Privacy Policy for GymStream

GymStream ("GymStream", "Gym Stream", "we", "our", or "us") respects your privacy and is committed to protecting the personal information you share with us.

This Privacy Policy explains how we collect, use, store, disclose, and protect information when you use our website, admin dashboard, staff web app, TV application, and related services.

GymStream is a B2B fitness technology platform that allows gyms, fitness centers, hotels, residential gyms, and similar organizations to display workout videos, manage workout schedules, control TV-based workout sessions, and operate gym-branded digital workout experiences. The product currently includes a web admin dashboard, staff mobile web app, and TV app. GymStream is intended mainly for gyms, hotels, residences, and similar fitness facilities on a subscription basis.

1. Business Information

Business Name: Gym Stream / GymStream
Email: support@gymstream.app

India Address:
157-1, VKV Ln Rd, Kochi, Kerala 682037, India

UAE Address:
233 Zone 2, Schon Business Park, Dubai Investment Park First, Dubai, United Arab Emirates

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• GymStream website
• GymStream web admin dashboard
• GymStream staff mobile web app
• GymStream TV application
• QR-code-based workout viewing experience
• Billing, support, and related business communications

This Privacy Policy does not apply to third-party websites, payment platforms, or services that we do not control.

3. Who Uses GymStream

GymStream is currently designed as a B2B platform. The primary users who create and manage accounts are gym owners, gym administrators, trainers, staff members, and authorized business users.

Gym members do not currently create direct GymStream accounts for normal TV-based use. Gym members may view workouts through the TV display or by scanning QR codes shown on the TV. QR-code access is intended to open workout videos or session information and does not personally identify the gym member.

4. Information We Collect

4.1 Gym Owner and Admin Information

When a gym owner or admin creates an account or uses GymStream, we may collect:

• Name
• Email address
• Phone number
• Gym or company name
• Branch name and branch address
• Login details
• Role and access permissions
• Subscription and billing-related information
• Support communications

4.2 Staff and Trainer Information

Gym owners or admins may add staff or trainers to GymStream. In such cases, we may collect:

• Name
• Email address
• Role or permission level
• Assigned branch
• Login activity
• Usage activity related to assigned permissions

4.3 Gym Member Information

At the current stage, GymStream does not directly collect or store personal gym member data for the normal TV and QR-code workout experience.

If future GymStream features allow gym members to create profiles, track workouts, set goals, or use personalized workout features, we may collect additional data such as:

• Name
• Email or phone number
• Preferred branch
• Fitness goals
• Workout history
• Progress information
• Age, height, weight, gender, or similar fitness-related profile details

Such features will be introduced with appropriate notice and, where required, user consent.

5. Fitness and Health-Related Data

GymStream is not a medical platform and does not provide medical advice, diagnosis, treatment, or healthcare services.

Currently, GymStream does not directly collect sensitive medical or health data from gym members. Workout videos, schedules, and fitness content are provided for general fitness and training guidance only.

Users should consult a qualified medical or fitness professional before starting any new workout program, especially if they have injuries, medical conditions, or health concerns.

6. QR Code and TV App Data

GymStream TV apps may display QR codes that allow gym members or users to open workout sessions on their personal devices.

When a QR code is scanned, GymStream may process technical or session-related data such as:

• Branch ID
• TV or device ID
• Workout or session ID
• Time of access
• Device/browser information
• Basic usage logs

The QR code does not personally identify a gym member unless future features specifically introduce logged-in member accounts.

The TV app may cache workout videos or related media files locally to improve playback performance. Personal user data is not intended to be stored locally on the TV app.

7. Workout Videos and Gym-Uploaded Content

GymStream may provide a built-in workout video library and may allow premium gyms to upload their own workout videos.

For uploaded videos, we may collect:

• Video title
• Description
• Category
• Duration
• Difficulty level
• Target body part or muscle group
• Tags and metadata
• Uploading user/account details

Uploaded gym content is private to the relevant gym or organization unless otherwise agreed.

Gyms are responsible for ensuring that they have the necessary rights, permissions, and consents for any content they upload. GymStream does not routinely review uploaded content unless required for support, security, legal, or platform integrity reasons.

8. How We Use Information

We use collected information to:

• Create and manage gym owner/admin accounts
• Provide access to the GymStream dashboard, staff app, and TV app
• Manage branches, devices, schedules, and workout content
• Enable staff roles and permissions
• Process subscriptions and billing
• Generate invoices and billing history
• Provide customer support
• Improve platform performance and reliability
• Track device usage, video plays, branch performance, and error logs
• Prevent fraud, misuse, unauthorized access, or technical issues
• Comply with legal, tax, accounting, and regulatory obligations

9. Payments and Billing

GymStream may use third-party payment providers, including Stripe and Razorpay, to process subscription payments.

GymStream does not directly store full credit card or debit card details. Payment information is processed by the relevant payment provider according to their own security and privacy practices.

We may store billing-related information such as:

• Subscription plan
• Payment status
• Invoice history
• Billing contact details
• Tax or accounting records
• Transaction references

10. Notifications and Communications

GymStream may send emails, push notifications, or other communications related to:

• Account access
• Billing and subscription updates
• Payment issues
• Service alerts
• Security notices
• Schedule updates
• Product updates
• Support responses

Users may opt out of non-essential communications where applicable. However, important billing, security, legal, or service-related communications may still be sent.

SMS or WhatsApp notifications may be introduced in the future.

11. Analytics and Logs

GymStream currently does not use Google Analytics, Firebase Analytics, Mixpanel, Sentry, or PostHog based on the current setup.

