Privacy Policy

Last Updated: September 21, 2026

Welcome to GymAux. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our gym management software and mobile application.

Information We Collect

We collect information that you provide directly to us when using our services:

• Personal Information: Name, email address, phone number, date of birth, profile picture, and billing information.
• Fitness Information: Height, weight, body measurements, fitness goals, activity levels, and the diet preferences and health details you choose to enter, such as allergies or medical conditions.
• Usage Data: Information about how you interact with our app, including access times, pages viewed, and the routes you use within the app.
• Device Information: Data about your device including IP address, device type, operating system, and browser type, plus crash and error reports that help us fix problems.

How We Use Your Information

We use the information we collect for various purposes, including:

• To provide, maintain, and improve our services
• To process payments and manage your account
• To send you important information about your membership
• To personalize your experience and deliver content relevant to your interests
• To analyze usage patterns and optimize our service
• To comply with legal obligations

Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, please note that no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements.

Retention Periods

• Active Account Data: We retain your account information and associated data (including gym member records, attendance, payments, and subscription details) for as long as your account remains active and in use.
• Deleted Account Data: When your deletion request is approved, your access ends immediately and your records are marked as deleted. We erase or anonymize your personal information when you ask us to at privacy@gymaux.in, except where we are required to retain certain information for legal, regulatory, or security purposes.
• Transaction Records: Payment and subscription transaction records are retained for 7 years to comply with tax and accounting regulations.
• Communication Records: Support emails and communications are retained for 3 years for customer service and dispute resolution purposes.
• Analytics and Usage Data: Aggregated and anonymized usage data may be retained indefinitely for analytics and service improvement purposes, as this data cannot be used to identify individual users.
• Activity Logs: Audit logs and notifications are kept for 90 days and SMS logs for 30 days, then deleted automatically.
• Legal Hold Data: If your data is subject to a legal hold, investigation, or court order, we may retain relevant data beyond the standard retention periods until the legal matter is resolved.

Data Deletion Process

When data reaches the end of its retention period or when you request deletion of your account:

• Access ends immediately when a deletion request is approved, and the account is marked as deleted
• Personal information is permanently erased or anonymized when you request it by email
• Anonymized or aggregated data may be retained for analytics purposes

To request deletion of your data or for questions about our data retention practices, please visit our Delete Account page or contact us at privacy@gymaux.in.

Sharing Your Information

We may share your information in the following situations:

• With Service Providers: We may share data with third-party vendors who provide services on our behalf, such as payment processing, messaging, email delivery, crash reporting, and services that help deliver features like personalized plans. For features like personalized plans, we send only the details needed to produce the result, not your name or contact details.
• Business Transfers: If GymAux is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities.

Your Choices

You have several rights regarding your personal data:

• Access, update or delete your personal information
• Object to our processing of your data
• Opt-out of marketing communications
• Request restriction of processing or data portability

To exercise these rights, please contact us at support@gymaux.in.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our app and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Children's Privacy

Our services are not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16.

International Data Transfers

Your information may be transferred to and processed in countries other than the one in which you reside. These countries may have different data protection laws than your country of residence.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.