Privacy Policy

This Privacy Policy explains what personal data FitHub collects, why, and how it's used, for Gym staff and Members using the web dashboard or mobile app.

1. Data we collect

For Members, this includes:

• Contact and identity details entered at enrollment — name, email, phone number.
• Membership and payment records — plan, price, payment status, receipts.
• Attendance and class booking history, and progress measurements you choose to log.
• A profile photo, if you upload one.
• A push-notification token, if you enable notifications on the mobile app.
• Door-lock unlock/lock requests, where your Gym uses FitHub-connected locks — including which device, when, and the outcome.

For Gym staff, we collect the account details needed to operate the dashboard — name, email, and role.

2. Why we collect it

Data is collected to run the core features of the Service: enrolling and billing members, scheduling and booking classes, tracking attendance and progress, sending reminders, and operating door access where installed. We do not sell personal data.

3. Who we share it with

Data is shared only with the service providers that power specific features, and only as needed to provide them:

• Payment processing for a Gym's own FitHub subscription, via our payment processor.
• Push notifications, via Firebase Cloud Messaging.
• Transactional email (renewal and class reminders, password resets), via our email provider.
• SMS reminders, via our SMS provider, where a phone number is on file.
• Error monitoring, which may capture technical details of a failure (not routine personal data) to help us fix bugs.

Data entered under a Gym's account is only visible to that Gym's own staff and trainers — Gyms cannot see another Gym's members or data.

4. Data retention

We keep membership and payment records for as long as the Gym's account is active, and for a reasonable period after to satisfy financial record-keeping obligations. See our data deletion page for how to request removal of your data.

5. Security

Passwords are stored hashed, not in plain text. Access to a Gym's data is restricted to that Gym's authenticated staff, trainers, and members, scoped by role. Door-lock devices authenticate with a long-lived secret token rather than a member credential.

6. Your rights

You can review and correct your profile details from the mobile app, or by asking your Gym's staff. You can request a copy or deletion of your data at any time — see the data deletion page.

7. Children

The Service is intended for use by adults enrolling in a Gym's membership. Gyms are responsible for obtaining appropriate consent when enrolling a minor.

8. Changes to this policy

We may update this policy as the Service evolves. Material changes will be reflected here with an updated date.