Our privacy policy

When a gym becomes a customer, MaverStudio reads data from the systems that gym connects: members and contacts, memberships, plans and their prices, class schedules, check-ins, appointments, ad campaign structure, spend and performance, form submissions and calls.

If the gym uses the Workspace, it also holds the text messages, call recordings and call transcripts its team creates.

On the gym's own website, and on landing pages we host for it, the product records the ad click or source that brought a visitor, the form they sent, and page views by page and by where the visit came from. Query strings are never stored, and a page view names a browser, never a person. Landing page forms also store proof of text-message consent: the exact sentence shown, the time, the IP address and the browser.

That data belongs to the gym. We process it to provide the product to them and for nothing else.

MaverStudio's iPhone app is for the teams of the gyms that use the Workspace. It opens the same product as app.maverstudio.com, signed in with the same account the gym gave you, and collects nothing the website does not, apart from what follows.

Microphone. The app uses the microphone only for the calls you place or take in it. Every Workspace call is recorded, and the call screen shows Recorded while a call is in progress. See call recordings.

Camera and photos. The app uses the camera or your photos only when you take or choose one: your profile photo, or a photo you attach to a message. Your profile photo is stored with your account and shown to your teammates. A photo you attach to a message is stored with the gym's messages and sent to the contact.

Notifications. If you allow them, Apple gives the app a token for your phone, and we store it with your account to send the alerts chosen on the app's Notifications screen, such as a new lead, a missed call or a reply. An alert can name the lead or member it is about. A booked trial can also show on your lock screen as a Live Activity, and its token is stored beside the first. For incoming calls your phone registers a separate token with Twilio, which uses it to ring the phone; that one never reaches us.

Signing out of the app turns that phone's alerts off and stops calls ringing it.

Every call to or from the gym's Workspace numbers is recorded from the moment it is answered, whether it is answered in the app, in a browser or on a phone the number forwards to, and so is a voicemail left for the gym. The recordings are stored in the gym's own Twilio account. Anyone on the gym's team who can open the Workspace of the location a call belongs to can play it.

MaverStudio deletes no recording: recordings are kept while the gym's account exists, unless the gym deletes them in its Twilio account. Our server keeps a temporary copy of recent recordings so they play back smoothly, and removes the oldest copies as new ones arrive.

Where the gym switches it on, calls are also transcribed, and the transcript and a written summary are stored with the call.

If a gym gave you an account, you can delete it yourself. In the iPhone app, tap your picture at the top left to open Account, then Delete account. On the website, open the menu under your name at the top right, then Delete account. You type DELETE to confirm.

Deleting it signs you out everywhere, makes your sign-in unusable and frees your email address. It deletes your profile photo, your phones' notification tokens, your notification choices and personal settings, your do-not-disturb, and the cell number your calls from a phone would ring. The record of when you were online stays, without the address, device or place each change came from.

What you did for the gym stays in its records under your name: the calls you handled, the notes and messages you wrote, the cards you moved and your tasks. The gym's owner sees your account as inactive.

Someone helping you in a support session cannot delete the account they are viewing. If you are the only owner of your gym's account, make another teammate an owner first, or write to [email protected] to close the account.

Each customer's data is held in its own tenant and is never pooled with another customer's, for reporting, for benchmarking, or for training anything. Inside a customer's account, each location's Workspace data stays with that location.

Credentials for connected providers are encrypted at rest and are never displayed back to anyone, including our own operators.

More detail is on our security page.

We do not sell personal data. We do not give identifiable data from one customer's account to another customer, and we do not use it to advertise for another customer.

We do not upload a customer's contact lists or identifiable offline conversion data to an ad platform unless that customer approves it separately and confirms the required privacy notice and opt-out process are in place.

This website sets no cookies.

The product at app.maverstudio.com sets a session cookie that keeps a signed-in user signed in, and small preference cookies, such as whether the side menu is collapsed and which location the Workspace last showed. Inside the iPhone app it also sets one that marks the page as the app's, and one that holds the phone's notification token so that signing out can turn that phone's alerts off.

The tracking snippet a customer installs on its own website sets two first-party cookies on that customer's domain. They hold where a visitor first and last came from, so a form sent days later can still be joined to the ad click.

Landing pages we host for a customer use those two cookies too, and a sealed cookie that lasts five minutes and keeps what a visitor typed when a form asks them to correct something. They can also run that customer's own Google Ads tag and Meta pixel, which set their own cookies, under Google's and Meta's terms, for that customer's advertising.

None of these cookies is used for MaverStudio's own advertising or analytics.

• The infrastructure that runs the product: our server, and Cloudflare, which carries traffic to it and stores our off-site backups.
• An email delivery service, which sends the product's account emails and new-lead alerts, and tells us when an enquiry arrives.
• The providers a customer chooses to connect: for example PushPress, Mindbody, GoHighLevel, Google Ads, Meta and Twilio. Twilio carries the customer's calls and texts, keeps their recordings, rings the iPhone app for incoming calls, and transcribes calls where the customer switches it on.
• Apple, which delivers the iPhone app's notifications and the trial card on the lock screen.
• An AI provider the customer connects, Anthropic unless it picks another, which writes the summaries and suggestions the product offers, such as a transcribed call's summary.
• Stripe, which takes our customers' payments for MaverStudio.

We do not add third-party services to the product without telling customers.

Write to [email protected] and say what you want removed. If you sent us an enquiry and would rather we did not keep it, that is a one-line email and we will delete it.

If you are a gym's lead or member, the gym holds your data and decides what happens to it. Ask the gym first; we will help them act on your request.

If a gym gave you an account, you can delete it yourself. See deleting your account.

When what we collect or how we use it changes, this page changes with it, and the date at the top moves.

Questions about privacy, the iPhone app or your account: [email protected].