gymsense

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, and phone number when you create an account or are added by a gym
• Authentication Data: Phone number for SMS verification
• Payment Information: Payment card details are collected and processed by our payment processor; we store only the last 4 digits and card brand for display purposes
• Calendar Integration: If you choose to sync your training sessions with Google Calendar, we access your calendar with your permission to create and manage session events
• Profile Preferences: Personal training preferences, preferred trainers, and scheduling preferences
• Communications: Support requests and any messages you send us

1.2 Information Collected Automatically

• Usage Data: Check-in history, session bookings, and transaction history
• Device Information: Device type, operating system, and app version for technical support
• Error Reports: Crash logs and error data to improve app stability
• Push Notification Tokens: Device tokens to send you notifications about sessions and updates

1.3 Information We Do NOT Collect

• Precise location data or GPS coordinates
• Health or biometric data
• Photos or media from your device
• Contacts or address book
• Browsing history outside our app

2. How We Use Your Information

We use your information to:

• Provide Services: Process check-ins, manage session bookings, and handle payments
• Communicate: Send transactional emails (receipts, booking confirmations), transactional SMS (verification codes, account onboarding messages), and push notifications
• Improve Our Service: Analyze usage patterns and fix technical issues
• Prevent Fraud: Detect and prevent fraudulent transactions or unauthorized access
• Legal Compliance: Comply with legal obligations and respond to legal requests

3. How We Share Your Information

3.1 With Your Gym

Your gym (the business using Gymsense Pro) has access to your profile information, check-in history, session bookings, and payment history. Your gym is the "data controller" for your information; Gymsense acts as a "data processor" on their behalf.

3.2 With Service Providers

We work with third-party service providers to help us operate our services. These providers may have access to your information only to perform specific tasks on our behalf and are obligated to protect your information. Our service providers fall into the following categories:

• Payment Processing: To securely process payments and store payment methods
• Cloud Infrastructure: To host our database and provide authentication services
• Communications: To send SMS verification codes and transactional emails
• Error Monitoring: To track and fix technical issues in our apps
• Push Notifications: To deliver notifications to your device
• Calendar Services: To sync your training sessions with your calendar (if you opt in)

3.3 Mobile (SMS) Information Sharing

We may use service providers to deliver SMS messages (for example, verification codes and account onboarding messages) on our behalf. We do not share, sell, rent, or disclose end-user mobile information (including phone numbers and SMS consent) with third parties or affiliates for marketing or promotional purposes.Mobile information is shared only with service providers as needed to provide the messaging service and to comply with legal obligations.

3.4 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, safety, or property.

3.5 Business Transfers

If Gymsense is acquired or merges with another company, your information may be transferred as part of that transaction.

4. Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide you services
• Required by law (e.g., financial records for tax purposes)

After account deletion, we may retain certain data for up to 90 days for backup purposes, and indefinitely for anonymized analytics.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS) and at rest
• Access Controls: Gym staff only see data for their own gym (multi-tenant isolation)
• Payment Security: Card data is handled by PCI-DSS compliant processors; we never store full card numbers
• Authentication: Secure phone-based verification

6. Your Rights

6.1 All Users

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Opt-Out: Disable push notifications in app settings

6.2 California Residents (CCPA)

California residents have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

6.3 European Users (GDPR)

If you are in the European Economic Area, you have additional rights:

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

7. Children's Privacy

Gymsense is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

8. Third-Party Links

Our app may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting a notice in the app
• Sending you an email (if we have your email address)
• Updating the "Last Updated" date above

10. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at:

• Email: support@gymsense.io
• Website: gymsense.io