Privacy Policy

Effective from · Version

1. Who we are

The apps and website (the “Platform”) are operated by , (“we”, “us”). Contact: .

The Platform has two apps:

• Gym Manager (owner app) – used by gyms to manage members, plans, fees and attendance.
• My Gym (member app) – used by gym members and by people looking for a gym near them.

2. Who is responsible for which data

• Your gym is the Data Fiduciary for your membership records (your profile, plan, fees, attendance, body measurements, workout and diet plan) because the gym decides why and how these are used. We process them on the gym's behalf as its Data Processor, only to provide the Platform to the gym.
• We are the Data Fiduciary for: gym owner accounts, “Join this gym” requests sent through the app, ratings and reviews, member-app login and consent records, and privacy requests.

Requests about your membership records are answered by your gym. You can raise them inside the My Gym app (they go to the gym) or with our Grievance Officer, who will help route them.

3. Data we collect and why

Health-related information (weight, BMI, body measurements, injuries) is collected only to support your fitness goals, is visible only to you and your gym, and is never used for advertising.

Stored only on your phone (not sent to us): water intake tracker, guided-workout history, cached location.

We do not sell personal data, we do not use it for advertising, and we do not track or profile users for behavioural targeting.

4. Consent and how to withdraw it

• Gym owners agree to this policy and the Terms when registering.
• When a gym adds a member, the gym confirms that the member has agreed to share their details (and, for a member under 18, that a parent/guardian has agreed).
• When a member first opens the My Gym app, they see a notice and choose “I agree” before the app is used.
• A “Join this gym” request is sent only after you agree to share your details with that gym.
• Withdraw consent as easily as you gave it: My Gym app → menu → Privacy & my data → Withdraw consent. App access stops and your gym is asked to erase your data, except what the law requires to be kept (for example, fee records). Gym owners can delete their whole account from Settings.

5. Children (under 18)

Under the DPDP Act a child is anyone under 18. A gym may add a member under 18 only after obtaining verifiable consent from the parent or lawful guardian, and must record this in the app. We do not track, monitor or profile children, and we do not direct any advertising at them. Children should not send “Join this gym” requests themselves; a parent or guardian should do so.

6. Who we share data with

• Your gym – your membership data, check-ins, ratings you give it, and any join or privacy request you send to it.
• Service providers who host and run the Platform for us (cloud servers and database) under contracts that require them to protect the data and use it only for our instructions. Data is stored in . We do not transfer data to any country that the Government of India restricts.
• Public view in the member app – a gym's name, photos, address, timings, plans, average rating, and reviews (shown with the reviewer's first name and last initial only).
• Authorities – only when required by law or a valid legal order.

7. How long we keep data

• Membership records: as long as the gym keeps you as a member in the app. When the gym deletes a member, the data is erased from the live system. The gym may keep fee/payment records as required by tax laws.
• “Join this gym” requests: automatically deleted after 180 days.
• Login sessions: automatically deleted after 180 days.
• Closed privacy requests: deleted after 1 year (kept that long as proof we handled them).
• Gym account deletion: all data of the gym and its members is erased immediately from the live system and from backups within 30 days.
• Where the DPDP Rules require us to inform you before erasing data that you have not used for a long time, we will give at least 48 hours' notice.

8. Security and breaches

We use encrypted connections (HTTPS), store passwords only as salted hashes, keep each gym's data separated, limit access to people who need it, rate-limit logins, and keep backups. If a personal data breach happens, we will inform the Data Protection Board of India and the affected users without delay, as required by the DPDP Act and Rules, describing what happened, the likely impact, and what we and you can do.

9. Your rights

Under the DPDP Act you can:

1. Access – get a summary of your data and how it is used. My Gym app → Privacy & my data → Download my data.
2. Correction and completion – ask to fix wrong or incomplete data (→ Request correction).
3. Erasure – ask to delete your data (→ Delete my data).
4. Withdraw consent at any time (→ Withdraw consent).
5. Grievance redressal – complain to us (see below).
6. Nominate a person to exercise these rights if you die or become unable to – write to the Grievance Officer.

We and your gym aim to respond within 30 days. You are also expected to give correct information and not to file false or frivolous complaints (DPDP Act, Section 15).

10. Grievance Officer and complaints

Please first contact the Grievance Officer (or use Raise a complaint in the app). If you are not satisfied with the response, you may complain to the Data Protection Board of India.

11. Device permissions

• Camera – to scan QR codes, and in the owner app to take a member's photo (optional, only with the member's consent). Apart from gym photos and member photos the owner chooses to add, no photos are taken or stored.
• Location – member app: to show gyms near you, used at that moment and not saved on our servers. Owner app: to set the gym's location once.
• Photos / files – owner app: only the gym photos and member photos you pick to upload.

You can turn these permissions off in your phone settings at any time; the related feature will stop working.

12. Changes to this policy

If we change this policy in a way that affects how your data is used, we will show the new version in the app and, where needed, ask for your consent again before continuing.

हिंदी सारांश (Hindi summary)