1. Purpose, Scope & Applicable Products
GYMQOR values your privacy and is dedicated to safeguarding your personal data in full adherence with India's Digital Personal Data Protection (DPDP) Act 2023, Google Play Developer Policies, and Apple App Store Review Guidelines. This Privacy Policy governs data processing across the entire GYMQOR fitness ecosystem, including:
- GYMQOR Marketplace & Discovery Website: gymqor.com public directory and fitness discovery platform.
- GYMQOR Team / Staff Mobile App (Android package:
com.gymqor.team): Native mobile workflow client for gym owners, managers, receptionists, and trainers. - GYMQOR Member Mobile App (Android package:
com.gymqor.member): Native fitness companion for workout logging, digital QR check-in, and membership tracking. - GYMQOR Business Management Cloud SaaS: Web dashboard platform for gym operations, attendance, billing, and membership lifecycle administration.
2. Categories of Personal Data We Process
We adhere strictly to data minimization, collecting only information strictly necessary for fulfilling fitness services and gym operations:
- Inquiry & Lead Data: Name, phone number, and optional email submitted when discovering gyms, claiming free trial passes, or reaching verified trainers.
- Staff Operational & Attendance Data: Staff profile credentials, work shift assignments, and clock-in/clock-out timestamps to facilitate workplace shift management and internal operational logging.
- Member Access & Attendance Data: Cryptographically signed QR tokens scanned at gym entry gates to verify active membership access without exposing unneeded personal details.
- Health Connect & Apple Health Data: With explicit runtime consent,
com.gymqor.member reads daily step count, active calories burned, resting heart rate, sleep duration, and body composition. We adhere strictly to the Google Health Connect Developer Policy; health metrics are never sold or used for advertising. - Location Data (Cardio Workouts): When you initiate an outdoor run, walk, or cycling session, foreground GPS coordinates map your route and pace. Location is never tracked in the background.
- Camera Permission Usage: In
com.gymqor.team and com.gymqor.member, camera hardware access is requested solely for real-time scanning of member QR check-in passes and capturing optional profile portraits. Audio is never recorded (the RECORD_AUDIO permission is omitted from the applications). - Anonymous Diagnostic & Crash Telemetry: Anonymized application crash logs and performance vitals collected via Sentry. Telemetry strictly strips member names, phone numbers, payment amounts, and authorization tokens before transmission to ensure zero PII exposure.
3. Protection of Children & Minors (DPDP Act, 2023 §9)
GYMQOR strictly complies with statutory requirements for minor personal data under India's DPDP Act 2023 §9:
- Minimum Age & Verifiable Guardian Consent: Individuals between 14 and 17 years old require verifiable physical guardian consent collected on-premise at the fitness facility prior to account activation. Registration for children under 14 years of age is strictly prohibited.
- Zero Behavioral Tracking: We strictly prohibit behavioral profiling, targeted advertising, or predictive marketing directed at minor users.
- Physical Verification Minimization: Government identity documents of minors are verified on-premise by gym administrators and are never uploaded to or retained in cloud storage.
4. How We Process & Protect Data
Your data is processed exclusively for explicit operational and fitness purposes:
- Connecting consumers with selected gym facilities and personal coaches upon explicit user request.
- Enforcing Row-Level Security (RLS) and multi-tenant organizational isolation on all database records so no facility can access another gym's records.
- We do not sell, rent, monetize, or disclose personal telephone numbers or emails to third-party telemarketing networks or advertising data brokers.
5. Account Deletion, Retention & DPDP Statutory Rights
In accordance with India's DPDP Act 2023 and mobile store guidelines, all Data Principals have absolute ownership of their data:
- In-App Account Deletion: Users of
com.gymqor.team and com.gymqor.member can permanently delete their account directly within the app via Settings → Account Security → Delete My Account. - 30-Day Reversible Grace Period: To safeguard against accidental deletion or unauthorized requests, account deletion includes a 30-day grace period during which the account remains deactivated before permanent cryptographic erasure. Statutory billing records are archived strictly as required by Indian GST Act §36.
- Right to Erasure & Correction: You may request access, correction, or immediate erasure of any stored records by writing directly to our Data Protection Officer at privacy@gymqor.com.
6. Contact Information & Data Protection Officer
For privacy inquiries, grievance redressal, or data erasure requests, contact:
GYMQOR Data Protection Officer
Email: privacy@gymqor.com
Operational Headquarters: Jaipur, Rajasthan, India