This policy explains what personal information YourGymOS (“we”, “us”) collects when you use the YourGymOS website and application, why we collect it, and what we do with it.

YourGymOS is a service name, not a registered company. It is not incorporated as a company, LLP or other registered entity, and it has no company registration number. The service is operated independently. If you need the operator's details for a legal or regulatory purpose, email hello@yourgymos.com and we will provide them.

Two different roles

When a gym uses GymOS, the gym decides what member information to record and why. The gym is the controller of that information; we process it on the gym's behalf under our agreement with them. If you are a gym member and want your information corrected or removed, contact your gym first.

When you visit this website or hold a GymOS account, we are the controller of your account and contact information.

What we collect

• Account information for people who sign in: email address, authentication credentials handled by our authentication provider, organization and role.
• Gym operational data entered by a gym's staff: member profiles and contact details, memberships and plans, attendance and check-in records, invoices, payments, dues and refunds, leads and follow-ups, and fitness information such as workout plans, diet plans and assessments.
• Communication data where a gym connects WhatsApp: messages exchanged between the gym and its members through the gym's own WhatsApp Business account, and delivery status for those messages.
• Technical data necessary to operate the service securely: request metadata and security logs.

This marketing website does not run advertising trackers, does not use a contact form, and does not ask you for personal information in order to read it.

Why we use it

• To provide the service a gym has signed up for.
• To authenticate users and keep accounts secure.
• To send transactional messages such as membership reminders a gym has configured.
• To diagnose faults, prevent abuse and keep the platform available.
• To respond when you contact us.

We do not sell personal information, and we do not use gym member data to train models or for advertising.

Separation between gyms

Each gym's data is isolated from every other gym on the platform. That isolation is enforced by row-level security in the database, so it applies to every request regardless of what a client application asks for, rather than depending on the user interface hiding things.

Service providers

We rely on a small number of providers to deliver the service:

• Cloud hosting and application delivery.
• A managed database and authentication provider.
• Meta Platforms, where a gym connects WhatsApp - messages travel through the WhatsApp Business Platform and are subject to Meta's own terms and policies.
• A payment provider, where online payment collection is used.

These providers process data on our instructions in order to provide their service, and are not permitted to use it for their own purposes.

Retention

We keep gym operational data for as long as the gym's account is active, and afterwards only for as long as we need it to meet legal, accounting or dispute-resolution obligations. A gym can ask us to delete its data when it stops using the service.

Your rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal information, and to object to certain processing. To exercise any of these, email hello@yourgymos.com. If your information was entered by a gym, we will direct your request to that gym and support them in answering it.

Security

Access is authenticated, authorization is enforced in the database, connections are encrypted in transit, and credentials such as messaging access tokens are stored in a dedicated secret store rather than in application code. No system is perfectly secure, but we treat isolation between tenants as the property that must never fail.

Changes

If we change this policy materially we will update the date above and, where the change affects gyms using the service, tell them directly.

Contact

Questions about this policy: hello@yourgymos.com. This policy is governed by the laws of India.