Privacy Policy for GymPulse
Last Updated: May 6, 2026
1. Introduction
This Privacy Policy describes how GymPulse ("we", "us", or "our"), developed by Heera Labs, collects, uses, and protects your information when you use the GymPulse mobile application ("App").
This policy applies to all users of the GymPulse mobile application, including gym owners and gym members.
Contact: heeralabs.dev@gmail.com
2. Information We Collect
a) Information you provide:
- Phone number (for account authentication)
- Full name (for gym membership identification)
- Gym name and address (for gym owners during registration)
b) Information collected automatically:
- Attendance records (date and time of gym check-ins)
- Payment records (amount, date, method — as entered by gym owner)
- Membership status and plan information
c) Device permissions:
- Camera: Used ONLY for scanning QR codes during gym check-in. No photos or videos are captured or stored. Camera access can be revoked at any time via device settings.
3. How We Use Your Information
- Authenticate your identity
- Display your membership status
- Record gym attendance via QR code scanning
- Enable gym owners to manage memberships and payments
We do NOT:
- Use your data for advertising
- Sell your data to third parties
- Use your data for profiling or automated decision-making
4. Data Storage & Security
- Data is stored on Supabase (cloud infrastructure hosted on AWS)
- All data is transmitted via HTTPS/TLS encryption
- Database is protected by Row Level Security (RLS) policies
- Users can only access their own gym's data
- Passwords and PINs are stored as salted hashes (never in plain text)
5. Data Sharing
- Gym owners can see: member names, attendance, and payment status for their gym only
- Members can see: only their own data
- We do NOT share data with any third parties
- We do NOT use third-party analytics or advertising SDKs
- Service providers: Supabase (database hosting), Expo (build infrastructure only — no user data access)
6. Data Retention
- Account data is retained while your account is active
- Attendance and payment history is retained for gym record-keeping purposes
- Upon account deletion: all personal data is removed within 30 days
7. Your Rights
- Access: View all your data within the app
- Correction: Contact your gym owner to update your details
- Deletion: Request account deletion by contacting us at heeralabs.dev@gmail.com
- Portability: Request a copy of your data by emailing heeralabs.dev@gmail.com
8. Children's Privacy
- GymPulse is intended for users aged 13 and above
- We do not knowingly collect information from children under 13
- If we discover data from a child under 13, we will delete it promptly
- Minors aged 13–17 should use the app with parental awareness
9. Changes to This Policy
We may update this policy periodically. Changes will be posted at this URL with an updated "Last Updated" date. Continued use of the app constitutes acceptance of changes.
10. Contact Us