Privacy policy

This policy explains what data Gym Management Soft (“we”, “us”) handles, why, and the choices you have. It covers our website and the Gym Management Soft app used by gym owners, staff and members.

Two kinds of data

• Account data. When a gym owner signs up we collect their name, email address and password (stored only as a secure hash), plus the gym details they enter: name, country, city, address, phone, WhatsApp number, email and logo.
• Gym data. Gyms use Gym Management Soft to manage their members and staff. They may enter member names, photos, email addresses, WhatsApp numbers, plans, subscriptions, payments, invoices, and check-in and check-out times. For this data, the gym is the controller and we act as its processor: we process it only to provide the service to that gym.

How we use data

• To run the service: sign-in, dashboards, invoices, attendance history and the member app.
• To send messages the gym has switched on: login details, subscription confirmations, invoices and renewal reminders, by email, WhatsApp and push notification.
• To bill gyms for their use of Gym Management Soft (active members per 30-day cycle).
• To keep the service secure, prevent abuse and fix problems.

We do not sell personal data, and we do not use it for advertising.

Cookies

We use one essential cookie to keep you signed in. We do not use advertising or cross-site tracking cookies. Installing the app stores files on your device so it loads quickly and works offline. You can remove them by uninstalling the app or clearing site data.

Service providers

We use trusted providers to run the service, each bound to protect the data they handle:

• Cloudflare: hosting, database and network delivery.
• Email delivery provider: sending account and billing emails.
• WhatsApp messaging provider: sending WhatsApp notifications when a gym enables them.
• Browser push services (operated by the browser maker): delivering push notifications.

Retention

We keep data while an account is active. When a gym closes its account we delete its data within a reasonable period, except where we must keep records (for example billing records) by law.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data. Members should contact their gym first, because the gym controls member data. Gym owners and anyone else can contact us at hello@gymmanagementsoft.com.

Security

Data is encrypted in transit. Passwords are stored only as salted hashes, and each role in a gym sees only what it needs. No system is perfectly secure, but we work to protect your data and will notify affected gyms of any breach as required by law.

Changes

If we change this policy we will update the date above and, for significant changes, tell gym owners by email.