Privacy policy

Last updated: March 28, 2026

This policy describes how Arfen Fitness (“we”, “us”) collects, uses, and shares information when you use either of our mobile applications below (each an “App”).

Apps covered

• Black Iron: Gym and Fitness on Google Play — package com.arfenfitness.mobile
• Cross Fitness on Google Play — package com.theblackiron.app

The same practices generally apply to both Apps; your gym’s configuration may affect which features and data types are used.

Who we are

The Apps are published by Arfen Fitness. Store titles and package names are listed above so you can match this policy to the app you installed.

Information we may collect

• Account and profile: Name, phone number, email (where applicable), gym affiliation, membership or role (e.g. member, staff).
• App usage: Data needed to operate features you use (e.g. attendance, payments, diet or training features if enabled by your gym).
• Content you provide: Photos or documents you upload where an App allows it.
• Device and technical data: Device type, OS version, and similar diagnostics as needed for security and reliability.

Exactly what is collected depends on your role, which App you use, and how your gym configures the service.

How we use information

• To provide, maintain, and secure the Apps and gym-related services.
• To communicate about your account or support requests.
• To comply with law and protect rights and safety.

Sharing

We may share information with service providers who assist us (e.g. hosting, analytics, notifications) under appropriate contracts. We may disclose information if required by law or to protect users and the service. Your gym may access member and operational data related to their business use of the Apps.

Retention

We retain information as long as needed to provide the service and for legitimate business and legal purposes. You may request deletion as described on our account & data deletion page (please name which App you use).

Security

We use reasonable technical and organizational measures designed to protect personal information.

Children

The Apps are not directed at children under 13 (or the minimum age in your region). Do not provide children’s data unless permitted by law and, where required, parental consent.

Your rights

Depending on where you live, you may have rights to access, correct, or delete personal data, or to object to certain processing. Contact us using the email on the account & data deletion page and state which App applies. We will respond in line with applicable law.

Changes

We may update this policy from time to time. We will post the updated version on this page and adjust the “Last updated” date.

Contact