Last updated: 8 October 2026

Your time outside.
Your privacy.

Outdoor Gym Map collects the information needed to operate a moderated community directory. This policy describes the implementation. Hosting region, operator details and final retention settings must be confirmed before public testing.

Browsing and location

You can browse without an account. Location permission is requested when you tap Near me. Your location is used on your device to position the map and calculate distances. The directory receives a visible map area, and an optional location to sort nearby gyms, without keeping a location history. MapTiler receives map tile and place-search requests, your search terms and the network information needed to serve them. Place search is available without location permission.

Contributions and accounts

Your first contribution creates a guest authentication identity in Supabase. We store its identifier, a public display name, terms acceptance and your submissions. Optional Google or Apple sign-in supplies an account identifier and may supply an email address. Account information stays in the protected authentication service and is separate from public profiles. App sessions are stored in secure device storage. Website sessions use browser storage. Apple revocation tokens are encrypted on the server for account deletion.

Photos, reviews and reports

Approved photos, reviews and gym information are public. Pending photos and submissions are private to their contributor and authorised moderators. Photos are resized and re-encoded before storage, discarding embedded GPS and other image metadata. Do not include people or personal details without permission. Reports and block lists are private. Drafts are saved locally and are removed after submission or in-app account deletion.

Service providers and security

Supabase stores the directory, authentication records and photos. MapTiler provides maps and place search. Cloudflare Pages hosts the website. Supabase Edge Functions handle protected operations. Google or Apple handles optional sign-in. Network services may retain operational logs. We use account identifiers for proportionate submission limits. We do not include advertising, analytics SDKs, background location tracking, payments or messaging.

Retention and your choices

Account data and submitted content remain until deletion or moderation removal. Rate-limit counters expire after their stated window and are eligible for daily cleanup. Rejected photo files are removed when moderated. Static outdoor gym pages update through batched rebuilds; urgent removals are queued separately. You can delete your account, reviews, photos and submissions in the app. Community gym listings you created are also removed. Non-personal imported directory facts may remain. Storage cleanup must finish before the authentication account is removed, so a failed request can be retried.