Privacy & data
Effective 8 August 2026.
This policy explains how we collect, use, share, and retain personal information when you use GymPass, at gym-pass.scorsync.com and in the GymPass mobile app, together with any related services or content (collectively, the “Service”).
GymPass is operated by Scorsync for USA Gymnastics Trampoline & Tumbling elite mobility qualification. It is used by coaches, intake coordinators, judges, the Elite Committee, and administrators. Your use of the Service is also governed by our Terms of service.
Athletes do not have accounts
This shapes everything below, so it comes first. Athletes do not sign in to GymPass, do not create accounts, and do not submit anything. Every account belongs to an adult acting in a role — a coach, an intake coordinator, a judge or coach reviewer, a state coordinator, the Elite Committee, or an administrator.
Information about an athlete reaches GymPass because the coach or club responsible for them entered it, on their behalf and with the authority to do so. We collect nothing directly from an athlete.
What we collect
Account information — your name, email address, phone number if you provide one, your USAG membership identifier, and your password, which is stored only as a hash and is never readable by us. If you turn on two-factor authentication we store the secret needed to verify your codes.
Athlete information — entered by coaches, not by athletes: name, date of birth, gender, USAG membership identifier, club, and competitive level per event. Athletes are frequently minors. This information is entered on their behalf by the coach or club responsible for them.
Routine submissions — the video files you upload, together with the original filename, format, size, duration, resolution, frame rate, codec, and the capture date recorded by the camera. We also keep qualification proofs and the scores, notes, and decisions that reviewers and the Elite Committee record against a submission.
Operational records — an audit log of significant actions taken in the system, so a qualification decision can be traced to the people who made it. If you enable notifications on a phone, we store a device token so the notification can be delivered.
What we do not collect. GymPass contains no advertising identifiers, no analytics or tracking software, and no third-party marketing tools. We do not track you across other apps or websites, we do not sell your information, and we do not share it with data brokers. There is no payment surface in GymPass, so we hold no card or bank details.
Cookies
GymPass sets only the cookies it needs to work: a session cookie that keeps you signed in as you move between pages, a cross-site request forgery token that protects forms you submit, and — if you choose “remember me” — a cookie that keeps you signed in between visits. Pre-release environments additionally set a cookie recording that the access passcode was entered.
There are no analytics cookies, no advertising cookies, and no third-party cookies. That is why GymPass shows you no cookie consent banner: there is no non-essential cookie to consent to. You can clear or block cookies in your browser, but the Service cannot keep you signed in without the session cookie.
How submission video is stored and who can view it
Video is stored in private cloud storage. It is not publicly addressable, and it is never served from a public link. Playback is granted through a signed link that expires after fifteen minutes, so a copied URL stops working shortly after it is issued.
A submission's video can be viewed by the coach who submitted it, the intake coordinator verifying it, the reviewers assigned to score it, and the Elite Committee and system administrators. Review is dual-blind: the two reviewers scoring a routine cannot see each other's scores or identity while the review is open.
Video is never published, never used for marketing or promotion, and never shown to anyone outside the people named above.
Who can see athlete information
Athlete information is visible to the coaching staff responsible for that athlete, to the intake coordinator and reviewers handling a submission the athlete appears in, and to the Elite Committee and administrators. It is not visible to other clubs, and it is not published.
Coaches see the status of their own submissions while a review is in progress, but not the scores or the identity of the reviewers. Reasons and reviewer detail are released when a decision is final.
How we use this information
We use it to run elite mobility qualification and nothing else: to operate the Service and keep your account secure; to carry a submission through intake verification, dual-blind review, and the Elite Committee's decision; to notify you about your own submissions and the work assigned to you; to keep the audit record behind a qualification decision; to answer your support requests; and to meet legal and regulatory obligations.
We do not profile you, we do not make automated decisions about you, and we do not use your information or an athlete's to train machine-learning models.
Who we share it with
USA Gymnastics and the Elite Committee. GymPass administers a USA Gymnastics process, so submissions, scores, and qualification decisions are shared with USA Gymnastics and the Elite Committee for that purpose. That is the point of the Service.
Service providers. Companies that run infrastructure on our behalf — hosting, cloud storage for video, email delivery, and push notification delivery. They may process your information only on our instructions and only to provide those services, never for their own purposes.
