Privacy Policy
Last Updated: August 18, 2026
1. Overview & Commitment
This Privacy Policy explains how our Gym Management Platform and Mobile Application ("we," "our," or "us") collect, use, disclose, and safeguard your personal information when you use our mobile application (iOS & Android) and related services. We are committed to maintaining the confidentiality, security, and integrity of your personal data in accordance with Apple App Store Review Guidelines, Google Play Data Safety Policies, GDPR, and applicable privacy laws.
2. Information We Collect
We collect information directly provided by you, automatically through app usage, and via device permissions:
- Personal Identity Data: Name, email address, phone number, profile photo, gender, and date of birth.
- Health & Fitness Metrics: Body weight, height, workout logs, daily step counts, calorie intake, water consumption, and attendance logs.
- Device & Usage Information: Device model, operating system version (iOS/Android), unique device identifiers, IP address, app crash logs, and performance metrics.
- Payment & Billing Data: Payment history, subscription plan details, and transaction references processed securely via PCI-DSS compliant payment gateways (e.g., Stripe, Razorpay). We do not store raw credit card numbers.
3. Mobile Device Permissions Disclosures
To deliver core fitness and management features, our mobile app requires the following device permissions:
- Camera & Photo Library: Used strictly when you choose to upload a profile avatar, post photos to the community feed, or post temporary stories.
- Physical Activity / Health Sensor Access: Used to track daily steps and fitness activity within the app.
- Push Notifications: Used to send workout reminders, membership expiry alerts, trainer updates, and community notifications via Firebase Cloud Messaging (FCM).
4. How We Use Your Information
- Provide, maintain, and personalize your gym membership and fitness tracking experience.
- Process payments, manage memberships, and issue receipts.
- Enable community interactions, leaderboard rankings, and trainer communication.
- Send essential transactional, security, and administrative push notifications.
- Protect against unauthorized access, fraudulent activity, and enforce community standards.
5. Data Sharing & Third-Party Services
We do not sell, rent, or trade your personal information. We share data only with trusted service providers necessary for app functionality:
- Payment Gateways (Razorpay / Stripe): Secure payment transaction handling.
- Cloud Infrastructure & Push Messaging (Firebase Cloud Messaging / AWS): Database hosting, authentication, and notification delivery.
- Gym Administrators & Personal Trainers: Assigned trainers and gym managers have access to your fitness logs and check-ins to assist your training.
6. Data Retention & Account Deletion Rights
In compliance with Apple App Store Guideline 5.1.1(v) and Google Play User Data Policies:
- Right to Request Deletion: You have the right to request full account deletion and erasure of your personal data at any time directly in the mobile app via Profile > Settings > Delete Account or by contacting our support team.
- Data Erasure Timeline: Upon receiving your account deletion request, all personal data, health metrics, and photos will be permanently deleted or anonymized within 30 days, except where retention is mandated by tax or legal obligations.
7. Security & Protection
We implement industry-standard administrative, technical, and physical safeguards (including TLS/SSL encryption for data in transit and AES-256 for sensitive data at rest) to protect your information against loss, misuse, or unauthorized access.
8. Children's Privacy
Our app and services are intended for users aged 13 and older (or 18+ depending on local jurisdiction). We do not knowingly collect personal data from children under 13 without parental consent.
9. Contact Information
If you have questions regarding this Privacy Policy or your personal data rights, please contact us at:
Email: support@gymmanagement.com