Privacy Policy

Who we are

Gym World is a training app by Aman Sharma ("we"). Questions about this policy: gymworldbyamansharma@gmail.com.

What we collect

• Account: your display name, username and a one-way hash of your password. We never store the password itself.
• Training data you enter: routines, workouts, sets and weights, body weight, and the settings you choose.
• About-you details you choose to give: age, height, body-diagram preference, current and goal weight, training goal, the physique you are aiming for, body type, experience, training days, and notes for your trainer. Every one of these is optional.
• Subscription details: which plan you are on and until when. Payments are processed by Razorpay; we receive the order and payment identifiers and the amount, never your card or bank details.
• Technical data: the time of your sign-ins and syncs, and standard server logs (IP address, browser type) kept by our hosting provider for a limited time.
• Optional AI Coach: only if you turn it on and consent separately in the app, an anonymised summary of your plan and training is sent to the AI provider shown at that moment. Your name, username and account identifiers are never included.

We do not collect location, contacts, photos or advertising identifiers, and we do not use advertising or tracking SDKs.

Gym World Business (the staff app)

Gym World Business is the app your gym's owner and staff use to run the gym. It is only for accounts the gym creates for its staff. It keeps the gym's register on the same servers:

• Member register: name, mobile number, and optionally gender, date of birth, address, emergency contact, fitness goal, health notes and how you found the gym, as entered by the gym's staff.
• Membership and money: your plan and its dates, charges, payments (amount, cash/UPI/card, reference, date), freezes, personal-training packages, class bookings and counter purchases.
• Visits: the days you checked in.
• Staff accounts: name, username, mobile number, role, and a one-way hash of the password. Every change a staff member makes is logged with their name, so the gym can check its own records.
• WhatsApp and UPI: reminders and receipts open WhatsApp on the staff member's phone with the message ready; they are sent from the gym's own WhatsApp, not by us. UPI payment links open your own UPI app and pay the gym directly. We never see your UPI or bank details.

The gym uses this information to manage memberships, fees, attendance and training. It is not shared with other gyms and not used for advertising. To see, correct or delete your entry in a gym's register, ask the gym, or email us and we will pass the request to the gym.

Why we use it

• To run the service: keep your account, sync your data between your devices, show your progress.
• To let your trainer at your gym see your training, plan and about-you details so they can coach you. The gym's administrator can see every member's data.
• To manage your subscription and unlock the features you paid for.
• To send workout reminders and rest-timer alerts if you turn notifications on.

Who processes it for us

• Google Cloud (Cloud Run and Cloud Storage, region Mumbai asia-south1) hosts the server and stores your data; Firebase Hosting serves the web app.
• Razorpay processes payments under its own privacy policy.
• Cloudinary stores and delivers exercise images and videos uploaded by the gym. Your personal data is not sent there.
• jsDelivr delivers the built-in exercise pictures and animations. It receives only the standard request data any content network receives.
• The AI provider you consent to, if you use the Coach.

We do not sell your data and do not share it with anyone else, except where the law requires.

How long we keep it

For as long as your account exists. Backups are kept for up to 30 days. Server logs are kept for up to 30 days.

Your choices and rights

• Export: Settings → Data → Export backup gives you everything in a single file.
• Delete: Settings → Account → Delete account removes your profile and all its data from our servers immediately. You can also email us and we will delete it within 7 days.
• Correct: every detail can be edited in the app. Ask us for anything you cannot change yourself.
• Notifications: can be turned off at any time in Settings or in your device settings.

Children

Gym World and Gym World Business are meant for people aged 18 and over. If you believe a younger child has an account, contact us and we will remove it.

Security

Data travels encrypted (HTTPS). Passwords are stored as scrypt hashes. Access to the servers is limited to the gym's administrator. No system is perfectly secure; tell us at once if you suspect a problem.

Changes

We will post any changes here and update the date above. Significant changes will be announced in the app.