Scope & Overview
Welcome to GymElite (referenced herein as "we", "our", "us", or "the Platform"), developed and operated by DeveloperChowk. GymElite provides cloud-based gym management software, automated WhatsApp fee notifications, GPS-verified QR check-ins, point-of-sale inventory tracking, and AI-powered diet planning for commercial fitness studios, health clubs, and sports training facilities.
This Privacy Policy sets forth our strict operational policies regarding the collection, processing, protection, and erasure of data when you visit our website at gymelite.in, register for a GymElite SaaS workspace, connect your WhatsApp messaging number, or access our mobile member portals.
Multi-Tenant Gym Workspace Isolation:
Each registered gym operates as an isolated workspace tenant. A gym owner's member records, financial earnings, and staff accounts are cryptographically segmented and never accessible to other gyms or unauthorized external parties.
Information We Collect
We collect information strictly necessary to provide seamless gym management operations and maintain accurate billing records:
Gym Owner & Business Data
- Gym legal name, branch addresses, GSTIN (optional)
- Owner name, business email, and verified mobile number
- Subscription tier, payment method, and billing invoices
- Staff account credentials (trainers, receptionists) and role permissions
Gym Member Records (Entered by Gym)
- Member full name, contact phone number, and gender
- Assigned membership duration, fee payment status, and renewal dates
- Batch schedules (morning/evening) and branch assignments
- Check-in timestamps and attendance compliance history
WhatsApp Integration & Invoicing
GymElite provides automated WhatsApp messaging functionality that allows gym owners to link their gym phone number by scanning a secure QR code. Once linked, the platform dispatches automated messages strictly for legitimate transactional purposes:
- Digital Payment Receipts: Sent automatically when gym staff records a fee payment.
- Membership Expiry Alerts: Polite reminder notices dispatched 3 to 5 days prior to plan expiration.
- Check-in Confirmations: Instant verification message sent upon gate QR check-in.
- Custom Diet & Routine Cards: PDF or text summaries of trainer-approved diet charts.
GPS-Verified QR Attendance
To prevent proxy attendance and unauthorized entry, members can scan a secure QR code displayed at the gym front desk using their mobile device.
Strict Ephemeral Geofence Verification:
When a member scans the front desk QR code, the mobile browser or app requests one-time device GPS coordinates strictly to verify that the member is physically within the designated geofence boundary (e.g., 50 meters) of the fitness facility.
• Coordinates are verified in real time in memory and immediately discarded.
• We NEVER store continuous GPS trails, background movement histories, or live tracking data.
Fitness & Health Metrics
Gym owners and certified trainers may record member fitness progress metrics to tailor workout routines and meal plans:
- Body measurements: Body weight, body fat %, muscle mass, and progress pictures (optional).
- Workout logs: Exercise sets, repetitions, weights lifted, and training splits.
- Dietary preferences: Vegetarian, eggetarian, or non-vegetarian preferences and daily calorie targets.
All fitness records are treated as confidential organizational records owned by the gym workspace. GymElite never exposes, monetizes, or sells personal fitness data to health insurance providers or outside advertisers.
How We Use Information
The information we collect is processed exclusively for the following authorized purposes:
Security, Encryption & Cloud Storage
We implement defense-in-depth security standards to protect your operational gym data:
- Encryption in Transit: All HTTP traffic is strictly encrypted using TLS 1.3 with HTTPS enforcement.
- Encryption at Rest: Core MongoDB databases and object storage backups are encrypted using AES-256.
- Role-Based Access Control (RBAC): Gym owners can restrict receptionists and trainers from accessing financial revenue metrics or deleting member records.
- Automated Backups: Daily encrypted snapshots stored across geographically resilient cloud storage (Cloudflare R2 / AWS).
Third Parties & Non-Sale Pledge
Data is shared solely with trusted cloud infrastructure subprocessors necessary to deliver GymElite services:
- Payment Gateways (Razorpay / Cashfree / Stripe): Secure PCI-DSS compliant processing of SaaS subscription payments.
- Cloud Hosting & Storage (Cloudflare & AWS): High-availability application servers, DDoS protection, and encrypted backup storage.
- WhatsApp Infrastructure: Direct webhook synchronization for automated member receipt dispatch.
Data Retention & Erasure
We retain account and member records only as long as your gym workspace maintains an active subscription. Gym owners retain complete control over their data:
- 1-Click Data Export: Gym owners can download a complete Excel/CSV export of their member roster, dues, and payment ledgers at any time.
- Workspace Termination: Upon subscription cancellation or explicit deletion request, all tenant records, staff credentials, and logs are permanently purged from primary databases within 30 days.
- Member Erasure: Individual gym members may request their gym administrator to permanently purge their contact profile and fitness metrics.
Age Requirements & Minors Policy
Gym Owners & Administrators: You must be at least 18 years old and legally competent to enter into commercial contracts to register for GymElite SaaS plans.
Minor Gym Members: Fitness studios frequently enroll student athletes and minors (under 18) for athletic coaching or martial arts classes. Gym owners represent that they obtain appropriate parental or guardian consent before recording minor member contact information in the GymElite dashboard.
Your Rights (DPDP Act & GDPR)
In compliance with India's Digital Personal Data Protection (DPDP) Act 2023 and global privacy standards (GDPR), users and gym owners possess the following statutory rights:
Contact & Grievance Officer
For privacy inquiries, Data Processing Agreements (DPA), or data deletion requests, contact our Compliance Office: