The Gym Terminal — Privacy Policy

The Gym Terminal is committed to protecting the privacy of all users. This Privacy Policy explains what data we collect, how we use it, and your rights. This policy complies with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act).

Who This Policy Applies To

This policy applies to gym owners who subscribe to The Gym Terminal, gym staff and trainers who use the platform, and gym members who access the member portal.

Data We Collect

From gym owners: name, email address, phone number, gym name, address, branding details, and subscription information. From staff and trainers: name, email, and phone number. From gym members: name, phone number, photo, membership and attendance data, payment records, and body measurement data entered voluntarily.

How We Use Data

Member data is used solely to operate the gym management platform for the gym owner who added that member. We do not sell or share member data with any third party for advertising or marketing purposes.

Data Storage and Security

All data is stored on Google Firebase servers in the Mumbai, India region (asia-south1). Data is transmitted over HTTPS. Role-based access controls ensure users can only access data appropriate to their role.

Data Retention and Deletion

We do not keep data longer than necessary. When a gym owner closes their account, a complete data export is emailed to them as a secure download link, and all gym data is retained for exactly 7 days so the account can be restored. After that window, all gym data, member and staff records, uploaded files, and every associated login are permanently and irreversibly erased. No backups are kept beyond it.

Individual member, trainer and staff records deleted by a gym owner follow the same 7-day recovery window before permanent erasure, including photos and uploaded ID proofs. Members who delete their own profile from the Member Portal can restore it within 7 days by logging in with the same credentials.

Payment and transaction records are retained beyond these windows, reduced to the minimum necessary fields, solely to meet Indian taxation and accounting obligations.

Your Rights Under DPDP Act 2023

You have the right to access, correct, and request deletion of your personal data. To exercise these rights, contact us at support@thegymterminal.com. We will respond within 72 hours.

Contact

For privacy-related concerns: support@thegymterminal.com