Privacy

What we store for your gym

Member records: name, phone number, blood group where you record one, join date, and the branch they belong to. Membership records: which package a member is on, when it starts and ends, and its current state.

Money records: charges raised against a member, payments recorded against those charges, the method you recorded them under, and the resulting balance.

Profile photographs, where your staff upload them. These are stored in Cloudflare R2 object storage rather than in the database.

What we store about your staff

An account for each person you give access to: their name, phone number, role, and the branch they are assigned to. Passwords are stored only as bcrypt hashes — we cannot read them, and neither can anyone with database access.

Every create, update and delete made through the app is written to an activity log recording who did it and when. That log is written in the same database transaction as the change itself, so it cannot be separated from it.

What we do not store

Card numbers and bank credentials. FitSync does not collect payments and has no payment gateway, so there is nothing of that kind to hold. When you record a payment as Khalti, eSewa or a bank transfer, you are recording that it happened elsewhere.

Separation between gyms

Every record belongs to one organisation, and every query is filtered by it. Where you run more than one branch, records also carry the branch they belong to, and staff accounts are pinned to their own branch by the server — not by anything the browser sends.

Getting your data out, or removing it

Write to us and we will export your organisation's records or delete them. Deletion removes the gym's data; it does not remove backups already taken, which age out on their own schedule.