COPPA Direct Notice
Last updated: May 3, 2026
This is the direct notice required by 16 CFR § 312.4 of the Children’s Online Privacy Protection Act (COPPA). It explains what we collect from children under 13, why, and how a parent or legal guardian can exercise their rights.
1. Who operates this service
GymText is operated by GymText LLC. Our address and contact information are at the bottom of this notice.
2. Information we collect from a child under 13
A parent or legal guardian enrolls the child; GymText does not collect personal information from the child directly. From the child, the parent provides only:
- First name — used to address the child in messages.
- Date of birth — used to apply age-band protections and confirm the program is age-appropriate.
We do not collect any of the following from the child: phone number, email address, postal address, photos, video, audio, geolocation, persistent identifiers, social media handles, or behavioral profile information. Daily coaching messages are addressed to the child but delivered to the parent’s phone, not the child’s.
3. Information we collect from the parent
From the parent, we collect: name, email address, mobile phone number, date of birth, payment information (handled by Stripe; we do not store full card numbers), and a timestamped record of consent. The parent is the account holder.
4. How we use the information
We use the information collected only to:
- Send daily coaching messages to the parent’s phone, addressed to the child;
- Process the parent’s subscription payment (paid programs);
- Apply the right age-band protections to the child’s account;
- Honor parental requests to review, delete, or stop collecting the child’s information; and
- Comply with legal obligations, including COPPA.
We do not use a child’s information for advertising, marketing, or behavioral profiling, and we do not share it with third parties for those purposes.
5. Verifiable parental consent (VPC)
We use one of two FTC-approved methods to obtain verifiable parental consent before collecting any personal information from a child under 13:
- Monetary transaction (16 CFR § 312.5(b)(2)(ii)) for paid programs — the parent’s Stripe payment serves as the consent record. We capture the Stripe checkout session, subscription, customer, and invoice IDs alongside the timestamp the first invoice was paid.
- Parent email link (16 CFR § 312.5(b)(2)(iv)) for the teen flow at ages 13–17 — we send a signed link to the parent’s email; the click is the consent action and is timestamped along with the click’s IP address and user agent.
Free programs are not available for athletes under 13, so a Stripe payment is always present in the under-13 path.
6. How long we keep the information
We retain account records (name, contact, consent receipt) for the life of the enrollment plus a reasonable audit period after cancellation. Daily message records for any user under 18 are deleted automatically once they are 12 months old. Parents may request earlier deletion at any time.
7. Parental rights
A parent or legal guardian may at any time:
- Review the personal information we have collected from their child;
- Refuse further collection (which will end the child’s enrollment);
- Request deletion of the child’s account and associated information; and
- Receive a copy of the consent record on file.
Email admin@gymtext.co and we will respond within 14 days. Deletion is completed within 30 days of request, or sooner where required by law.
8. Aging up
When a child reaches their 13th birthday, we email the parent a claim link the child can use to set up their own GymText account. The child’s information remains under the parent until the claim is completed. When a teen reaches 18, parental consent is automatically revoked and the user owns their own account under our standard Terms of Service.
9. Sharing with third parties
We share information with the service providers strictly necessary to operate the service: Twilio (SMS delivery), Stripe (payment processing and consent record for paid programs), Resend (transactional email delivery for parent-approval and consent receipts), and our hosting and infrastructure providers. None of these providers uses children’s information for their own marketing.
10. Contact
GymText LLC
Email: admin@gymtext.co (parents and COPPA matters)
Email: support@gymtext.co (general support)
A postal address will be provided upon request to a parent.
See also our Privacy Policy and Terms of Service.