Privacy Policy

1. Information we collect

• Account information: name, username, phone number, and (for gym owners/staff) email. Passwords are stored only in hashed form.
• Gym & business information: gym name, branding, plans, and staff details provided by owners.
• Attendance & check-in data: check-in times recorded via QR or kiosk.
• Location data: approximate/precise location is used only for optional presence and check-in verification features, in the foreground, and can be disabled in your device settings.
• Camera: used to scan QR codes for check-in and payments. Camera images are processed on-device and are not stored by us.
• Fitness & diet inputs: goals, body metrics, and meal logs you choose to provide so we can generate and track your AI diet plan.
• Device & notification tokens: a push token to deliver notifications.
• Payment references: confirmations of UPI/offline payments. We do not store your card, bank, or UPI credentials.
• Usage data: basic activity and diagnostics to keep the Service reliable.

2. How we use your information

• To provide and operate the Service (memberships, attendance, payments, reports).
• To generate personalised AI diet plans and track compliance.
• To send relevant notifications (renewals, meals, streaks, announcements).
• To reconcile payments and maintain your gym's records.
• To improve, secure, and support the Service.

3. Sharing with your gym

If you are a member, your gym owner and authorised staff can see your membership, attendance, payment status, and (where you use those features) your fitness/diet activity, as part of running the gym. Staff access is limited by the permissions the owner grants.

4. Service providers we use

We share the minimum necessary data with trusted providers who process it on our behalf:

• AI provider (Anthropic / Claude): the inputs needed to generate your diet plan are processed to return a plan. We do not send your contact details for this purpose.
• Push notification service (Expo): receives your device push token to deliver notifications.
• Cloud hosting & database providers: securely store and serve the Service's data.

We do not sell your personal data.

5. Data retention

We keep your data for as long as your account (or your gym's account) is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You can request deletion as described below.

6. Security

We protect data in transit with encryption (HTTPS), store passwords only as hashes, and restrict access with authentication and role-based controls. No method of transmission or storage is 100% secure, but we work continuously to safeguard your information.

7. Your rights

You may request access to, correction of, or deletion of your personal data, and you can disable location, camera, and notification permissions from your device settings at any time. To make a request, contact us at gymmantra.in@gmail.com. If you are a member, some requests may be routed through your gym as the operator of your membership.

8. Children

The Service is intended for users aged 13 and above. It is not directed to children under 13, and we do not knowingly collect personal data from them. Members under 18 should be enrolled with the involvement of a parent, guardian, or the gym, and under applicable law.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about this policy? Email gymmantra.in@gmail.com.