Privacy Policy

There are two groups: gym owners and their staff who hold accounts with us, and gym memberswhose information gym owners enter into the platform. For member data, the gym is the principal deciding how the data is used, and GoBeyondGym processes it on the gym’s behalf.

• Account data (gym owners/staff): name, email, phone, password (stored securely, never in plain text), gym details, and plan/billing information.
• Member data (entered by gyms): member names, phone numbers, email, membership plans, payments, attendance/check-ins, and related notes.
• Usage and device data: basic logs and analytics needed to run and improve the service.

We use personal data to:

• provide and operate the platform (memberships, payments, attendance, reporting);
• send communications, including renewal reminders, receipts and updates — to gym owners and, on the gym’s behalf, to members (including via WhatsApp);
• process subscription billing and, for eligible gyms, GoBeyond Network earnings;
• keep the service secure and troubleshoot problems;
• comply with legal obligations.

To send notifications over WhatsApp, we use Meta’s WhatsApp Business Platform. Message recipients’ phone numbers and message content are processed through Meta for delivery, subject to Meta’s terms. Members can opt out of marketing messages as described in those messages.

We rely on trusted providers to run GoBeyondGym, including Supabase (database and storage hosting), Vercel (application hosting and analytics), Resend (email delivery), Groq (AI features), and Meta / WhatsApp (messaging). These providers process data only to provide their services to us.

We do not sell personal data. We share data only with the service providers above, when required by law, or to protect our rights and the safety of users. GoBeyond Network advertisers receive aggregate performance information, not your members’ personal details.

While a gym’s account is active, we keep the data needed to run the service. Once a member is archived as a former member, their personal details — name, phone, email, photo and date of birth — are kept for 24 months, after which the gym can erase them from its Settings. Erasure wipes those details from the member record and the check-in log and cannot be undone.

Payment records are kept longer, and deliberately.They are books of account, and Indian law requires them to be retained for up to 8 years (Income Tax Rule 6F, GST, and the Companies Act). Section 8(7) of the DPDP Act allows data to be kept where another law requires it, so a payment record — including the payer’s name on the invoice — survives an erasure request.

We do not erase data automatically on a timer. A gym decides when to erase a former member, so an archived member who returns does not silently lose their history.

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may withdraw consent for certain processing. Gym members should contact their gym first (the gym controls their data); gyms and account holders can contact us directly. To exercise any right, email us at the address below.

We use reasonable technical and organisational measures to protect data, including encrypted connections, access controls, and role-based access so revenue and sensitive data are limited to authorised users. No system is perfectly secure, but we take protection seriously.

The platform is sold to gym businesses, and its account holders are adults. Gyms do, however, enrol members under 18. Where a gym records a date of birth showing the member is under 18, GoBeyondGym requires the gym to name the parent or guardian who consented on that member’s behalf before the record can be created, as required by section 9 of the DPDP Act. We do not use children’s data for advertising, behavioural tracking, or profiling of any kind.

If you believe a child’s data has been recorded without a guardian’s consent, contact the Grievance Officer below and we will remove it.

We may update this policy; material changes will be notified. The “last updated” date above shows the current version.

Under the Digital Personal Data Protection Act, 2023, you have the right to an accessible way to raise a complaint about how your personal data is handled. Complaints go to:

Grievance Officer
Zaina Innovators LLP (GoBeyondGym)
Email: gobeyondgym@gmail.com
WhatsApp: +91 94963 27508

We aim to acknowledge every complaint within 72 hours and resolve it within 30 days. If you are a gym member, contact your gym first wherever possible — the gym decides what member data it collects and is the first point of accountability for it. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

For any privacy question or request, contact Zaina Innovators LLP at gobeyondgym@gmail.com.