However, GymStream may collect internal analytics and logs such as:

• Login activity
• Video play activity
• Workout session usage
• Device usage
• Branch-level usage
• Aggregated performance data
• Error logs
• Technical diagnostics

Gym owners may see aggregated reports related to branch usage and platform performance. GymStream does not currently provide personal member-level analytics.

12. Cookies and Similar Technologies

GymStream may use cookies, local storage, or similar technologies to:

• Keep users logged in
• Remember user preferences
• Maintain secure sessions
• Improve website and app performance
• Understand basic usage patterns
• Prevent unauthorized access

You can control cookies through your browser settings. Disabling cookies may affect login, dashboard access, or certain platform features.

If GymStream introduces additional marketing or analytics cookies in the future, we may update this Privacy Policy and provide appropriate notice where required.

13. Third-Party Services

GymStream may use third-party service providers for:

• Cloud hosting
• Video storage and delivery
• Payment processing
• Email delivery
• SMS/WhatsApp communication, if introduced
• Technical support
• Monitoring and infrastructure management

Current or planned providers may include:

• AWS
• AWS S3
• AWS CloudFront
• DigitalOcean
• Stripe
• Razorpay
• Email, SMS, or WhatsApp communication providers

These providers may process data only as needed to provide their services to GymStream.

14. Data Sharing

We do not sell personal data.

We may share information only in the following situations:

• With gym owners/admins who manage their organization's GymStream account
• With authorized staff based on role-based permissions
• With service providers who help us operate GymStream
• With payment providers for billing and subscription processing
• When required by law, regulation, court order, or government authority
• To protect GymStream, users, customers, or the public from fraud, security threats, or misuse
• In connection with a business transfer, merger, acquisition, restructuring, or sale of assets

If future member accounts are introduced, member data may be visible to the relevant gym or organization as the service provider, depending on the feature and permissions.

15. Data Retention

We retain data only for as long as reasonably necessary for business, legal, security, tax, and operational purposes.

General retention periods may include:

• Account data: retained while the account is active
• Cancelled account data: may be retained for up to 90 days after cancellation
• Billing and invoice data: may be retained for approximately 30 to 180 days, or longer if legally required
• Logs and technical records: retained as needed for security, troubleshooting, and platform reliability
• Uploaded gym content: retained while the subscription or account remains active, unless deleted earlier

When data is no longer required, we may delete, anonymize, or securely archive it.

16. Account Deletion

Gym owners may request deletion of their account by contacting: support@gymstream.app

Gym owner account deletion requests are handled by GymStream.

Staff and trainer account details are generally managed by the gym owner or gym admin. Staff deletion or access removal requests should normally be handled by the relevant gym admin.

Certain information may be retained where required for legal, tax, billing, fraud prevention, dispute resolution, or security purposes.

17. Security

We use reasonable technical and organizational measures to protect data, including:

• HTTPS/TLS encryption for data transmission
• Password hashing
• Role-based access control
• Restricted admin/staff permissions
• Secure cloud infrastructure
• Payment processing through third-party payment providers
• Technical logs and monitoring
• Access controls for internal systems

No system is 100% secure. Users are responsible for maintaining the confidentiality of their login credentials and for notifying us of any suspected unauthorized access.

18. Children and Age Requirements

GymStream is intended for users aged 16 and above.

GymStream is primarily used in gym environments, hotels, residential fitness centers, and similar facilities. Users under 18 should use workouts under appropriate supervision by a parent, guardian, gym staff member, trainer, or experienced person.

GymStream does not knowingly collect personal information from children under 16.

19. International Use and Data Transfers

GymStream is registered and operates in India and the UAE, and may serve customers in India, UAE, Saudi Arabia, GCC countries, and other international markets.

Your data may be processed or stored in countries where GymStream or its service providers operate. These countries may have different data protection laws than your country of residence.

Where required, we will take reasonable steps to protect personal data in accordance with applicable data protection laws.

20. User Rights

Depending on your location and applicable law, you may have rights to:

• Access your personal data
• Request correction of inaccurate information
• Request deletion of your personal data
• Withdraw consent where processing is based on consent
• Object to certain types of processing
• Request information about how your data is used

Some information may be required to operate GymStream accounts, subscriptions, billing, security, and service delivery. If essential information is deleted, certain services may no longer be available.

To make a privacy request, contact: support@gymstream.app

21. UAE and India Data Protection

GymStream aims to handle personal data in a responsible and transparent way.

For UAE users, GymStream considers applicable UAE personal data protection requirements, including Federal Decree Law No. 45 of 2021 on the Protection of Personal Data.

For India users, GymStream considers applicable Indian digital personal data protection requirements, including the Digital Personal Data Protection Act, 2023.

If you are located in another region, additional privacy rights may apply depending on local law.

22. AI and Future Features

GymStream may introduce AI-based features in the future, such as workout recommendations or smarter scheduling suggestions.

GymStream does not currently train AI models using personal user data.

If AI features are introduced, GymStream will aim to use curated workout content, gym-selected programming, and platform usage data in a responsible way. If personal data is used for AI-driven personalization, we will update this Privacy Policy and provide appropriate notice or consent where required.

GymStream does not currently plan wearable integration.

23. No Sale of Personal Data

GymStream does not sell personal data to third parties.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, business operations, or technology.

When we update this Privacy Policy, we will revise the "Last Updated" date. For major changes, we may provide additional notice through the website, dashboard, email, or app notifications.

25. Contact Us

For privacy questions, account deletion requests, or data-related concerns, contact us at:

Email: support@gymstream.app

India Address:
157-1, VKV Ln Rd, Kochi, Kerala 682037, India

UAE Address:
233 Zone 2, Schon Business Park, Dubai Investment Park First, Dubai, United Arab Emirates