Privacy policy

Who is responsible

Each gym decides what it records about its members (membership, visits, invoices, payments, workouts, measurements) and is responsible for those records. [Legal business name — to be provided by the owner] provides the software and processes that data for the gym. For your app account itself (your login), [Legal business name — to be provided by the owner] is responsible.

What we collect

Depending on how you use the service:

• Account: name, email address, password (stored only as a one-way hash), the version of these terms you accepted and, if you turn it on, two-step verification settings. When you join a gym in the app you also give it your mobile number.
• Gym membership records kept by your gym: member code, contact details, date of birth, gender, address, emergency contact, health notes your gym records, photo and documents, memberships, visits (check-ins), class bookings, personal-training sessions, invoices and payment records.
• Fitness data: workouts you log, body measurements (weight, body fat, waist and others) entered by you or your trainer, and the goals and training focus you or your trainer set.
• Food diary: foods you log (name, amount, meal, day), the nutrition values you enter for them (calories, protein, carbs, fat), foods you save to "My foods" and any daily targets you set. It is stored on our servers so you can see it on any phone, is visible only to you — not to your gym or trainer — and is deleted with your account. We do not supply nutrition values or a food database; totals are calculated from the values you entered.
• Security and technical data: IP address, device and browser type, sign-in times and active sessions, used to keep accounts secure.
• Messages: notices in the app inbox, and SMS or emails your gym sends you (for example reminders and receipts).

Payments

You can pay your gym in the Android app (to join or for dues) or at the front desk. In the app you enter card, UPI or bank details in your gym’s payment partner’s secure checkout (Razorpay or Cashfree); those details go to the payment partner and never reach this app or our servers. A payment counts as received only after the payment partner confirms it to our server. Payments at the front desk appear once the gym records them.

The Android app and your device

• Your sign-in session is kept in the phone's secure storage; your theme choice in app storage. Signing out removes the session.
• Camera: used only by gym staff to scan members’ QR passes at check-in, and only while the scanner is open. Images are analysed on the device by Google ML Kit and are not uploaded or stored.
• Google ML Kit may send Google limited diagnostic and usage information (such as device model, app version and performance data) to maintain the feature, as described in Google's ML Kit data-disclosure documentation. It does not receive the camera images.
• Payments in the app use the Razorpay or Cashfree checkout (whichever your gym uses). The payment partner handles your payment details and may collect device information to prevent fraud, under its own privacy policy.
• The app has no advertising, no analytics or tracking SDKs and no push notifications. It does not access your location, contacts, photos or files.
• Fitness messages: from the records in your gym account (personal bests, milestones, your weekly visit goal, weekly goals you set, workout and food-diary reminders, weekly and monthly summaries), the service may add messages to your in-app notifications — never more than three a day. You choose which ones in Profile → Reminders and can set quiet hours; payment, membership, class and security messages are not affected. These messages are kept with your account and deleted with it.
• Water reminders are created on your phone, only if you turn them on, from the water you logged in the app; Android asks for notification permission at that moment. They are not sent from our servers and show no amounts.
• Activity and sleep (Health Connect) — optional: if you choose to connect it, the app reads from Android Health Connect your step count and, only if you allow sleep access separately, your sleep sessions and any sleep stages your sleep app recorded. The app asks only for permission to read steps and to read sleep — nothing else — and writes nothing to Health Connect. Health Connect keeps the data recorded on this phone and by the apps and watches that share with it, so if several people use one phone, what the app can read may include their activity too. You can withdraw access at any time in Health Connect; the app then stops reading that data.
• By default this data is read on your phone when you open the relevant screen (steps for today and the last seven days, sleep for the last two weeks); it is not sent to our servers or your gym and is not stored by the app.
• Keep in my account (only where the app offers it, and only if you turn it on): the app copies the steps and sleep you allow — from the last 30 days and then as new data arrives while you use the app — to your account, so it stays with you if you change phones or gyms. It is visible only to you: not to your gym or its staff, and not to our support staff, even when they help you with your account. It is kept until you remove it in the app (Health Connect → Delete from account), stop keeping it and delete it, or delete your account, and it is included when you ask us for a copy of your data. It is never shared, sold or used for advertising.
• Nights you add yourself on the Sleep screen are stored only on your phone and are removed when you sign out. The app shows the sleep that was recorded; it does not assess your sleep or give medical advice.
• Wellness: the water you log, guided sessions (yoga, meditation, breathing) you mark as complete, a nutrition plan you choose and the days you tick it as followed, and weekly goals you set are stored on our servers with your gym account, so your progress, streaks and goals can be counted and stay with your account on a new phone. Only you can see them — not your gym or its staff. The one exception: a coach who gave you a nutrition plan can see that it is still your plan, never whether you follow it. They are deleted with your account. A copy of your recent water also stays on your phone so logging works offline; it is removed when you sign out.
• Guided sessions and nutrition plans are general wellness information written by your gym. They are not medical or dietetic advice, and the app does not assess your health.
• App data is excluded from Android cloud backup.

Why we use it

To provide the service to your gym and to you: sign-in and security, check-in, bookings, memberships and invoices, workouts and progress, and the messages your gym sends; to provide support; and to meet legal obligations such as tax records. We do not sell personal data or use it for advertising.

Sharing

Your gym sees the records it keeps about you. We share data only with service providers that help us run the service — hosting and storage, email delivery, SMS delivery (Fast2SMS) and, where a gym uses it, a payment provider — under contracts that protect it, or when required by law.

Retention

Account data is kept while your account exists, and so is Health Connect data you chose to keep in your account (until you delete it). Gym records are kept by the gym; invoices and payment records are kept for [Invoice retention period, per tax adviser — to be provided by the owner] as required by tax law. Expired sessions are removed 30 days after they end, in-app notices after 180 days and message delivery records after 90 days; sign-in history is kept while the account exists. When you delete your account, the steps on the "Delete your account" page apply.

Deleting your account

You can delete your account in the Android app (Profile → Privacy & data → Delete account) or on the web (Settings → Security → Delete account). See the "Delete your account" page for what is deleted, what each gym keeps and why.

Security

Data is encrypted in transit, passwords are hashed, access is restricted by role and gym branch, sessions can be revoked, and privileged actions are recorded in audit logs.

Your rights

You can access and correct your data, ask for it to be erased, withdraw consent for optional processing and nominate someone to exercise your rights. For gym records, ask your gym; for your account, use the app or contact [Support email — to be provided by the owner]. Grievance Officer: [Grievance officer email — to be provided by the owner], [Registered business address — to be provided by the owner]. We respond within the timelines required by law.

Children

The app is meant for adults. A gym that registers a member under 18 must obtain the consent of a parent or guardian as the law requires.