This policy explains what information the GymTool mobile app collects, why we collect it, who we share it with, and the choices you have. GymTool is a companion app for members of participating gyms. It is operated by [LEGAL_ENTITY_NAME] ("we", "us").
We only collect information needed to identify you as a gym member and show you your membership details.
| Category | What | Why |
|---|---|---|
| Account identity | Mobile phone number | Used as your login. We send a one-time passcode (OTP) by SMS to verify it's you. |
| Profile details | Name, email address, date of birth, postal address | Shown in your profile and used by your gym to identify your membership. You can view and edit these in the app. |
| Membership information | Gym name, membership plan, joining/expiry/renewal dates, fees and outstanding balance, membership status | To display your membership status and billing information. |
| Gym visit activity | Check-in records (date, time, gym, check-in method) and derived statistics such as visit counts and streaks | To show your attendance history and personal statistics. |
| Billing records | Invoice number, description, amount, currency, status and issue date | To show your invoices and outstanding balance. |
| Optional body metrics | Height, weight (only if provided) | Optional profile information. You are not required to provide these. |
| Session data | An authentication token stored on your device | Keeps you signed in so you don't re-enter a code every time. Removed when you sign out. |
We do not use your information for advertising or automated decision-making.
We share personal information only as described below.
| Recipient | What they receive | Purpose |
|---|---|---|
| Your gym | Your membership and profile details, invoices and check-in records | Your gym is the organisation that holds your membership and manages your account. |
| SMS delivery provider (2Factor, 2factor.in) | Your mobile number and the one-time passcode | To deliver your login code by SMS. |
| Cloud hosting (Amazon Web Services) | Data stored and processed by our backend | Hosting our application and database. |
We may also disclose information where required by law, or to protect our rights, safety, or the security of our service.
Our servers and database are hosted on Amazon Web Services in the United States
(us-east-1). If you use the app from outside the United States, your
information will be transferred to and processed there.
No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.
We keep your account and membership information for as long as your account exists, and afterwards only where needed to meet legal, tax or accounting obligations, or to resolve disputes. One-time passcodes are short-lived and discarded after use or expiry.
Your mobile number is your login identifier and cannot be changed in the app; contact your gym to update it.
GymTool is intended for gym members and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
We may update this policy from time to time. We will revise the "Last updated" date above, and where changes are significant we will provide additional notice.
Questions, or want to exercise your rights? Contact us at:
Email: [SUPPORT_EMAIL]
Postal address: [POSTAL_ADDRESS]