Privacy Policy

GymNerve is a gym management platform for gyms and fitness studios in India. This policy explains what we collect from a gym that signs up (the "account owner"), from the staff they add, and from the members that account tracks — and what we do, and don't do, with any of it.

Account and staff data: the gym's name, the owner's contact details, and the login details of any staff accounts the owner creates.

Member data: whatever the gym enters or imports about its own members — names, phone numbers, membership plans, attendance check-ins, and payment/receipt history. This data belongs to the gym; we process it on the gym's behalf.

Payment data: card and UPI payments are handled entirely by Razorpay, our payment processor. We never see or store full card numbers — we only receive confirmation that a payment succeeded and a reference we use to reconcile it against the ledger.

Usage and device data: basic technical information (IP address, browser, login timestamps) used for security, fraud prevention, and diagnosing issues when something breaks.

Each gym on GymNerve is a fully separate account. Member records, payments, and attendance for one gym are never visible to another gym, and we don't use one gym's data to build features or benchmarks shown to a different gym. We do not sell or rent gym or member data to anyone, for any purpose.

We use the data described above to:

• run the product — record attendance, track memberships, and generate receipts;
• send transactional messages a gym or member would expect — renewal reminders, receipts, and check-in confirmations;
• keep accounts secure — detect suspicious logins and enforce session limits;
• provide support when a gym owner or member contacts us; and
• meet legal or tax obligations we're subject to under Indian law.

We share data with a short, fixed list of processors — never for their own marketing:

• Razorpay, to process card and UPI payments;
• Amazon Web Services (AWS), which hosts our servers and database, on infrastructure in India;
• email or messaging providers we use to deliver receipts, reminders, and account notifications; and
• law enforcement or regulators, only when we're legally required to respond.

We keep account and member data for as long as the gym's account is active. If a gym cancels, we retain its data for a limited period afterward in case the owner wants to reactivate or export it, then delete it — except where we're required to keep financial records (like payment history) for longer under Indian tax law.

GymNerve's apps use only the cookies/local storage needed to keep you signed in and remember basic preferences like light/dark mode. We don't use third-party advertising trackers.

Accounts support two-factor authentication, session management, and audit logs. Data is encrypted in transit. Access to production data is restricted to the people who need it to operate the service and is logged.

GymNerve accounts are for gym owners and staff, who must be at least 18. A gym may record a minor as a member within its own roster (e.g. a junior training program) — that data is entered and controlled by the gym itself, as the member's data controller, subject to whatever consent the gym has obtained from a parent or guardian.

Under India's Digital Personal Data Protection Act, you can ask us to give you a copy of the personal data we hold about you, correct it, or delete it. A gym owner can do most of this directly inside the product; for anything else, or if you're a member and want to reach us directly instead of going through your gym, use the Contact page.

If we make a material change to this policy, we'll notify account owners by email before it takes effect. The "last updated" date at the top of this page always reflects the current version.

Write to us through the Contact page and we'll respond within one business day.