This Privacy Policy explains how GymLogs ("GymLogs," "we," "us," or "our") collects, uses, stores, and protects information when gym owners ("Customers") and their members' data is processed through our platform at gymlogs.in (the "Service").

GymLogs is a business management tool (B2B SaaS) built for gym owners in Northeast India to manage their members, payments, and subscription plans.

1. Who This Policy Applies To

This policy applies to:

• Gym owners who sign up for and use GymLogs to manage their gym business.
• Gym members and website visitors whose information is entered by a gym owner into GymLogs, or who submit an inquiry through a gym's public mini-website.

If you are a gym member and have questions about how your personal data is used, please contact your gym directly, as they control what information is entered into the Service. GymLogs acts as the technology provider (a "data processor") on their behalf.

2. Information We Collect

2.1 Information gym owners provide directly

• Name, email address, phone number
• Gym name, address, business details
• Gym logo and photographs uploaded for the public mini-website
• Membership plan details and pricing set by the gym owner
• Login credentials (managed securely through our authentication provider)

2.2 Information entered about gym members

Gym owners may enter the following about their own members:

• Full name, phone number
• Membership plan, start date, and payment status
• Notes related to plan expiry and renewal reminders

2.3 Information from public mini-website visitors

If a gym has its public mini-website enabled, visitors who submit an inquiry form provide:

• Name, phone number, and message content

2.4 Payment information

• GymLogs currently accepts payments via manual methods (cash/UPI) and is integrating Razorpay for online subscription payments.
• When Razorpay is used, GymLogs does not collect, store, or have access to card numbers, UPI PINs, or full payment credentials. These are handled directly and securely by Razorpay, a licensed payment aggregator regulated by the Reserve Bank of India (RBI).
• GymLogs only receives confirmation of payment status (success/failure) and transaction reference IDs from Razorpay.

2.5 Automatically collected information

• Device and browser information, IP address, and usage data collected for security, debugging, and service improvement purposes.
• Push notification subscription data (if a gym owner enables notifications), used solely to deliver reminders about pending payments and new inquiries.

3. How We Use Information

We use collected information to:

• Provide, operate, and maintain the GymLogs platform
• Authenticate accounts and enforce invite-only access
• Send transactional emails (invites, password setup, renewal reminders)
• Send push notifications for pending payments and new member inquiries
• Display a gym's public mini-website (only if enabled by the gym owner)
• Process subscription payments through Razorpay
• Monitor and improve the reliability and security of the Service
• Respond to support requests

We do not sell or rent personal information to third parties, and we do not use gym member data for advertising purposes.

4. Data Storage and Security

• Data is stored using Supabase (PostgreSQL database) with Row Level Security enabled, ensuring each gym owner can only access their own data.
• The application is hosted on Vercel.
• Transactional emails are sent via Resend.
• Photos and gym logos are stored in secured Supabase storage buckets.
• We take reasonable technical and organizational measures to protect data against unauthorized access, alteration, or loss. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Data Sharing

We share information only with the following categories of third-party service providers, solely to operate the Service:

These providers are contractually or by policy required to handle data securely and only for the purposes we specify. We do not share data with advertisers or data brokers.

We may also disclose information if required by law, court order, or governmental request.

6. Data Retention

We retain gym owner and member data for as long as the gym owner's account remains active. If an account is terminated or blocked for non-payment, data may be retained for a reasonable period afterward in case the account is reactivated, and may be permanently deleted upon written request (see Section 8).

7. Cookies and Local Storage

GymLogs uses essential cookies and browser storage required for authentication sessions and app functionality. We do not use third-party advertising or tracking cookies.

8. Your Rights

Gym owners may request to:

• Access the personal data associated with their account
• Correct inaccurate information
• Request deletion of their account and associated data, subject to legitimate business or legal retention needs (e.g., payment records)

Requests can be made by contacting us at the details in Section 11.

9. Children's Privacy

GymLogs is a business tool intended for use by adult gym owners and is not directed at children. Gym owners are responsible for ensuring compliance with applicable laws if they enter information about minors who are gym members.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

This Privacy Policy is governed by the laws of India.