What we collect
We collect the minimum data needed to run the service:
- Account data , name, email, phone, hashed password, role.
- Gym data , business name, address, timezone, brand settings.
- Member data , profile, contact info, membership plan, attendance history.
- Payment data , amounts, method, and processor references. Card details go directly to Stripe or Paystack and never touch our servers.
- Health-adjacent notes , only what a gym staff member enters (e.g. medical notes, waivers). Encrypted at rest.
- Usage & device data , IP address, browser, and page views for security and product analytics.
How we use it
- Operate, secure, and support the platform.
- Send transactional messages (verification, receipts, renewal reminders) via email or SMS.
- Improve product features by analyzing aggregate usage.
- Comply with legal, tax, and audit obligations.
We do not sell your data. We do not use member data to train third-party AI models.
Who processes your data
We use a small set of vetted sub-processors:
- Neon , Postgres hosting.
- Stripe & Paystack , payment processing.
- Resend , transactional email delivery.
- Cloud infrastructure , for compute and static asset delivery.
Each sub-processor is contractually bound to protect your data and only process it on our instructions.
How long we keep it
Active accounts: for the life of the account. After cancellation: 30 days by default, so you can reactivate. Financial records may be retained longer to satisfy tax and audit obligations.
You can request deletion sooner by emailing privacy@gymprohub.fun , we’ll honor the request within 30 days unless we’re required by law to retain specific records.
Security
Passwords are hashed with bcrypt. Sessions use signed JWT cookies with HttpOnly and Secure flags. Traffic to and from the platform is HTTPS-only. Medical notes and waiver signatures are encrypted at rest. Access to production systems is limited to on-call engineers with hardware-key MFA.
Your rights
Depending on where you live, you may have the right to:
- Access or export your personal data.
- Correct inaccurate data.
- Delete data we hold about you.
- Object to or restrict certain processing.
To exercise these rights, email privacy@gymprohub.fun. If your gym holds your data as a member, contact your gym directly for the fastest response.
International transfers
Our infrastructure is primarily in the United States. If you access GymProHub from outside the U.S., your data may be transferred to and processed there. We rely on standard contractual clauses where applicable.
Children
Members under 13 are not permitted to create their own account. Gyms may enroll minors on behalf of a parent or guardian, subject to local rules; guardian consent must be captured for the waiver signature.
Changes
We may update this policy occasionally. Material changes will be announced 30 days in advance via email to gym owners.