Privacy policy

1. Our role and the gym's role

Member and staff data a gym enters belongs to the gym, which is responsible for it (controller). We process it on the gym's behalf and only on its instructions to provide the service (processor).

We are responsible for account data of gym owners and users (name, e-mail) and FitDesk billing data.

2. Data we process

Account: name, e-mail, password (hashed — we never see it), role and permissions.

Member data entered by the gym: name, phone, e-mail, birth date, category, photo, ID number (optional), emergency contact, memberships, attendance, invoices, payments, points, training and nutrition programs and measurements.

Health declaration: answers to the physical-activity readiness questions, the e-signature and a copy of the signed text. This is sensitive data, collected only if the gym enables it and with the member's consent when signing.

Staff attendance: punch time, the phone's location at the moment of the punch only if the gym enables geofencing, and a hashed identifier of the linked phone.

Technical data: error logs (page, browser type) and the gym's activity log, for security and support.

3. Why we use it

To run the service (memberships, check-in, invoices, reports), send the messages the gym enables (welcome, receipt, expiry reminder, owner's daily summary), support, security and abuse prevention, and FitDesk billing.

We don't sell data, don't use member data for marketing or ads, and share it only with the providers below as needed to operate, or when legally required.

4. Providers and where data is stored

Supabase — database, sign-in and files, hosted in the EU (Ireland).

Cloudflare — application hosting, delivery network and protection.

Resend — e-mail delivery.

GitHub — scheduled jobs and encrypted backups (kept 30 days).

Data is therefore stored and processed outside Saudi Arabia and Egypt. WhatsApp messages are sent from the gym's own phone through links and do not pass through our servers.

5. Security

Encrypted connections (HTTPS); each gym's data is isolated at database level; role-based permissions (e.g. trainers don't see finances); every financial operation is logged.

Support can see a gym's data only after the owner allows it, for a limited time (24–72 hours), read-only, and every access is logged and visible to the owner.

A daily encrypted backup that only a private key held by FitDesk management can open.

6. Retention and deletion

We keep data for as long as the gym's subscription is active. The gym can export its data at any time (Excel / backup).

On a deletion request or end of the relationship we delete the gym's data within 30 days; it leaves the backups when they expire (30 days), except what we must keep by law (e.g. FitDesk invoices).

7. Your rights

Members may access, correct or ask to delete their data through the gym that registered them; we help the gym do so.

Account holders have the same rights directly with us through the contacts below.

8. Cookies

Only what the service needs: the sign-in session, language, and interface preferences stored in the browser. No tracking or advertising cookies.

9. Minors

If a gym registers members under 18, the gym is responsible for obtaining a guardian's consent.

10. Contact and changes

Questions or requests: WhatsApp +966545282306 or e-mail nouracc1cfo@gmail.com.

We may update this policy and will notify gym owners inside the app before any material change takes effect.