1. Introduction
Welcome to GymOS ("we," "our," or "us"). This Privacy Policy explains how GymOS Inc. collects, uses, discloses, and safeguards your information when you use our mobile application and related services (collectively, the "Service"). By using GymOS, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Personal Information
When you register and use GymOS, we may collect the following personal information:
- Account Information: Name, email address, phone number, and profile photo (via Google Sign-In or manual registration)
- Gym Information: Gym name, address, logo, operating hours, and gym type
- Member Data: Member names, contact details, membership plans, payment records, attendance history, fitness goals, and custom registration fields
- Staff Data: Staff names, roles, salary information, attendance records, leave history, and commission details
- Financial Data: Payment amounts, transaction history, salary records, advance payments, and pending dues
2.2 Automatically Collected Information
- Device Information: Device type, operating system version, unique device identifiers
- Usage Data: App usage patterns, feature interaction logs, session duration
- Attendance Data: QR code scan timestamps, check-in/check-out records, location data (only during attendance scanning, if permitted)
2.3 Biometric Data
If you enable biometric lock (fingerprint/face unlock), this data is processed locally on your device and is never transmitted or stored on our servers.
3. How We Use Your Information
We use the collected information for the following purposes:
- Providing, maintaining, and improving the GymOS platform
- Managing gym memberships, attendance tracking, and financial records
- Processing subscription payments through Razorpay
- Sending push notifications (alerts, membership expiry reminders, broadcast messages)
- Generating reports and analytics for gym owners
- Cloud synchronization and data backup
- Providing customer support and responding to inquiries
- Ensuring app security and preventing fraud
4. Data Storage & Security
Your data is stored securely using industry-standard measures:
- Cloud Infrastructure: We use Supabase (built on PostgreSQL) for cloud data storage with encrypted connections (TLS/SSL)
- Local Storage: Certain preferences and cached data are stored locally on your device using SharedPreferences
- Row-Level Security (RLS): Database access is controlled through row-level security policies ensuring users can only access their own gym's data
- Automatic Backups: Cloud data is backed up automatically with restore capabilities
- Biometric Lock: Optional biometric authentication adds an extra layer of device-level security
5. Third-Party Services
GymOS integrates with the following third-party services:
6. Data Sharing & Disclosure
We do not sell your personal information. We may share data in the following limited circumstances:
- Within Your Gym: Gym owners can view member and staff data for their registered gym(s). Staff can access data based on their assigned role permissions.
- Service Providers: Third-party services listed above that help us provide the Service
- Legal Requirements: If required by law, court order, or governmental regulation
- Business Transfers: In connection with a merger, acquisition, or sale of assets
7. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account or gym:
- Account data is permanently deleted within 30 days
- Gym data (members, staff, finance records) is cascaded and deleted
- Backup copies are purged within 90 days
8. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you
- Correction: Update inaccurate or incomplete information
- Deletion: Request deletion of your account and associated data
- Export: Request an export of your gym data
- Withdraw Consent: Opt out of push notifications or data collection at any time through app settings
To exercise these rights, contact us at support@gymos.com.
9. Children's Privacy
GymOS is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us immediately.
10. Cookies & Tracking
GymOS is a mobile application and does not use browser cookies. Our website (gymos.com) may use essential cookies for analytics purposes only.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us: