The gym receives these from its InBody/LookinBody connection or authorised staff entry.
• Transactions and uploads: purchases, renewals, balances, payment details, payment slips and documents you submit. Staff and management can use records available to their assigned role.
• AI and messaging: questions you submit, the account summaries needed to answer them, and messages or workouts you choose to create or request.
• Technical information: sign-in sessions, request times, network information and operational records used to secure and troubleshoot the service.

How the information is used

Hammer uses these records to authenticate accounts, manage gym services and payments, show your activity and progress, answer requested questions, deliver requested messages, and maintain security and service reliability. Members see their own records. Authorised staff and management have access according to their role.

AI and service providers

When you ask Hammer AI, your question and a relevant account summary are sent to OpenAI. The member summary excludes names, phone numbers and uploaded documents. Avoid entering unnecessary personal information in a question. InBody measurements are included in a member AI question only when you select the separate InBody option. AI guidance can be mistaken and is not a medical diagnosis.

Hammer does not automatically save ordinary chat text in its chat interface. Requested text messages and generated workouts are saved for delivery and later viewing; usage and selected InBody-sharing attempts are recorded. OpenAI processes requests under its privacy policy and applicable service terms.

Hosting, SMS delivery and InBody/LookinBody services process information needed to provide their respective functions. This can involve processing outside the Maldives. No InBody API credential is included in the mobile app.

Cookies and website analytics

Hammer uses first-party session and security cookies to keep you signed in and protect requests. The public website uses Google Analytics to understand visits. That analytics script is excluded from the native app and from signed-in member, staff and owner pages. You can manage website cookies in your browser. The app does not request access to Apple Health, your address book or your device location.

Retention and your choices

Membership, payment, activity and fitness records are retained to operate your account and maintain the gym’s records. Technical records and backups may also contain account information. To request a copy, correction, account closure or deletion, email [email protected] or contact reception. We will verify your identity before changing or releasing account information. Some records may need to remain for accounting, security or other applicable obligations; we will explain any limits that apply to your request.

You can sign out of the app, choose whether to include InBody results in an AI question, and manage available text/workout preferences in your account. Removing the app from your device does not remove records held by the gym.

Updates

Changes to this notice will be published here with an updated effective date.