Privacy Policy

Your gym decides what member information to record and how to use it. When you join a gym on GymVibe, that gym is responsible for your membership data, and we process it on the gym's behalf to provide the service.

For gym owners and staff, GymVibe is responsible for the account information you give us when you register and sign in.

• Account details: name, email address, mobile number, password (stored only in hashed form), and your role (owner, trainer, front desk, or member).
• Membership records: member code, plan, start and end dates, status, renewals, and assigned trainer.
• Attendance: check-in and check-out times recorded at the gym, including QR check-ins.
• Payments and invoices: amounts, payment method, dates, receipts, and invoice details such as GSTIN. We do not store full card or bank credentials.
• Training and health information: workout plans, diet plans, class bookings, and progress entries such as body weight or measurements that you or your trainer add.
• Messages: conversations between members, trainers, and the front desk inside the app.
• Device and usage data: device type, operating system, app version, push notification token, IP address, and security logs.

• Sign you in, keep your account secure, and show each role only what it needs.
• Run gym operations: memberships, renewals, attendance, classes, billing, and reports.
• Deliver workout, diet, and progress features you or your trainer use.
• Send service messages such as renewal reminders, payment receipts, class updates, and chat notifications.
• Diagnose problems, prevent misuse, and improve reliability.

We do not sell personal information, and we do not use it for third-party advertising.

Progress entries, measurements, and diet details can be sensitive. They are visible only to you, your assigned trainer, and authorised staff at your gym. You can ask your gym to correct or remove them at any time.

GymVibe is not a medical service and does not use this information to make health decisions about you.

• Your gym: the owner and staff of the gym you belong to, limited by their role. Trainers see only members assigned to them.
• Service providers: cloud hosting and database providers (such as Supabase) and push notification delivery (Firebase Cloud Messaging). They process data only to run the service.
• Legal reasons: when required by law, or to protect the safety and rights of users, gyms, or the public.

Other gyms on the platform cannot see your data.

• Notifications: to alert you about messages, renewals, and gym updates. You can turn these off in your device settings.

We do not access your camera, precise location, contacts, or photos.

Data is stored with established cloud providers and encrypted in transit. Access is controlled by role-based permissions and row-level security, so each account can only reach the records it is allowed to.

No system is perfectly secure. If we learn of a breach that affects you, we will notify your gym and, where required, you and the relevant authorities.

We keep information while your account or your gym’s account is active. Archived members may be hidden from lists while their history stays available for billing, tax, and reporting records.

When a gym closes its account or asks us to delete data, we delete or anonymise it within a reasonable period, except where the law requires us to keep it longer.

You can delete your own account at any time from Settings → Delete account, or on the web at gym-management-system-f7985.web.app/delete-account. This immediately removes your login, profile and personal workout and body logs. Records your gym keeps for its own business (such as membership and payment history, or plans a trainer created) stay with the gym. A gym owner must remove all members and staff first; deleting the owner account then deletes the gym and all of its data.

Depending on where you live, including under India’s Digital Personal Data Protection Act, 2023, you can:

• See the personal information held about you.
• Correct information that is inaccurate or incomplete.
• Ask for your information to be deleted, subject to legal record-keeping.
• Withdraw consent for optional processing, such as notifications.
• Raise a complaint if you believe your data was mishandled.

Members should contact their gym first, because the gym holds the membership record. You can update your password and appearance at any time from Settings.

Members under 18 should be registered by the gym with a parent or guardian’s consent. We do not knowingly collect information from children without that consent.

We may update this policy as the app changes. When changes are significant, we will let you know in the app before they take effect. The date at the top shows when it was last revised.