Privacy Policy

01Who we are

Gymmey is operated by BITBINES TECHNOLOGY PRIVATE LIMITED, India ("Gymmey", "we", "us"). This policy covers https://gymmey.crivo.space, our member and owner/staff applications, and related support and business communications. Our privacy contact is admin@bitbines.com.

Gymmey supplies gym-management software. Your gym separately decides how it manages memberships, attendance, training and its communications with you. For those records, we process information to provide the gym with the service; the gym also has its own privacy responsibilities. For our own accounts, platform security and support, Gymmey determines the relevant processing purposes. The exact legal roles depend on the service and applicable law.

02Information we process

The information involved depends on which features you or your gym use. It may come from you, your gym and its authorised staff, or the providers supporting the service.

• Account and profile information: name, mobile number and country code, email, profile image, date of birth where supplied, account role, and authentication/session records.
• Gym records: gym details, membership plans and dates, attendance/check-ins, assigned staff permissions, and support requests.
• Fitness information: assigned workouts, recorded exercise sessions and progress, diet plans and related information you or your gym provide. These records can be sensitive; share only what the feature needs.
• Billing records: invoices, amounts, currency, payment method, status and transaction references. Where an online payment provider is used, its own checkout and privacy terms apply.
• Business communications: phone number, message content or attachments you send to us, notification content, delivery attempts, timestamps and status information available from the messaging provider.
• Technical information: request and security logs, device/session identifiers and website performance information. Nearby-gym search can use a location you enter or a device location you choose to share.

03Why we use information

We use information to authenticate accounts, provide gym-management and member features, maintain membership and billing records, deliver requested communications, answer support requests, troubleshoot performance, prevent misuse and meet applicable legal obligations.

Where a legal basis is required, it depends on the purpose: providing a requested service, complying with law, permitted security and operational interests, or consent where required. Accepting this policy is not a blanket permission for unrelated marketing. If you choose not to provide information essential to a feature, that feature may not work.

04Optional Apple Health and Health Connect access

Gymmey Member offers optional, read-only access to Apple Health on iOS and Health Connect on Android. With your permission, it reads steps, active calories, distance, heart rate and resting heart rate, respiratory rate, oxygen saturation, sleep and exercise sessions to display your personal activity totals, trends and fitness progress. You choose the available categories in the operating-system permission screen. Gym features remain available without this connection.

These connected health readings are processed on your device. Gymmey does not upload them to its servers, share them with your gym or third parties, sell them, or use them for advertising, marketing, credit decisions or data brokerage. Gymmey does not write or modify your Apple Health or Health Connect records. Workouts, exercise progress and diet records entered in Gymmey are separate gym-service records and follow the other sections of this policy.

A summary is cached in secure local storage for the signed-in account. The cache is associated with your signed-in account, is not displayed to other accounts, and remains locally until replaced by a refreshed summary or cleared from device storage. You can revoke access in Apple Health or Health Connect settings at any time, and manage or delete the original records there. Removing permission does not delete the original health records from those services.

Gymmey Member is for fitness and general wellness awareness. It is not a medical device and does not diagnose, treat, cure or prevent medical conditions. Readings may be incomplete or delayed. Consult a qualified healthcare professional for medical advice.

05WhatsApp and your choices

Where WhatsApp messaging is enabled, Gymmey or your gym may use it for requested account, membership, payment or support updates. Business-initiated messages require the necessary opt-in; adding a phone number to a membership record alone is not WhatsApp marketing consent. Promotional messages require permission covering that purpose.

To withdraw messaging permission, contact the sending gym or email admin@bitbines.com with the number concerned and the messages you want stopped. You can also block the sender in WhatsApp. Gymmey opt-out requests are handled through our support team. A messaging opt-out does not itself cancel your membership or delete records.

WhatsApp/Meta and any configured messaging service provider process the recipient number, message content and delivery information needed for business messaging under their applicable terms. Authorised business staff may access business communications. This is not access to your unrelated private WhatsApp conversations. WhatsApp features depend on availability and the integration enabled for the service.

Please do not send passwords, login codes, full card or bank-account details, government ID numbers, medical reports or other unnecessary sensitive information in chat. Use the appropriate secure account or payment flow instead.

Related provider notice: WhatsApp Privacy Policy.

06Who information is shared with

Relevant records are available to your gym and its authorised staff according to their assigned access. Providers supporting hosting, file storage, messaging, payments and diagnostics may process the information needed to perform those services. Website performance monitoring uses the Vercel Speed Insights integration where supported by the deployment.

We may disclose information where required by law or reasonably necessary to investigate misuse, protect safety or establish and defend legal rights. Providers and gyms have their own responsibilities for information they handle. Information you choose to share directly with another service is also subject to that service’s privacy policy.

Depending on the provider and service configuration, information may be processed outside your country, including outside India. Applicable transfer requirements and safeguards must be respected. Contact us for information about the providers involved in a particular service.

07Browser storage and device permissions

The website and apps use local storage or similar mechanisms for relevant preferences and account sessions. Your browser or operating system lets you clear stored information and manage permissions. Clearing credentials may sign you out.

Camera, photos and location are used only for relevant features, such as QR check-in, an image you choose to upload or nearby-gym search, subject to device permissions. You can revoke a permission in device settings; features that depend on it may stop working.

08Retention and security

Retention depends on the record and its purpose, including an active account or membership, support needs, accounting obligations, security and disputes. Some gym records are managed on the gym’s instructions. Account closure does not necessarily remove invoices, audit records or other information that must lawfully be retained.

Deletion may involve removing or de-identifying records, while retained records and backup copies remain subject to their applicable purpose and retention requirements. Contact us for information about the retention of a particular record.

The platform uses controls such as authenticated access and staff permissions. No online service can guarantee absolute security. Keep account credentials private and report suspected unauthorised access to our support email.

09Your rights and data-deletion requests

To request access, correction, account deletion, deletion of business-message data, or withdrawal of consent, email admin@bitbines.com. For deletion, use the subject “Gymmey data deletion” and identify your account using its registered email or mobile number (with country code), your gym, and whether you want specific data or the whole account removed. Do not include a password or one-time code.

We may ask for proportionate information to verify your identity before disclosing or changing records. We will assess the request, explain any information that needs to be retained and why, and respond within the period required by applicable law. Where your gym controls a record, we may need to coordinate with it or direct your request to it.

Available rights and exceptions depend on applicable law and can include access, correction, erasure, objection, restriction or portability. You may contact us about a privacy concern and exercise any right to complain to a competent authority. Deleting Gymmey data does not delete your WhatsApp account or copies independently held by other recipients or providers; contact those services separately.

10Children and sensitive information

If a gym provides services to a minor, the gym must establish the permissions and safeguards required by applicable law, including parental or guardian involvement where necessary. Contact us if you believe information was submitted without the required authority. Gymmey is not a medical-record service; avoid uploading information that is unnecessary for gym administration or training.

11Changes and contact

We may update this policy as the service or applicable requirements change. The date at the top identifies the latest revision. Where required, material changes will be communicated and new consent requested. For privacy questions, complaints or help exercising your choices, contact BITBINES TECHNOLOGY PRIVATE LIMITED at admin@bitbines.com.