Privacy Policy for Organised Gym

1. Introduction

Organised Gym ("we," "our," or "us") operates a comprehensive gym management platform designed to streamline operations for fitness facilities across India. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our website, mobile applications, and related services (collectively, the "Service").

By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when you register for an account, use our Service, or communicate with us. This may include:

• Account Information: Name, email address, phone number, business name, gym address, and other contact details
• User-Uploaded Media: Profile photographs and payment-related images or screenshots uploaded by users as proof of fee payments or for profile personalization. Such media may contain personal or financial information and is collected solely to provide core Service functionality.
• Member Data: Information about gym members including names, contact details, membership details, attendance records, payment history, and health information (where applicable)
• Staff Information: Employee names, roles, contact information, and performance data
• Payment Information: Billing details, payment methods, transaction history, and financial records
• Content: Workout plans, diet plans, feedback, complaints, and other content you create or upload
• Communication Data: Records of your communications with us, including support requests and feedback

2.2 Information Automatically Collected

When you use our Service, we automatically collect certain information about your device and usage patterns:

• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
• Usage Data: Pages visited, features used, time spent on the Service, click patterns, and navigation paths
• Location Data: General location information based on IP address or GPS data (with your permission)
• Log Files: Server logs, error reports, and system performance data

2.3 Information from Third Parties

We may receive information about you from third-party services, including:

• Payment processors and financial institutions
• Authentication providers (e.g., Google, Apple)
• Analytics and marketing partners
• Business partners and service providers

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our gym management platform, including QR-based attendance tracking, fee management, member management, and AI-powered features
• Account Management: To create and manage your account, process transactions, and handle billing
• Communication: To send you service-related notifications, updates, security alerts, and respond to your inquiries
• Personalization: To customize your experience, provide relevant content, and improve our AI diet planner and workout recommendations
• Analytics: To analyze usage patterns, monitor performance, and generate insights to enhance our Service
• Security: To detect, prevent, and address fraud, security threats, and unauthorized access
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Business Operations: To conduct research, develop new features, and support business operations

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We engage third-party service providers to assist with operations, including cloud hosting, payment processing, analytics, customer support, and email delivery. These providers are contractually obligated to protect your information and use it solely for the purposes we specify.

4.2 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users or others.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

5. Data Security

We implement industry-standard security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure data centers with physical and logical safeguards
• Employee training on data protection and privacy
• Incident response procedures and breach notification protocols

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

7. Your Rights and Choices

Under applicable data protection laws, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you have certain rights regarding your personal information:

• Access: Request access to your personal information and receive a copy of the data we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal and contractual obligations
• Portability: Request transfer of your data to another service provider in a structured format
• Objection: Object to processing of your information for certain purposes
• Withdrawal of Consent: Withdraw consent where processing is based on consent
• Opt-Out: Opt out of marketing communications and certain data processing activities

To exercise these rights, please contact us at the information provided in the "Contact Us" section below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than India, where data protection laws may differ. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: