01What we collect
My Gym is a membership-management app. The gym's admin and its members are the only two kinds of accounts, and between them the app collects:
| Category | Specifically |
|---|---|
| Account | Email address and password (stored as a salted hash — we never see or store your actual password) |
| Member profile | Full name, phone number, gender, height_cm, weight_kg |
| Health & fitness | Logged weight, body-fat %, chest/waist/arm measurements, assigned training and diet plans, workout completion history |
| Membership & billing | Plan type, join date, renewal date, payment amounts and dates, payment method label (e.g. "UPI", "Cash") — we do not process card payments or store card numbers |
| Attendance | Gym check-in timestamps |
| Photo | An optional profile picture, resized to 250×250px before upload |
| Notifications | Reminders and announcements sent by your gym's admin, and whether you've read them |
We do not collect device location, contacts, or browsing history, and the app contains no advertising or analytics SDKs.
02How it's used
Every field above exists to run one specific screen in the app. There's no secondary use:
- Your name, photo and membership dates — shown on your own profile and to your gym's admin.
- Height/weight/measurements — power the BMI and progress calculations you see on your own Home and Metrics screens.
- Payment records — let the admin track dues and let you see your own billing history.
- Check-ins — build your own attendance history.
03Who can see it
My Gym is used by many separate gyms from one shared system. Each gym's admin can see only their own members' data — never another gym's. This isn't a policy promise layered on top; it's enforced at the database level on every single read and write, so it holds even if the app itself has a bug.
A member can see their own data, plus reminders and announcements their
own gym's admin sent.
An admin can see their own gym's members, payments, plans and attendance —
and nothing belonging to any other gym on the system.
04Where it's stored
Data is stored in a managed Postgres database (via Supabase) and accessed exclusively over encrypted HTTPS connections. Row-level security rules — not just application code — enforce the access boundaries described in section 3 directly at the database layer.
06Retention & deletion
Your data is retained for as long as your membership and account are active. If your gym's admin removes you as a member, your account can no longer sign in, though historical payment and attendance records may be kept by the gym for their own bookkeeping, as most gyms are required to.
How to request deletion of your My Gym account and data
- Email admin@futtkr.com from the address linked to your account, with the subject "Delete my account" — or ask your gym's admin to submit the request on your behalf.
- Include your name and the gym you're a member of, so we can locate the right account.
- We'll confirm receipt and complete deletion within 30 days.
What gets deleted: your login, profile details (name, email, phone, gender, height/weight), health metrics, training/diet plan assignments, and profile photo.
What your gym may keep: payment and attendance records, retained by the gym itself (not us) for standard bookkeeping purposes.
07Your rights
You can, at any time:
- Access your own data — everything visible in the app is everything we hold on you.
- Correct your profile details, or ask your gym's admin to.
- Change your password at any time from Profile → Change password.
- Request deletion of your account and associated data (see section 6).
08Children
My Gym is intended for gym members aged 16 and over. We don't knowingly collect data from children under 16. If you believe a child's data has been added to the system, contact us and we'll remove it.
09Changes to this policy
If this policy changes, the effective date at the top of this page will be updated. Material changes will be communicated to admins via the app.
10Contact
Questions about this policy or your data — reach us at: