Privacy Policy - Gorilla Gym & Fitness

1. Introduction

Welcome to Gorilla Gym CRM. We respect your privacy and are committed to protecting the personal data of our members, staff, and visitors. This Privacy Policy explains how we collect, process, store, and share information when you use our Gym Management CRM system, including our integrated biometric hardware and automated WhatsApp messaging services.

2. Information We Collect

To provide gym management and biometric access control services, we collect the following types of information:

Member & Contact Information: Name, phone number, email address, emergency contact details, date of birth, gender, and membership subscription history.
Biometric Data: Biometric templates (face and fingerprint data) mapped to a unique Biometric ID. This data is used solely for gym access control and attendance logging.
Financial Information: Payment records, transaction details, and billing histories. We do not store raw credit/debit card numbers directly; payments are logged via payment methods such as UPI, Cash, Card, or Bank Transfer.
System & Device Logs: Device serial numbers, handshake/connection timestamps, and status metrics of connected biometric devices (e.g., eSSL ADMS machines).

3. WhatsApp & Meta API Integration

Our CRM utilizes the official WhatsApp Cloud API (Meta API) to send automated notifications and alerts. We disclose the following regarding this integration:

Processing of Phone Numbers: Your registered phone number is processed and sent to the Meta/WhatsApp API platform to deliver automated messages (such as payment receipts, membership expiry reminders, and subscription renewals).
Message Logs: We store a history of outbound WhatsApp notifications, including status (queued, sent, delivered, failed) and attempt counters, inside our database for debugging and delivery verification.
Data Protection: WhatsApp message content is handled in accordance with Meta's Privacy Policy and WhatsApp Business Terms of Service. We do not sell or share your WhatsApp details with third-party advertisers.

4. Data Storage and Security

Your data is processed and stored securely under the following guidelines:

Hosting: The CRM server and SQLite database are securely hosted on a private cloud environment with strict firewall rules and access controls.
Biometric Security: Biometric templates are stored securely and queued to sync directly with local biometric access terminals. They are never uploaded to public clouds or shared with unauthorized third parties.
Encryption: Password and access PIN hashes are encrypted using industry-standard hashing algorithms (bcryptjs). Sessions are protected by secure session tokens.

5. Data Sharing

We do not sell, rent, or trade your personal data. We only share data with third parties in the following limited circumstances:

Service Providers: Under strict confidentiality terms with infrastructure hosts and API providers (e.g., Meta/WhatsApp Cloud API) required to operate the CRM.
Legal Compliance: When required by law, subpoena, or government order to protect safety, property, or enforce gym policies.

6. Data Retention

We retain your personal information, subscription records, and biometric templates as long as your membership is active or as needed to comply with our legal obligations, resolve disputes, and manage gym accounting records.

7. User Rights and Data Deletion

Members and staff have the following rights regarding their data:

Access & Correction: You may request to review or correct your personal profile, phone number, and subscription logs.
Biometric Removal: You may request the deletion of your biometric templates from the CRM and connected biometric devices at any time.
Account Deletion: To request complete deletion of your records, contact the gym administration. Deletion is subject to active financial balances and local regulations regarding business transaction records.

8. Contact Information

For questions, concerns, or requests regarding this Privacy Policy, please contact our support team or gym management:

Gym Name: Gorilla Gym & Fitness
Email: admin@gorillagym.in
Address: Gorilla Gym Headquarters