Legal

Privacy Policy

Last updated 25 September 2026

GymPay ("GymPay", "we", "us", or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how GymPay collects, uses, stores, and protects information when you use our website, application, and gym management services (collectively, the "Services").

By accessing or using GymPay, you agree to the practices described in this Privacy Policy.

Information We Collect

Depending on how you use GymPay, we may collect the following information:

A. Personal Information

We may collect:

  • Full name
  • Email address
  • Mobile/phone number
  • Date of birth
  • Gender, where required
  • Address
  • Profile photograph
  • Emergency contact information
  • Login credentials and account information

B. Gym and Membership Information

For gym owners, administrators, staff, and members, we may collect:

  • Gym name and business information
  • Membership/plan details
  • Membership start and expiry dates
  • Fee/payment records
  • Attendance information
  • Membership status
  • Invoice and receipt information
  • Discounts and offers
  • Staff information
  • Other information entered by the gym or its authorized users

C. Payment Information

GymPay may process information related to membership payments and transactions.

Depending on the payment method used, payment information may be processed by third-party payment service providers.

GymPay does not intend to store complete debit card, credit card, CVV, or banking credentials on its own servers unless explicitly required and lawfully permitted.

Payment-related information may include:

  • Transaction ID
  • Payment amount
  • Payment date and time
  • Payment status
  • Payment method
  • Invoice/receipt details

D. Technical Information

When you use our Services, we may automatically collect certain technical information, such as:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Login information
  • Date and time of access
  • Pages or features accessed
  • Error and diagnostic information

How We Use Your Information

We may use collected information to:

  • Create and manage user accounts
  • Provide gym management services
  • Manage memberships and plans
  • Track membership fees and payments
  • Generate invoices and receipts
  • Maintain attendance and membership records
  • Send payment and membership notifications
  • Send service-related communications
  • Provide customer support
  • Improve and maintain our Services
  • Detect and prevent fraud, misuse, and unauthorized access
  • Maintain security and system integrity
  • Comply with applicable legal and regulatory requirements

We may also use aggregated or anonymized information for analytics, reporting, and improving GymPay.

Communications and Notifications

GymPay may send service-related communications through email, SMS, WhatsApp, push notifications, or other supported communication channels.

These communications may include:

  • Payment confirmations
  • Membership expiry reminders
  • Renewal reminders
  • Invoices and receipts
  • Account notifications
  • Security alerts
  • Important service updates

Where required, we will obtain appropriate consent before sending promotional communications.

You may opt out of promotional communications where applicable. Service and security-related communications may still be sent when necessary.

How We Share Information

We do not sell your personal information to third parties.

We may share information with trusted third-party service providers when necessary to operate GymPay, including providers responsible for:

  • Payment processing
  • SMS and messaging services
  • Email delivery
  • Cloud hosting and storage
  • Analytics and monitoring
  • Security services
  • Customer support

These providers may process information only as necessary to provide their services and are expected to maintain appropriate security and confidentiality.

We may also disclose information when required to:

  • Comply with applicable laws or legal processes
  • Respond to lawful requests from authorities
  • Protect the rights, property, or safety of GymPay, our users, or others
  • Investigate fraud, security issues, or misuse of the Services

Gym Owners and Administrators

GymPay may allow gym owners and authorized administrators to manage member information.

If you are a gym member using GymPay through a gym, your gym may be responsible for the personal information it enters or manages through the platform.

Gym administrators may have access to information necessary to manage memberships, payments, attendance, communication, and other gym-related operations.

If you have questions about information managed by a particular gym, you may also contact that gym directly.

Data Security

We take reasonable technical and organizational measures to protect personal information against:

  • Unauthorized access
  • Unauthorized disclosure
  • Loss
  • Misuse
  • Alteration
  • Destruction

However, no internet-based service can guarantee absolute security. You should also take reasonable steps to protect your account credentials and avoid sharing passwords with others.

Data Retention

We retain personal information only for as long as reasonably necessary to:

  • Provide our Services
  • Maintain business and transaction records
  • Resolve disputes
  • Prevent fraud and misuse
  • Comply with legal, accounting, or regulatory requirements

When information is no longer required, we may delete, anonymize, or securely dispose of it in accordance with applicable requirements.

Cookies and Similar Technologies

GymPay may use cookies and similar technologies to:

  • Keep users signed in
  • Remember preferences
  • Improve website functionality
  • Understand how users interact with our Services
  • Improve security and performance

You may configure your browser to reject or restrict cookies. However, disabling certain cookies may affect the functionality of the Services.

Third-Party Services and Links

Our Services may integrate with or contain links to third-party services.

Third-party services may have their own privacy policies and terms. GymPay is not responsible for the privacy practices of third-party websites or services that are not controlled by us.

We recommend reviewing the privacy policies of third-party services before providing them with personal information.

Children's Privacy

GymPay is primarily intended for gym owners, staff, and members.

We do not knowingly collect personal information from children in violation of applicable laws.

If you believe that a child has provided personal information to us without appropriate authorization, please contact us so that we can take appropriate action.

Your Privacy Rights

Depending on applicable law, you may have rights regarding your personal information, including the right to:

  • Request access to your personal information
  • Request correction of inaccurate information
  • Request deletion of information where legally permitted
  • Request information about how your data is processed
  • Withdraw consent where processing is based on consent
  • Object to or restrict certain processing activities

Some information may need to be retained where required by law or where necessary for legitimate business purposes.

To exercise your rights, please contact us using the details provided below.

Account and Data Deletion

If you want to delete your GymPay account or request deletion of your personal information, contact us at the email address provided below.

We may need to verify your identity before processing a deletion request.

Certain records, including financial or transaction records, may be retained where required by applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update the "Last updated" date at the top of this page.

If significant changes are made, we may provide additional notice through the Services or other appropriate communication channels.

By using GymPay, you acknowledge that you have read and understood this Privacy Policy.