Privacy · OpSystem

Privacy

What OpSystem collects, and what it does with it.

[ 01 / 02 ]

Status

This document is in preparation.

The plain-language summary below describes exactly what the site collects today and what happens to it. It is being written with counsel before OPS opens to the public, and it will replace this page in full — nothing here should be read as the finished document.

Questions in the meantime go to hello@opsystem.org.

[ 02 / 02 ]

What the site does today

What you give us on purpose

When you message a trainer: your name, your email address, your message, and which trainer you sent it to. It is emailed to that trainer and stored so we know the introduction happened. You do not need an account for this, and never will.
If you answer the two optional questions on the confirmation screen: how many days you were active last week and how many gym visits you typically make. They are linked to that message. You can send a trainer a message and skip them entirely.
When a trainer applies to be listed: their name, email, Instagram handle, gym, specialty and message.
When you list an activity: the details of the event or club, plus your own email address — which is where the manage link goes and is never shown on the listing.
If you create an account: your email address, the name you give us, and a phone number if you choose to add one.
Anything you save or write in your account: which trainers are on your shortlist, and the notes you write about them. The notes are private — no trainer sees them, and they are not used for anything else.
Which trainer profiles you have opened, if you are signed in, so your account can show you a Recently viewed row.

What the site records on its own

Which listings get viewed and clicked, and which links out get followed. These records name the listing, not you — there is no profile, and nothing tying one page view to the next.
Whether an email we tried to send actually sent, so a lead can't quietly go missing.
If you are signed in, one cookie holding a random identifier for your account — nothing else. It is what keeps you signed in, it is not readable by scripts, and it is not shared with anyone.

What it doesn't do

No passwords, ever. Signing in means we email you a six-digit code — there is nothing to remember and nothing for us to lose.
You do not need an account to use OpSystem. Browsing, searching, and messaging a trainer all work without one; an account exists so you can save trainers and keep notes.
No tracking cookies, no advertising cookies, and no third-party scripts of any kind — the site loads nothing from anyone else. The only cookie is the sign-in one described above, and only if you sign in.
No advertising networks, and nothing here is sold or shared for marketing.
No health records. OPS is not a healthcare provider and asks for nothing clinical.

Where it lives

In a private Postgres database that only OpSystem's servers can reach. Nothing in your browser talks to it directly.
Email delivery runs through Resend, which handles the message on its way to the trainer.
Your account is yours to take or to end: Settings has a download of everything we hold about you, and a delete that really deletes it.
Deleting your account removes your details, your shortlist and your notes. It does not un-send a message you already sent a trainer — that arrived in their own inbox. Write to us and we will remove our record of it too.
Want anything else removed? Write to us and we will delete it.

This is a description of how the site currently works, kept accurate as it changes. See also About.