Privacy Policy — Fitness GYM Management

This policy explains what the Fitness GYM Management app ("the app") stores, why, and for how long. The app is provided by Upstal Studio, 101/A, Barontek, Dhaka 1206, Bangladesh ("we", "us"). ## Who is responsible for the data The app runs inside a gym's or studio's own site. The site owner decides whose data goes in and what it is used for, so the site owner is the controller of their members' data. We process it only to provide the app to that site owner. If you are a member of a gym that uses the app, contact your gym first: it holds your records and can correct or delete them. We help the gym with any such request. ## What the app stores The app keeps its records in data collections on the site where it is installed. Only the site's administrators can read them, and every record is tied to that one site. - **Members:** the member's site member ID and contact ID, a member code, the display name, the time of the last visit, the number of visits in the last 30 days, status flags (at risk, plan ending soon, leaving, payment issue), whether the member counts toward the plan's member limit, and the ID of a signed waiver form, if the gym requires one. - **Visits:** for each check-in attempt, the member and contact IDs, the time and business date, the class session and booking IDs, whether entry was allowed and why, the ID of the staff member who recorded or overrode it, and the result of any later re-check. - **Settings:** the site's time zone, waiver rule, the day counts that define "at risk" and "ending soon", onboarding progress, and whether the site holds the early-adopter grant. - **Processed events:** the ID and type of each notification the app has handled, kept so the same notification is not acted on twice. These are deleted after 7 days. The app does **not** store email addresses, phone numbers, postal addresses or payment card details. ## What the app reads without storing To show the front desk and the member lists, the app reads from the site's own records at the moment they are needed: contacts and site members (to search and show names), membership plan orders (to check whether a plan is active), waiver form submissions, the class calendar, and the site's subscription to the app. These are read, not copied, except for the fields listed above. ## Emails to members On the Gym plan, at each admitted check-in, the app tells the site's automations the date on which the member will count as "at risk" if they do not come back, with their contact ID and last visit. An automation that emails the member on that date is installed **switched off**; the site owner reads it and switches it on. When it runs, the email is sent by the site's own automations, not by us. ## Who else receives data No one. The app runs on Wix's infrastructure and sends no data to any service outside it. We do not sell data, and we do not use it for advertising. Operational logs record errors and request IDs. Fields such as names, email addresses, phone numbers, addresses, contact IDs, tokens and payment details are removed before a line is written. ## How long data is kept Records stay in the site's collections while the app is installed, and **they stay after the app is removed**, so that reinstalling the app on the same site restores the full history. Nothing deletes them automatically, except processed events after 7 days. To have every record for a site deleted, the site owner emails info@upstal.com from the address on the site's account. We delete every record the app holds for that site, and no other site's records are touched. We reply within [number] days. ## Payments Payment for the app's paid plans is handled by Wix. We never see card details. ## Changes to this policy When the app starts storing something new, we update this page and the date at the top before the change is released. ## Contact Upstal Studio · 101/A, Barontek, Dhaka 1206, Bangladesh · info@upstal.com