Privacy Policy

Who we are and our role

MyGymGate is software that gyms use to run memberships, check-ins, reminders and TV leaderboards. You can reach us at hello@mygymgate.com.

Each gym decides what member data to enter and why. For member data the gym is the data fiduciary (controller) under India's Digital Personal Data Protection Act, 2023, and MyGymGate processes that data on the gym's behalf. For gym owner and staff accounts, MyGymGate is the data fiduciary.

What we collect

Gym owners and staff

• Name, email address and password (passwords are stored only as a one-way hash).
• Gym details: name, address, logo, brand colours, plans and prices.

Gym members (entered by the gym)

• Name, member code, phone number, email address, and optionally a photo, gender, date of birth, body weight and notes.
• Membership records: plan, start and end dates, amount paid.
• Check-in history (date and time) and points used for streaks and leaderboards.
• Face template, only if the member gives consent (see below).

Website visitors

• Details you type into the contact-sales form (name, phone, email, gym name, message).
• Standard server logs kept by our hosting provider (IP address, browser, pages requested). We do not use advertising or analytics trackers.

Face check-in

Face check-in is optional and off unless the gym turns it on. A member's face is enrolled only after the member gives consent, and the time of consent is recorded.

• The app turns a face image into a face template: a list of numbers used to recognise the member at the front desk. We store the template, not the camera image used to make it.
• Templates are used only to check that member in at their own gym. They are never sold, shared with other gyms or used for advertising.
• A member can withdraw consent at any time through their gym; the template is deleted straight away.
• Templates are deleted automatically 30 days after a member's membership ends or the member is marked inactive.

How we use data

• To run the service: memberships, QR and face check-in, renewal reminders, receipts and member pass pages.
• To show the gym's TV leaderboard. It shows a member's name and photo unless the gym hides the member or the member opts out.
• To send emails the gym asks us to send (for example welcome messages and renewal reminders). Every marketing email has an unsubscribe link.
• To answer support and sales enquiries, keep the service secure and meet legal obligations.

We do not sell personal data and we do not show ads in the app.

App permissions

• Camera: to scan member QR codes and, when enabled, recognise faces at check-in and take member photos.
• Notifications: to alert the owner about renewals and check-ins.
• Internet and network state: to sync with the gym's account.

Who we share data with

Only with service providers that run the service for us, under contract:

• Supabase: database, file storage and sign-in (servers in Mumbai, India).
• Amazon Web Services (CloudFront): delivers the website and relays app traffic.
• Hostinger: sends email.
• Netlify: backup website hosting.

We may also disclose data if Indian law or a valid order from an authority requires it.

Security

All traffic is encrypted in transit (HTTPS). Each gym can see only its own data, enforced by row-level security in the database. Staff access is limited to what is needed to support the service.

How long we keep data

• Member and gym data is kept while the gym uses MyGymGate. When a gym closes its account, its data is deleted within 30 days, except where we must keep records longer by law (for example tax records).
• Face templates follow the shorter rule in Face check-in.
• Contact-form enquiries are kept for up to 2 years.

Your rights and deleting your data

You can ask to see, correct or delete your personal data, withdraw consent, or nominate someone to act for you.

• Members: ask your gym first, since it controls your record. You can also email us and we will pass the request to your gym.
• Gym owners: to delete your account and your gym's data, email hello@mygymgate.com from your account's email address with the subject "Delete my account". We confirm and complete deletion within 30 days.

Children

MyGymGate is for gyms and adult members. If a gym enrols a member under 18, the gym must get verifiable consent from a parent or guardian, and face check-in should not be used for that member.

Grievances

For any privacy concern or complaint, write to hello@mygymgate.com. We reply within 7 days. If you are not satisfied, you can approach the Data Protection Board of India.

Changes

If we change this policy we will update the date above, and tell gym owners by email before a significant change takes effect.