Privacy Policy

Brooklyn Uprising LLC ("BK UP," "we," "us," or "our") operates the BK UP mobile application and websites at bkup.nyc, www.bkup.nyc, and app.bkup.nyc. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services.

Information We Collect

Account Information

When you create a member account, we collect:

• Name (first and last)
• Email address
• Phone number (optional)
• Profile photo (optional)
• Emergency contact information

Payment Information

Payment processing is handled by Stripe, Inc. We do not store your full credit card number or bank account details on our servers. Stripe collects and processes your payment information in accordance with their Privacy Policy. We retain records of your transactions (amounts, dates, and descriptions) for your account history.

Usage Information

We automatically collect:

• Gym visit history (check-in dates and times)
• Membership status and history
• Pass purchases and usage
• Event RSVPs and attendance
• Waiver signatures and dates

Website, Cookie, and Advertising Information

When you visit our public marketing pages, we may collect information about how you arrived at and used the site, including page views, referring pages, campaign parameters, advertising click identifiers, browser and device information, and approximate location derived from your IP address. We and our analytics and advertising providers may use cookies or similar technologies to recognize a browser, measure site performance, understand which campaigns lead to signups or purchases, and limit duplicate conversion reporting. We do not send your email address through our browser analytics events.

Newsletter Information

If you subscribe to updates, we collect your email address, any optional profile information you provide, the signup source, and a record of your consent. Newsletter subscriptions use a confirmation step, and every marketing email includes an unsubscribe method.

Connected Instagram Information

If you connect an Instagram Professional account to BK UP staff tools, we collect the connected account identifier, username, account type, authorization status, webhook events, direct message conversations, comments, private reply status, and automation activity needed to operate the Instagram inbox, comment automations, and lead capture features.

How We Use Your Information

• To manage your gym membership and account
• To process payments for memberships, passes, and other services
• To facilitate gym check-ins via QR code
• To send transactional emails (login codes, receipts, membership updates)
• To manage event RSVPs and send event-related communications
• To maintain waiver records as required for gym operations
• To provide customer support
• To send requested newsletters and marketing communications and manage subscription preferences
• To analyze public website usage and measure the effectiveness of our advertising
• To operate staff-managed Instagram inbox, comment automation, and lead capture workflows for connected Instagram Professional accounts

Third-Party Services

We use the following third-party services that may process your data:

• Stripe — payment processing
• Resend — transactional email delivery
• Sentry — error monitoring and application performance (collects anonymized usage data)
• Amazon S3 — profile photo storage
• Google Analytics and Google Tag Manager — to measure public marketing-site usage, traffic sources, campaign performance, and completed online purchases. Server-side purchase measurement may include a pseudonymous browser identifier, an internal account identifier, and transaction details, but not your email address, name, or phone number.
• Meta (Facebook / Instagram) — to connect Instagram Professional accounts, receive Instagram comments and messages, send staff replies and private replies, and measure the effectiveness of our advertising. Public marketing pages may use the Meta Pixel through Google Tag Manager. For server-side advertising conversion events, we may send a SHA256 hash of your email, name, and phone number, together with the event type and an internal identifier; the original contact values are not transmitted in those fields.

We do not sell your personal information to third parties.

Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal information within 30 days, except where we are required to retain certain records for legal or safety purposes (such as waiver records and financial transaction history).

Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure session management, and access controls. Payment data is handled exclusively by Stripe's PCI-compliant infrastructure.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Update or correct your information via your profile settings
• Request deletion of your account and personal data, including connected Instagram data
• Download your data upon request

Data deletion instructions are available at https://www.bkup.nyc/data-deletion.

Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children under 18 without parental consent.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Brooklyn Uprising LLC
Email: hi@brooklynuprising.com