Compa
Privacy Policy
Last updated: July 16, 2026
This Privacy Policy explains what information Compa collects, how we use it,
and the choices and rights you have. Compa (“we,” “us,” or
“our”) is the app for finding workout partners and gym friends, with dating as an
opt-in. The Service is operated by Compa Labs LLC. By using
Compa, you agree to this Policy and to our Terms of Service.
The short version: We collect the profile details you give us and the content
you create, so we can help you find workout partners. We don’t sell your
data, we don’t run third-party ad networks, and we don’t track you across
other apps. You can delete everything anytime in Menu → Delete my
account.
1. Information we collect
Information you give us
- Account & sign-in. When you sign in with Apple or Google, we receive
a basic identifier and your name, and — depending on the provider and your choices — an
email address (with Sign in with Apple you may choose Apple’s private relay email).
- Profile. The details you add: your first name, date of birth (used to
confirm you are 18+ and to show your age), gender, the city you’re in, your gym or
training location, photos, a short bio, your interests, workout style and experience level,
and the times you like to train.
- What you’re here for. Whether you’re looking for workout
partners, friends, and/or dating, and who you’d like to see.
- Sensitive information. Some of what you choose to share may be considered
sensitive — in particular, your dating preferences (your “here for” choices
combined with who you want to see) can indicate sexual orientation, and any Apple Health data
you connect is health information. We use it only to operate the app’s matching and
profile features — we never sell it or use it for advertising — and you can remove
it by editing your profile, disconnecting Apple Health, or deleting your account.
- Content you create. Messages you send to matches, and any journal entries
or “Moments” you post.
- Support & reports. If you contact us or report or block another user,
we keep the information you provide.
Information we collect automatically
- Usage & device data. Basic technical information such as device type,
operating-system version, app version, and app activity needed to run the Service and keep
it reliable and secure.
- Location. With your permission, Compa uses your device’s location to
set your city when you create or update your profile. Your city is shown on your profile and
used to surface relevant people; the underlying coordinates are stored to support
distance-based features but are not shown to other users. Location is
requested only while you are using the app (foreground), never in the background.
- Push token. If you enable notifications, we store a push token so we can
send you alerts (for example, a new connection or message).
- Crash & diagnostic data. If the app crashes or hits an error, we collect
a technical diagnostic report — device model, operating-system and app version, and the
error’s stack trace — through our provider Sentry, so we can find and fix bugs. We
strip personal content (such as message text, profile details, and identifiers) from these
reports before they are sent, and they are never used for advertising.
- Usage & analytics data. We collect a small set of anonymous,
content-free events through our provider PostHog — for example, that a sign-up step was
completed, or that a connect, match, or message happened — so we can see where people get
stuck and improve the app. These events are not tied to your identity (no name,
email, or account ID), never include your messages or profile content, and are
never used for advertising.
Optional: Apple Health
If — and only if — you choose to connect Apple Health, we read a limited set of activity data
(such as recent workouts and active energy) to display your workout stats on your profile. This
is off by default, you control it, and you can disconnect it at any time in your device settings
or in Compa. We do not receive Apple Health data unless you grant permission.
2. How we use your information
We use your information to:
- Create and manage your account and profile.
- Show you relevant people and show your profile to others, based on what you’re here
for.
- Enable connections and deliver messages between matched users.
- Send notifications you’ve enabled.
- Keep Compa safe — detect and prevent fraud, spam, abuse, and violations of our
Terms; review reports; and enforce our rules.
- Provide support and respond to your requests.
- Understand how the app is used so we can fix problems and improve it.
- Comply with law and enforce our agreements.
We rely on your consent for optional data such as Apple Health and push notifications, and
otherwise on our legitimate interest in operating a safe, working service and on meeting our
legal obligations. Where a legal basis is required (see Section 9), these are the bases we
rely on.
3. What we do not do
- We do not sell your personal information, and we do not “share”
it for cross-context behavioral advertising (as those terms are defined under California
law).
- We do not run third-party advertising networks inside Compa.
- We do not track you across other companies’ apps and websites.
- We do not use your private messages, photos, or profile content to train
third-party AI or machine-learning models.
