GymForge App

2. Information We Collect

We collect information that you provide directly to us, information collected automatically, and information generated through your interaction with gym facilities and personal trainers.

a. Personal Identification Data

• Contact Information: Phone number and email address (used for passwordless OTP authentication and account identification).
• Profile Information: Full name, display name, and optional profile picture/avatar.
• Role Details: User role classification (Member, Certified Trainer, or Gym Administrator).

b. Fitness & Gym Activity Data

• Training Data: Assigned workout routines, exercise history, sets, reps, weight logs, and attendance records.
• Nutrition & Diets: Dietary guidelines and meal plans assigned by your personal coach.
• Session Bookings: Appointment times, booked sessions, and trainer availability logs.

c. In-App Communications & Customer Support

• Messages: Direct text messages and communication between members and their personal trainers.
• Support Inquiries: Support tickets, queries, and feedback submitted to gym administrators.

d. Payment & Transaction Information

• Subscription Records: History of purchased training packages, membership status, and transaction receipts.
• Note: All payment card details and financial transactions are securely processed by authorized third-party payment gateways (e.g., Stripe). GymForge does not store, process, or have access to your credit or debit card numbers.

e. Device & Technical Information

• Device Identifiers: Device model, operating system version, and push notification tokens (Firebase Cloud Messaging – FCM) required to deliver session reminders and chat notifications.
• Log Data: Anonymous application performance metrics, crash logs, and API request diagnostics.

3. How We Use Your Information

We process and use your data for the following legitimate purposes:

• Core Service Delivery: To authenticate your account, open the appropriate gym workspace, and provide personalized training schedules.
• Communication & Collaboration: To facilitate communication between gym members and verified trainers, and send automated workout/session reminders.
• Gym Operations: To enable gym administrators to manage member rosters, verify trainer credentials, and track session compliance.
• Platform Security: To detect, prevent, and address security incidents, fraud, or misuse of our services.
• Legal Compliance: To comply with applicable laws, regulations, and platform safety obligations.

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data to third parties. We only share information in the following limited circumstances:

• With Your Gym & Assigned Trainers: Your profile, workout logs, and session bookings are shared with the specific gym and trainers you are connected to.
• Service Providers: Trusted third-party vendors who assist us in operating our platform: Firebase (Google LLC) for cloud messaging and push notifications, and Stripe Inc. for encrypted, PCI-DSS compliant payment processing.
• Legal Requirements: If required by applicable law, court order, or governmental authority.

5. Data Security & Encryption

We implement industry-standard technical and organizational security measures to protect your data:

• Encryption in Transit: All communications between the mobile app, web platform, and backend servers are strictly encrypted using Transport Layer Security (TLS/HTTPS).
• Encrypted Storage: Sensitive authentication tokens and identifiers are stored securely on your device using OS-level secure storage (Android Keystore / iOS Keychain).
• Role-Based Access Control: Strict authorization boundaries ensure trainers and members can only access data relevant to their own authorized gym workspace.

6. Data Retention & Account Deletion

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required to comply with legal obligations. You have the absolute right to request the deletion of your account and all associated personal data at any time, either from within the GymForge app or by submitting a deletion request to info@optimageeks.com.

7. Children's Privacy

GymForge is designed for adults and individuals aged 18 and older, or minors who have obtained verifiable parental or guardian consent to use gym facilities. We do not knowingly collect personal information from children under the age of 13. If we discover that a child under 13 has provided personal data, we will immediately delete it.

8. International Data Transfers

Your information may be transferred to and maintained on secure servers located outside of your country or jurisdiction. By using the app, you consent to the transfer of information to cloud facilities adhering to global data protection standards.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legal requirements. Any modifications will be posted on this page with an updated “Last Updated” date. Continued use of GymForge after any changes indicates acceptance of the revised policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

• Entity: Optimageeks LLC
• Email: info@optimageeks.com
• Physical Address: Karachi, Sindh, Pakistan