Privacy Policy

We collect the information you provide when you join — names, dates of birth, email, phone, address or postal code, emergency contact details, and member photos — to operate your membership, issue membership cards, process payments, and manage facility access.

How we use your information

Your information is used to administer memberships, check-ins, reservations, and payments, and to contact you about your membership. We do not sell your personal information.

Children’s information

Information about minors is provided by their parent or legal guardian, who consents to its collection for membership purposes. We limit the data we keep about minors to what is needed to administer the family membership.

Payments & service providers

Payments are processed by Stripe; we do not store full card numbers. Our service providers include hosting (Vercel and Supabase), email (Resend), payments (Stripe), error monitoring (Sentry), and usage analytics (Vercel Analytics).

Identity verification and security

Adult members may upload a government ID for staff to verify their identity. ID images are private and accessible only to authorized staff. The verification window lasts 48 hours from upload; expired images are queued for deletion by an hourly cleanup job. We keep the verification result without the image. Member photos are delivered only to an authorized account or someone holding a signed membership-card link. Treat card links as private access credentials.

We record sign-in security events, device/browser information and network information to detect abuse. Security logs are kept for 90 days. We mask sensitive fields in error monitoring and do not include government ID images in analytics.

Retention

Member and operational records are retained to administer your membership. Unclaimed join photos become eligible for cleanup after 72 hours. Payment, waiver and verification records may remain when needed for accounting, disputes or other recordkeeping obligations. Backup copies may persist until the relevant backup retention period ends.

Your choices

You may request access to or deletion of your information by emailing info@heightspool.com, subject to records we must retain for legal or accounting reasons.