Privacy Policy

Gymora ("Gymora", "we", "us") provides a gym-management platform to gym owners and operators. This Privacy Policy describes the personal data we handle when a gym uses Gymora, and applies to our website and platform. We operate from 364 E Block, Pak Arab Housing Society, Lahore, Pakistan.

Data we collect

Gym owner & staff accounts. When you register a gym, we collect the account holder's name, email address (used to sign in), and a securely hashed password. Staff accounts added by the gym include their name and role.

Gym member data (entered by the gym). Gyms use Gymora to manage their own members. This may include a member's name, date of birth, gender, CNIC, photo, phone number, email, address, membership and payment records, and attendance/access identifiers (the numeric user ID, card number, or PIN used by the gym's attendance device). We do not store raw fingerprint or biometric templates — those remain on the gym's own attendance hardware.

How we use data

• To provide and operate the Gymora platform for the gym.
• To process the gym's subscription billing and send receipts.
• To send service and member notifications the gym configures (e.g. expiry and payment reminders).
• To provide support, maintain security, and improve the service.

How data is protected

Data is transmitted over encrypted connections (HTTPS). Account passwords are stored using strong one-way hashing (Argon2) and are never stored in plain text. Each gym's data is logically isolated so one gym cannot access another gym's data.

Service providers we share data with

We use a small set of trusted providers strictly to operate the service:

• PayFast — to process subscription payments.
• Resend — to deliver transactional and notification emails.
• Meta (WhatsApp Business API) — to deliver WhatsApp notifications to the gym's members.
• The gym's own ZKTeco attendance devices — for check-in and access control.
• Sentry — for error monitoring to keep the platform reliable.
• Our hosting infrastructure — to run and store the application securely.

We do not sell personal data.

Data ownership & your rights

The gym owns the member data it enters into Gymora; we process it on the gym's behalf. You may request access to, correction of, or deletion of your data by contacting us. Deletion requests are actioned on request.

Data retention

We retain data for as long as the gym's account is active. If a subscription lapses, the gym is deactivated but its data is retained so it can be restored on reactivation, unless deletion is requested.

Contact

Questions about this policy? Email support@gymora.live or write to us at 364 E Block, Pak Arab Housing Society, Lahore, Pakistan.