GymOS Privacy Policy
Last updated:
GymOS is a gym management platform used by gym staff and their members. This policy explains what information GymOS collects, why it is collected, and how it is handled.
1. Who this applies to
This policy covers the GymOS mobile app (used by gym members) and the GymOS dashboard (used by gym staff).
If you are a gym member, the gym that enrolled you is your point of contact. GymOS is the software platform your gym uses to run its membership; it is not a service you sign up for independently of your gym.
2. Information we collect
| Category | What | Why |
|---|---|---|
| Identity | Name, phone number, optional email address, optional date of birth | Creating your account, signing you in with a one-time code sent to your phone, and identifying you at check-in |
| Profile photo | A profile picture, if you add one | Shown to gym staff so they can identify you |
| Safety | Emergency contact, if you provide one | Made available to gym staff only in an emergency |
| Fitness onboarding | The goal and experience level you select when you first set up the app | Personalising the plan suggested to you |
| Body measurements | Weight and body measurements (waist, chest, hips, arms, thighs) that you choose to log, and any note you attach to an entry | Showing you your own progress over time. Entirely optional — the app works without logging any of it |
| Progress photos | Photos you choose to attach to a progress entry | Showing you your own progress over time. Private to you by default; shared with your assigned coach only for the specific photos you choose to share, and you can stop sharing a photo at any time |
| Attendance | Check-in and check-out times at your gym | Gym occupancy tracking and your own attendance history |
| Classes and training | Class bookings, and which exercises in your plan you mark as done | Running class capacity and showing you and your coach your training progress |
| Payments | Payment amount, currency, method and status | Billing and subscription management. We do not store your card number or any other raw payment credential — payments are processed by our payment partner, Tara Money, who handles that data directly |
| Coach notes | Session notes written by your assigned coach, if your gym uses coaching | Shared between you, your coach, and the gym staff who need them for your training |
| Notifications | A push token identifying your device, your notification preferences, and a history of the notifications sent to you | Delivering and displaying app notifications such as subscription reminders and payment confirmations |
We do not collect your location or GPS data, your contacts, your calendar, your browsing or search history, or any audio or microphone data.
3. Analytics and error reporting
The mobile app reports a small, fixed set of product-analytics events to PostHog: that the app was opened, that a progress entry was logged, and that a plan exercise was marked complete. These events deliberately carry no measurement values, no photos, no note text, and no name, phone number or email address — a progress entry, for example, is reported only as whether a weight was included and how many measurements were filled in, never the numbers themselves. The app does not tell PostHog who you are; the events are tied to an anonymous identifier generated on your device.
The app also reports crashes and technical errors to Sentry, so that a fault can be diagnosed and fixed. These reports contain technical diagnostic information — the error itself, the device model and operating system version — and are configured not to attach personal information.
4. Who we share information with
- Tara Money — our payment processor, to complete a payment you initiate.
- Expo — our push notification infrastructure, to deliver notifications to your device.
- Our messaging providers (Evolution API, Twilio and sent.dm) — to send the one-time code you use to sign in, and membership invitations, to your phone number.
- PostHog — for the limited, anonymous product analytics described above.
- Sentry — for the crash and error reports described above.
- Supabase — our hosting and database provider, which stores the information above on our behalf.
- Your gym — gym staff (owners, managers, receptionists and coaches, according to their role) can see the information relevant to running your membership and your training, and nothing beyond their role.
We do not sell your information, and we do not share it for advertising or third-party marketing purposes.
5. How long we keep information
We keep your information for as long as your membership is active, and for one year after it ends.
Attendance, payment and audit records may be kept for longer where we are required to retain them for financial or legal record-keeping.
6. Your choices and your rights
You can update your profile details, your progress entries, your notification preferences and your language directly in the app. You can stop sharing a progress photo with your coach at any time.
To request a copy, a correction, or the deletion of your information, contact your gym, or write to us at hello@gymosapps.com. There is no in-app delete button today: deletion requests are handled manually. Tell us the phone number your account uses and which gym you belong to, and we will confirm your identity with your gym, delete the information we are not legally required to keep, and confirm to you when it is done.
Some records cannot be deleted on request — payment and audit records we are required to retain for financial or legal record-keeping. Where that applies, we will tell you what was kept and why.
7. Children's privacy
GymOS is not directed at children under 18, and we do not knowingly collect information from children below that age. If you believe a child has provided us with information, contact us at hello@gymosapps.com and we will delete it.
8. Security
Information is encrypted in transit using HTTPS/TLS, and encrypted at rest by our hosting provider. Payment credentials belonging to a gym are held in an encrypted secrets store and are never returned to any app.
Access is restricted by role and by gym: staff can only see information belonging to their own gym, and only the parts their role requires. Progress photos are stored in a private location and are reachable only through short-lived links issued to you, or to a coach for a photo you have chosen to share.
9. Changes to this policy
We may update this policy from time to time. When we do, we will change the date shown at the top of this page. If a change materially affects how your information is used, we will make that clear in the app.
10. Contact us
GetSocial Inc
Yaoundé, Melen
hello@gymosapps.com