Who We Are
EnterGYM is a cloud-based gym management software platform operated by Arrow SoftTech, a company based in Korba, Chhattisgarh, India. When this policy says "EnterGYM", "we", "us" or "our", it refers to Arrow SoftTech.
This Privacy Policy applies to all gym owners, staff members, and end-users who access EnterGYM through our web platform, mobile app, or any subdomain under entergym.in.
Information We Collect
Information You Provide
When you register or use EnterGYM as a gym owner or staff member, we may collect:
Information Collected Automatically
When you use the EnterGYM platform, we automatically collect:
- IP address, browser type, device model, and operating system
- Pages visited, session duration, and navigation patterns within the dashboard
- GPS coordinates during attendance marking (only at the moment of check-in)
- Push notification delivery status and interaction events
- Error logs and crash reports to maintain platform stability
How We Use Your Data
We use the information we collect only to deliver and improve EnterGYM. Specifically:
- To provision and operate your gym's isolated subdomain and dashboard
- To process membership payments and generate GST-compliant invoices
- To verify GPS-based attendance within your gym's geofenced radius
- To power AI Face Attendance recognition at your gym entrance
- To send push notifications and WhatsApp reminders on your behalf to members
- To generate monthly attendance, revenue, and member analytics reports
- To provide customer support and respond to your queries
- To detect, investigate, and prevent fraud, abuse, or security incidents
- To comply with applicable Indian laws and regulatory requirements
Your Member Data
As a gym owner using EnterGYM, you are the data controller for your gym members' personal information. EnterGYM acts as a data processor — we store and process member data only on your instructions.
- All member data is stored in your gym's fully isolated database
- No other gym on the EnterGYM platform can access your members' information
- You are responsible for obtaining consent from your members before enrolling them
- You may export all member data as a CSV or PDF report at any time
- We do not use your members' data for any purpose outside running your gym
Sharing Your Data
We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:
- Infrastructure providers: Our VPS host and Cloudflare for CDN/DNS — bound by data processing agreements
- Cloud storage: Cloudflare R2 for encrypted database backups — data is encrypted before upload
- Payment gateways: To process subscription payments — they never receive your member data
- Push notification services: FCM (Google Firebase) for delivering push alerts — only device tokens, no personal data
- Legal compliance: If required by Indian law, court order, or government authority
Cookies & Tracking
EnterGYM uses a minimal set of cookies to keep the platform functional and secure. We do not use advertising or cross-site tracking cookies.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| sessionid | Keeps you logged in to your gym dashboard | Session | Essential |
| csrftoken | Protects form submissions from cross-site attacks | 1 year | Essential |
| gym_timezone | Stores your gym's local time zone for correct attendance timestamps | 1 year | Essential |
| cf_clearance | Cloudflare security challenge verification | 30 min | Essential |
| push_consent | Remembers whether you've accepted web push notifications | 1 year | Functional |
You can disable cookies in your browser settings, but this will prevent you from logging into your gym dashboard.
Data Security
We implement multiple layers of security to protect your gym's data:
Data Retention
We retain your data for as long as your EnterGYM subscription is active, plus a grace period after termination:
- Active subscription: All data retained indefinitely while your account is active
- After cancellation: Data retained for 90 days to allow re-activation or export
- After 90-day grace period: All gym data, member records, and backups are permanently deleted
- Face recognition encodings: Deleted immediately upon member removal or account closure
- Payment records: Retained for 7 years as required by Indian GST regulations
- Support tickets: Retained for 2 years for audit purposes
Your Rights
Under applicable Indian data protection laws and general privacy principles, you have the following rights regarding your personal data:
Request a copy of all personal data we hold about you or your gym at any time.
Update or correct inaccurate information directly in the Admin Dashboard or by contacting us.
Request deletion of your account and all associated data. We'll process within 30 days.
Download your full member database, attendance logs, and payment records in CSV/PDF format.
Object to specific processing activities. We'll review and respond within 14 days.
Opt out of push notifications, WhatsApp reminders, or marketing communications at any time.
To exercise any of these rights, email us at support@entergym.in with your gym subdomain and the request type. We'll respond within 14 business days.
Push Notifications
EnterGYM uses Web Push (via browser) and FCM (via the mobile app) to send notifications to gym members on behalf of gym owners. This includes plan expiry alerts, payment reminders, and gym announcements.
- Members must explicitly opt in to receive push notifications
- Only device push tokens are shared with FCM — no personal member data
- Members can unsubscribe from push notifications at any time in browser settings or the app
- Gym owners control notification content and frequency from the Admin Dashboard
- FCM is operated by Google and subject to Google's Privacy Policy
WhatsApp & Third Parties
EnterGYM's WhatsApp reminder feature generates pre-filled wa.me links for gym staff to send manually. We do not directly integrate with the WhatsApp Business API or send messages on your behalf automatically.
- WhatsApp messages are initiated manually by your staff, not sent automatically by EnterGYM
- Member phone numbers used in WhatsApp links are from your gym's own database
- WhatsApp's own privacy policy governs messages sent through their platform
- We do not store WhatsApp message content or delivery status
Children's Privacy
EnterGYM is a business-to-business platform intended for gym owners and fitness professionals aged 18 and above. We do not knowingly collect personal data from children under the age of 13.
Gym owners who enroll minor members (where legally permitted) are responsible for obtaining appropriate parental consent and ensuring compliance with applicable laws governing minors' data in their jurisdiction.
Policy Changes
We may update this Privacy Policy from time to time as our platform evolves or legal requirements change. When we make material changes:
- We will notify you via email and in-app Admin Dashboard banner
- We will provide at least 14 days' notice before new terms take effect
- The "Last Updated" date at the top of this page will be revised
- Continued use of EnterGYM after the effective date constitutes acceptance
We encourage you to review this policy periodically. Previous versions are available on request.
Contact Us
If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, reach out to our team:
We aim to respond to all privacy-related requests within 14 business days. For urgent data deletion requests, we prioritise response within 48 hours.