Privacy Policy

There are two groups: gym owners and their staff who hold accounts with us, and gym memberswhose information gym owners enter into the platform. For member data, the gym is the principal deciding how the data is used, and GoBeyondGym processes it on the gym’s behalf.

• Account data (gym owners/staff): name, email, phone, password (stored securely, never in plain text), gym details, and plan/billing information.
• Member data (entered by gyms): member names, phone numbers, email, membership plans, payments, attendance/check-ins, and related notes.
• Usage and device data: basic logs and analytics needed to run and improve the service.

We use personal data to:

• provide and operate the platform (memberships, payments, attendance, reporting);
• send communications, including renewal reminders, receipts and updates — to gym owners and, on the gym’s behalf, to members (including via WhatsApp);
• process subscription billing and, for eligible gyms, GoBeyond Network earnings;
• keep the service secure and troubleshoot problems;
• comply with legal obligations.

To send notifications over WhatsApp, we use Meta’s WhatsApp Business Platform. Message recipients’ phone numbers and message content are processed through Meta for delivery, subject to Meta’s terms. Members can opt out of marketing messages as described in those messages.

We rely on trusted providers to run GoBeyondGym, including Supabase (database and storage hosting), Vercel (application hosting and analytics), Resend (email delivery), Groq (AI features), and Meta / WhatsApp (messaging). These providers process data only to provide their services to us.

We do not sell personal data. We share data only with the service providers above, when required by law, or to protect our rights and the safety of users. GoBeyond Network advertisers receive aggregate performance information, not your members’ personal details.

We keep data for as long as your account is active and as needed to provide the service and meet legal and accounting obligations. You can request deletion of your account data; some records may be retained where the law requires.

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may withdraw consent for certain processing. Gym members should contact their gym first (the gym controls their data); gyms and account holders can contact us directly. To exercise any right, email us at the address below.

We use reasonable technical and organisational measures to protect data, including encrypted connections, access controls, and role-based access so revenue and sensitive data are limited to authorised users. No system is perfectly secure, but we take protection seriously.

The platform is intended for gym businesses and adults. We do not knowingly collect data from children except where a gym enters a member’s details with appropriate consent.

We may update this policy; material changes will be notified. The “last updated” date above shows the current version.

For any privacy question or request, contact Zaina Innovators LLP at gobeyondgym@gmail.com.