Privacy Policy
Last updated 2026
GymCash is a business tool for independent personal trainers and coaches. This policy explains what we collect, why, and the control you have. Your business data is yours.
What we collect
- Your account — email address, and your business profile (business name, currency).
- Your business records — the clients you add (name, and optionally email/phone), the packages and sessions you log, recurring plans, payments, and expenses.
- Payment connections — if you connect Stripe, we store Stripe identifiers to sync payments. We never see or store card or bank numbers — Stripe handles those.
- Basic diagnostics — limited technical logs to keep the app working.
We do not collect your location or advertising identifiers, and GymCash contains no third-party ads.
About your clients’ information
The client contact details you enter are yours, entered by you to run your business. You are responsible for having a basis to store them. GymCash processes this data only to provide the app to you — we never contact your clients except to send the reminders/recovery messages you enable, and we never sell or share their data.
How your data is used
Only to run GymCash for you: check-ins, package balances, your MRR and past-due dashboards, payment recovery you turn on, and expense tracking. We do not sell your data or use it for advertising.
Storage & access
Data is stored in our database (Supabase) and protected by row-level security so only your account can read or write it. It’s encrypted in transit (HTTPS) and at rest. Payments run through Stripe.
How long we keep your data (data retention)
We retain your account and business records only for as long as your account is active, so your clients, dashboards, and history stay available to you. You can edit or archive records at any time. When you delete your account, all of your business records and personal data are permanently deleted from our systems, typically within 30 days, and are not retained afterward except where we are required to keep limited records by law. Basic technical diagnostic logs are kept for a short period (up to 90 days) and then automatically deleted.
Your choices
- Edit or archive any record in the app.
- Delete your entire account and all data — see Delete your account.
- Turn on the in-app lock (biometric/passcode) for extra protection.
Contact
Questions or requests: hello@growmywebsite.com