Privacy Policy

Introduction

This privacy policy applies to Gymio (the “App”), the Android application published on Google Play under the package name com.shamil.gymio by Shamil (“we,” “our,” or “us”).

Gymio is gym management software. Gym owners use it to manage their members, attendance and membership fees; members use it to check in and to see their own membership. By using the App you agree to this policy.

Information we collect

Information you give us

• Name and phone number — used to create your account. Your phone number is also how you sign in.
• Password — stored only as a secure one-way hash. We cannot read it.
• Profile photo and progress photos — optional. The App works fully without them.
• Messages you send us through the in-app contact and feedback screen.

Information created as you use the App

• Attendance records — the date and time you check in and out by scanning your gym's QR code.
• Membership and payment records — the plan, amount, date and method of payments your gym records for you.

Information from the gym

• Gym details — name, address, fee, and optionally the gym's map coordinates, all typed in by the gym owner.

How we use your information

• To create and run your account, and to sign you in.
• To show your gym its members, attendance and payment records.
• To show you your own membership status, history and photos.
• To reply to messages you send us.
• To keep the service secure — for example, limiting repeated failed sign-in attempts.

We do not use your data for advertising or marketing, and we do not sell it.

Payments

Gymio does not process payments and never handles card or bank details. Your gym collects membership fees directly from you, by whatever means it chooses, and records the amount and date in Gymio so your membership is extended. Gymio stores that record only — never a payment instrument.

Who can see your information

Access is limited by role:

• You can see your own profile, membership, attendance, payments and photos.
• Your gym's owner can see the members of their own gym. Gyms cannot see each other's members.
• We can access data where necessary to operate and support the service.

We share data with third parties only in these cases:

• Service providers that run the service on our behalf — cloud hosting for the server and database, and cloud object storage for photos. They process data only to provide that service.
• Legal requirements — where we are required by law to disclose it.

We do not sell or rent your personal information to anyone.

Security

• All traffic between the App and our servers is encrypted with HTTPS. The App additionally pins our server's certificate, so it refuses to talk to an impostor server.
• Passwords are stored only as one-way hashes.
• Sign-in sessions use short-lived tokens that expire and can be revoked.
• Access is scoped by gym at the server, so one gym cannot read another's data.
• Repeated failed sign-in attempts from the same address are rate limited.

No service can promise perfect security, but we take these measures seriously and fix problems as we find them.

Your rights and choices

• Access — your profile, payments and attendance are visible in the App at any time.
• Correction — you can edit your name and phone number; your gym can correct membership records.
• Deletion — you can delete your account and associated data. See below.
• Photos — you can delete any progress photo yourself, at any time, without deleting your account.

Account and data deletion

You can ask us to delete your account and its data at any time, either from Settings → Contact & feedback in the App, or by emailing shamilpp4115@gmail.com with the phone number registered on your account.

When an account is deleted we permanently remove the name, phone number and password; the profile photo and all progress photos, including the image files themselves; attendance history; membership payment records held in Gymio; messages sent to us; and all sign-in sessions. Deletion is completed within 30 days and cannot be undone.

Your gym is a separate business and may keep its own records of your membership, for example for its accounts or for tax purposes. Those records belong to the gym, not to Gymio. Contact your gym about anything it holds.

Full deletion instructions →

Data retention

We keep your information for as long as your account exists, so that your gym has a continuous record of your membership. Once you delete your account, the data listed above is removed and there is no additional retention period.

Children's privacy

Gymio is intended for adults — gym owners and their members. It is not directed at children, and we do not knowingly collect information from children. Where a gym admits younger members, their parent or guardian is responsible for that membership and any information provided. If you believe a child has given us personal information, contact us and we will delete it.

International data transfers

Gymio is operated from India and used by gyms in other countries. Your information may be stored and processed on servers outside your country, including in India. By using the App you consent to that transfer.

Analytics and crash reporting

The App uses Google Analytics for Firebase and Firebase Crashlytics to understand which screens are used and to be told when the app crashes. What is sent is limited to: the screens you open and how long you spend on them, your account type (member, owner or developer), your numeric account ID, and — if the app crashes — the error, your device model, OS version and app version.

Your name, phone number and any gym or plan names are never sent to these services, and neither are payment amounts. The numeric account ID is an internal number; it is not your phone number. This data is processed by Google as our processor, and we do not use it for advertising or sell it to anyone. It is cleared when you sign out.

The App uses no cookies and no advertising trackers, and stores your sign-in tokens and preferences on your own device so you do not have to sign in every time. This website uses no cookies and no analytics.

Changes to this policy

We may update this policy as the App changes. The date at the top shows when it was last revised. Significant changes will be notified in the App or by updating this page before they take effect.

Contact us