Legal compliance. We may disclose information where the law requires it, such as to comply with a subpoena or other legal process, or where we believe in good faith that disclosure is necessary to protect someone's safety, to investigate fraud, or to protect our rights. Where we are permitted to tell you first, we will.
Business transfers. If Scorsync is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy.
We do not sell personal information, and we do not share it for advertising.
Children’s privacy
GymPass is not directed to children and children do not use it. No one under 18 holds a GymPass account, and we do not knowingly collect personal information from a child directly.
We do hold information about children: athletes seeking elite mobility are frequently minors, and some are under 13. That information is provided by the adult coach or club responsible for the athlete, who is required by our Terms of service to have the authority of the athlete and, for a minor, of their parent or legal guardian before entering it. It is provided for one purpose — qualifying that athlete under USA Gymnastics’ rules — and it is used for nothing else.
A parent or legal guardian may ask what we hold about their athlete, ask us to correct it, or ask for it to be removed. Contact us using the details below, and start with the athlete's coach or club, who entered it and can act fastest. Removal is subject to the retention rules in the next section but one: a qualification decision already issued cannot be unmade, because other athletes were measured against it.
Notifications and email
GymPass sends only service email and notifications: what happened to your submission, what has been assigned to you, and account and security messages such as password resets. We send no marketing email — there is no newsletter, no promotion, and nothing to unsubscribe from. If you turn on push notifications on a phone you can turn them off again in your device settings, or by signing out of that device.
How long records are kept
You can delete your account at any time from within the app, and deletion cannot be refused. See Support for the steps.
When you delete your account, the information that identifies you — your name, email address, phone number, and membership identifiers — is irreversibly replaced. The account can never be signed in to again. There is no grace period and no way to recover it.
What is kept is the record a governing body is required to keep: the submissions, videos, verification checks, scores, and qualification decisions that your account took part in, and the attestations it signed, which remain signed. These are retained because they are the evidence behind a qualification decision that affects other people, and deleting them would destroy the record of decisions already issued. They are no longer linked to you by name.
Two limits are worth stating plainly rather than leaving you to discover them. Notes that reviewers, coordinators, and the Elite Committee type in their own words are retained as written, and if someone typed a name into a sentence, that sentence is kept as it is. And a club's published contact address belongs to the club rather than to you, so it is kept even where it happens to be yours.
Your rights
Depending on where you live, you may have some or all of the following rights over your personal information. We honour them wherever we can, subject to the retention rules above.
Access — ask for a copy of what we hold about you.
Correction — ask us to fix information that is wrong or incomplete; much of it you can correct yourself in the app.
Deletion — delete your account, which you can do yourself at any time and which we cannot refuse.
Objection and restriction — object to, or ask us to restrict, particular processing.
Portability — ask for the information you gave us in a structured, machine-readable format.
Withdraw consent — where we rely on consent, withdraw it, without affecting what was lawful before.
Complain — raise a complaint with the data protection authority for your country or region.
To exercise any of these, contact us using the details below. We will not treat you differently for asking.
Security
Everything you send to and from GymPass travels over an encrypted connection. Passwords are stored only as hashes and are never readable by us, and two-factor authentication is available on every account. Video and qualification proofs live in private storage that is not publicly addressable, reachable only through signed links that expire after fifteen minutes. Access inside the Service is decided by role — the dual-blind review boundary is enforced by the system, not by convention — and significant actions are written to an audit log. When an account is deleted, the identifying information is irreversibly replaced rather than merely hidden.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your information, we will notify you and the Elite Committee as the law requires.
Where information is processed
GymPass serves a United States governing body, and your information is stored and processed in the United States. If you access the Service from outside the United States, you are sending your information to be processed there, where data protection law may differ from your own.
Changes to this policy
We may update this policy. When we do we will post the new version here and update the effective date at the top. Where a change materially affects how we handle your information, we will give notice through the Service, or by email, before it takes effect.
Contacting us
Questions about this policy, about what is held about you or an athlete you are responsible for, or a complaint about how we have handled it, can be sent to support@scorsync.com, or raised through Support.
If you believe we have not followed this policy, tell us and we will use commercially reasonable efforts to determine and remedy the problem promptly.