When this matters
Because an account is keyed to its email address, no matter which method created it, one person has one account everywhere: the admin dashboard, member portal, marketplace, club website, and mobile app. There is nothing to enable per member, and nothing to set up for Apple’s Hide My Email. Typical situations:- Getting new staff into the admin - you invite a new hire from Settings > Organization > Users, and they sign in with their work Google account, so there is no password to create or share.
- A member who wants to keep their email private - a member books through the marketplace with Continue with Apple and Hide My Email, and still gets confirmations, receipts, and reminders in their real inbox.
- A social sign-up that later needs a password - a member who joined with Facebook needs to sign in on a shared device without Facebook, so an admin sends them a password reset and they can then sign in either way with the same email.
Supported sign-in methods
- Google - Continue with Google. Uses your existing Google account, so there is no separate password to remember.
- Apple - Continue with Apple. Uses your Apple ID and supports Apple’s Hide My Email (private email relay).
- Facebook - Continue with Facebook.
- Email and password - a traditional email and password login, with self-service password reset.
- Phone number and one-time code - members only, and only when the gym has chosen Email or phone number or Phone number under How members are identified. The member types their number and gets a code by WhatsApp or text message. See Member authentication.
Where each method works
| App | Apple | Email & password | ||
|---|---|---|---|---|
Admin dashboard (admin.1club.ai) | Yes | Yes | Yes | Yes |
| Member portal | Yes | Yes | Yes | Yes |
Marketplace (1club.me) | Yes | Yes | Yes | Yes |
| Club website | Yes | Yes | Yes | Yes |
| Mobile app (iOS & Android) | Yes | Yes | Yes | Yes |
Google, Apple, and Facebook sign-in are available to both staff signing into
the admin dashboard and members signing into any member-facing app. Apple and
Facebook are switched on per platform deployment, so if you don’t see a
button for one, it is not turned on rather than broken.
How sign-in works
All member-facing apps (portal, marketplace, club website, and mobile) sign you in through a single secure sign-in page. Choose a provider or enter your email (or phone number, where the gym allows it), authenticate once, and you are returned to the app you started from, already signed in. The mobile app uses the same page in a secure in-app browser, so a member’s account and history are identical on web and mobile. The admin dashboard has its own sign-in page with the same Google, Apple, and Facebook buttons. Below them, you type your email and click Continue, and the next step depends on your account:- The account has a password - you’re asked for it. Forgot Password sends a reset link.
- The account was created with a social sign-in - you’re asked to continue with the option you used before, or to choose Set up a password instead, which emails you a link to set one.
- You were invited but haven’t accepted yet - you’re asked to open the invitation link from your inbox, with a Resend invitation email button if you lost it.
- There is no account for that email - the sign-up form opens so you can create one.
Sessions and staying signed in
- After you sign in, 1club keeps you signed in as you keep using the app and refreshes your session automatically in the background - you don’t re-enter credentials on every visit.
- Sessions are per device and per app. Signing out on one device does not sign you out on the others.
- An admin session lasts 30 days from the last time you used it. Member sessions last longer on the web and in the mobile app.
- Sessions are protected with secure, HTTP-only cookies, so your credentials are never exposed to page scripts.
- Signing out ends the session on that device. Resetting or changing your password signs you out on every other device. If you think an account is compromised, change the password (or secure the provider account).
Hide My Email with Apple
When you sign in with Apple, you can choose to hide your email. Apple then gives 1club a private relay address (ending in@privaterelay.appleid.com) instead of your real one.
You still receive everything as normal. 1club sends your account and notification emails - booking confirmations, receipts, reminders, and verification emails - to that relay address, and Apple forwards them to your real inbox. There’s nothing to set up, and you can change the choice anytime in your Apple ID settings.
Emails to members who hid their Apple email are sent from a 1club address so
Apple’s relay accepts and forwards them, rather than from your club’s own
sending domain. Replies still reach your club.
Linking and switching methods
One email address is one 1club account, regardless of how you sign in. This means:- If you first signed up with email and password, you can still choose Continue with Google or Continue with Apple later, as long as the provider account uses the same email.
- If you signed up with Google, Apple, or Facebook and now want a password (for example, to sign in on a device without that provider), enter your email on the sign-in screen and choose Set up a password instead. An org admin can also send the same link from Settings > Organization > Users using the Reset password action. After you set a password, you can sign in with either method using the same email. See Users.
- After your first social sign-in, 1club links that provider account to your 1club account. If you later change the email at Google, or Apple rotates your relay address, you still land in the same account.
- Members can review their sign-in email on their profile. Staff can review and update theirs under Profile.
Worked examples
New staff member joining the admin
An admin invites the new hire from Settings > Organization > Users. The invitation email links them to sign-in. They click Continue with Google with their work Google account, and their admin access is ready - no password to create or share.Member who wants to keep their email private
A member books through the marketplace and chooses Continue with Apple, then picks Hide My Email. They still get booking confirmations, receipts, and reminders in their real inbox, forwarded by Apple, without giving the club their real address.Social sign-up that later needs a password
A member created their account with Facebook, but wants to sign in on a shared kiosk that doesn’t have Facebook. On the sign-in screen they enter their email and choose Set up a password instead (or an admin uses Reset password on that user in Settings > Organization > Users). The member gets a link, sets a password, and can now sign in either way with the same email.Tips and best practices
- Pick one primary method per person. Any method works, but choosing one keeps sign-in predictable across devices.
- Match the provider to the email the first time. A first social sign-in only links to an existing account when the provider account uses the same email address. After that, the link is kept even if the provider’s email changes.
- Use Reset password to enable password login, not to create a second account - the account stays the same; only the sign-in options grow.
- Keep the sign-in email current. Members and staff can review it on their profile; it is the key that ties every sign-in method to one account.