Last updated 16 September 2026

Privacy Policy

GymZen is run by an individual developer, contactable at pdev4855@gmail.com. This policy covers the GymZen Android app and the API behind it.

Who the data belongs to

Two different people appear in GymZen. The gym owner or trainer is our user: they sign up and we hold their account. Their gym members are their customers — we store those records only on the gym's behalf, and the gym decides what goes in them and how long they stay.

What we collect

Your account. Your name and email address from Google Sign-In (or the email and password you register with), and your gym's name, address, phone and logo if you add them. We never receive your Google password.
What you enter about your members. Name, phone number, an optional photo, and their plan, payments, attendance and — where you use them — workout plans, diet charts, body measurements and progress photos.
Your business records. Invoices, payments, expenses and enquiries you record in the app.
Basic technical logs. Request method, path, response status and timing, kept to find faults. Signed links are logged without their tokens, and we do not build a profile from these.

We do not collect location, contacts, calendar, or the content of your device. The app has no advertising or analytics SDK in it, and there are no third-party trackers on this website.

How it is used

To run the service you asked for: showing your members, working out who is due for renewal, producing bills and reports, and sending the reminder emails you choose to send. We do not sell your data, we do not share it with advertisers, and we do not use it to build profiles.

Where it is stored

Database: Supabase (PostgreSQL), hosted in Mumbai, India.
Photos: member photos, gym logos and expense receipts live in private storage buckets — never public. The app reaches them through links that expire after an hour.
Sign-in: handled by Supabase Auth. Members of a gym are not given accounts at all; a member signs in to the attendance app with a password held only as a scrypt hash.
Server: the API runs on Render.

Every record is tied to one gym and the server scopes each query to the gym of the signed-in account, so one gym cannot read another's data.

Artificial intelligence

The optional drafting features (workout plan, diet chart and "Ask GymZen") send a short prompt to Anthropic's Claude API. That prompt contains the goal, level and any note you type, and for Ask GymZen your gym's totals — member counts, revenue, dues and check-in counts. Member names, phone numbers and photos are removed before anything is sent, and Anthropic does not use API data to train its models. If you never open those screens, nothing leaves for them at all.

Notifications

Reminders are scheduled locally on your own device (at most two a day) and can be turned off in Settings. There is no push service and no notification data on our servers.

Keeping and deleting data

Your data stays as long as your account does. You can delete any member, payment or photo from the app yourself.

To delete your whole account — your gym or trainer profile, its members/clients and every record and photo attached to them — open the app, go to Settings → Delete account, and confirm twice. This is instant and permanent: there is no grace period and no way for us to recover it afterwards. If you can't get into the app, email pdev4855@gmail.com from the address you signed up with and we'll do it for you. Anonymous, aggregate figures we keep for billing and abuse-prevention records contain nothing that identifies you or your members.

Your rights

Write to pdev4855@gmail.com to get a copy of your data, correct it, or have it deleted. If you are a gym member rather than a gym owner, contact your gym first — they control their records — and us if that does not resolve it.

Children

GymZen is for gym owners and trainers and is not directed at children under 13. A gym may record a member who is a minor; that record is the gym's to manage, under its own consent from the member's parent or guardian.

Changes

If this policy changes materially we will update the date at the top of this page and, where the change affects you, say so in the app.