4. How your information is shared
We share information only in these limited ways:
- With other users. Your profile (name, age, photos, bio, interests, and
similar details) is visible to other users as part of how Compa works. Messages are shared
with the user you send them to. Please only share what you’re comfortable being
seen.
- With service providers. We use the vetted providers listed in
Section 5 to host and run the Service. They may process your information only on our
instructions and to provide their service to us.
- For safety and legal reasons. We may disclose information if we believe
it’s reasonably necessary to comply with a law, regulation, legal process, or
governmental request; to enforce our Terms; or to protect the rights, property, or safety of
our users, the public, or Compa.
- In a business transfer. If Compa is involved in a merger, acquisition, or
sale of assets, information may be transferred as part of that deal, subject to this Policy.
5. Service providers (sub-processors)
We keep our provider list short and disclose it here:
If we add or change a significant provider, we will update this list. If you use
a provider we don’t control (for example, by tapping a link), their own privacy policy
applies.
6. Data retention & deletion
We keep your information for as long as your account is active and as needed to provide the
Service. When you delete your account, we delete your profile and content from the active
Service. Some information may remain for a limited time in encrypted backups (removed on a
routine cycle), or may be retained where we are required to keep it to comply with law, resolve
disputes, prevent abuse, or enforce our agreements. Messages you sent may remain visible to the
people you sent them to.
7. Your choices & rights
Delete your account — in the app. Open Compa and go to
Menu → Delete my account. This permanently deletes your account
and content as described in Section 6. You don’t need to email us to delete your
account.
- Edit your profile. You can review and update most profile details anytime
in the app.
- Notifications. You can turn push notifications on or off in your device
settings.
- Apple Health. You can connect or disconnect Apple Health at any time in
your device settings or in Compa.
- Access & other requests. To ask for a copy of your data, or for
correction, or to exercise a right described below, contact us at
[email protected]. We may need to verify your identity first.
8. California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know / access the categories and specific pieces of personal information
we have collected about you, the sources, the purposes, and the categories shared.
- Delete personal information we hold about you (subject to legal
exceptions).
- Correct inaccurate personal information.
- Opt out of the “sale” or “sharing” of personal
information — though, as noted in Section 3, we do not sell or share your
personal information, so there is nothing to opt out of.
- Limit use of sensitive personal information — we use such information only
to provide the Service and for the permitted purposes described here.
- Not be discriminated against for exercising your rights.
To exercise these rights, use Menu → Delete my account in the
app (for deletion) or contact us at [email protected]. You may use an
authorized agent. We will not discriminate against you for exercising your rights.
9. EEA/UK privacy rights (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the
right to access, correct, delete, restrict, or object to our processing of your personal data,
and the right to data portability and to withdraw consent where we rely on it. We process your
data based on: performing our contract with you (to provide the Service); your consent (for
optional features like Apple Health and push notifications); our legitimate interests (keeping
the Service safe and functional); and compliance with legal obligations.
To exercise these rights, contact us at [email protected]. You also
have the right to lodge a complaint with your local data-protection authority. For the purpose
of GDPR, the data controller is Compa Labs LLC.
10. Security
We use reasonable technical and organizational measures to protect your information,
including encryption in transit and access controls on our systems. No method of transmission or
storage is completely secure, so we cannot guarantee absolute security. Please help protect your
account by keeping your sign-in method and device secure.
11. Age requirement
Compa is only for people 18 and older. We do not knowingly collect personal
information from anyone under 18. If we learn that someone under 18 has created an account, we
will remove it. If you believe a minor is using Compa, contact us at
[email protected].
12. International data transfers
Compa is operated from the United States, and our providers may store and process your
information in the United States and other countries. Where we transfer personal data from the
EEA, UK, or Switzerland, we rely on appropriate safeguards (such as Standard Contractual
Clauses) where required. By using the Service, you understand your information may be processed
in countries whose data-protection laws may differ from those where you live.
13. Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will update
the “Last updated” date and, where appropriate, notify you in the app. Your continued
use of the Service after an update means you accept the revised Policy.
14. Contact us
Questions or requests about your privacy? Contact [email protected],
operated by Compa Labs LLC.
This Policy is written in plain language and in good faith to reflect how Compa
actually handles data. It is not legal advice. Because Compa involves user profiles, messaging,
and in-person meetups, you should have a lawyer or a compliance service review this Policy before
relying on it.