Privacy Policy

1. Who We Are

The Service is operated by Myntrix Labs Private Limited ("Company", "we", "us"), with its registered office at 925, Baksariya, Vidisha, Madhya Pradesh – 464001, India. For most personal data processed through the Service, the gym (our customer) is the Data Fiduciary and we act as a Data Processor on the gym's instructions.

2. What We Collect

• Gym owner / staff account data: name, email address, organization name, role, and authentication credentials, which you provide when creating and using your account.
• Gym members' data: information that the gym enters about its members (such as name, contact details, plan, and subscription status). The gym determines what member data to collect and is the data fiduciary for it; we process it on the gym's behalf.
• Usage and technical data: basic logs needed to operate, secure, and troubleshoot the Service.

3. Purposes of Processing

We process personal data to:

• provide, maintain, and improve the Service;
• authenticate users and secure accounts;
• provide customer support and respond to requests;
• comply with legal obligations.

4. Payment Data

Payments are processed by a third-party payment gateway. Card numbers and other sensitive payment instrument details are handled directly by that gateway and are not stored on our servers. We may retain limited, non-sensitive transaction records (such as amount, status, and reference) for billing and reconciliation.

5. Cookies & Local Storage

We use essential cookies required for authentication and session management. We currently store only a theme preference (light/dark) in your browser's local storage. We do not use third-party advertising or cross-site tracking cookies.

6. Data Sharing

We do not sell personal data. We share data only with service providers who help us operate the Service (such as hosting and payment processing), strictly as needed and under appropriate safeguards, or where required by law.

7. Security

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain personal data for as long as needed to provide the Service and to meet legal, accounting, or reporting requirements. Where we act as processor, retention and deletion of member data follow the gym's instructions. On account closure, data is deleted or anonymized within a reasonable period unless retention is legally required.

9. Your Rights

Subject to applicable law, you have the right to access, correct, and request erasure of your personal data, and to raise grievances about how your data is handled. Gym members should usually contact their gym (the data fiduciary) for requests about member data; we will assist the gym as processor. To exercise rights regarding account data, contact us using the details below.

10. Grievance Officer

In accordance with the DPDP Act and applicable rules, you may contact our Grievance Officer regarding the processing of your personal data:

11. Contact

For any privacy questions, write to us at support@myntrixlabs.com.