Privacy Policy
Effective Date: 1 June 2026
1. Introduction & Data Controller
This Privacy Policy describes how AIS Securetech ("we", "us") collects, uses, and protects personal data through GymSetu (gymsetu.in), a gym management software product.
Data Controller: AIS Securetech, 6/17 First Floor, Dakshin Gangotri, Supela, Bhilai, Chhattisgarh 490023, India.
Contact: grievance@gymsetu.in
2. What Data We Collect
Gym owner data: name, email, phone, gym details, billing information, login credentials.
Gym member data (collected by gym owners): name, phone, email, date of birth, photo, biometric UID, attendance records, payment history, membership plans.
Usage data: login times, feature usage, device information, IP address, browser type.
3. How We Use Data
- Provide and improve the GymSetu service
- Send transactional notifications (renewals, receipts, reminders)
- Billing, invoicing and subscription management
- Customer support and troubleshooting
- Security, fraud prevention and service integrity
4. Third Party Processors
We use trusted third-party services to operate GymSetu:
- Supabase — database hosting and authentication
- Razorpay — payment processing
- Meta / WhatsApp — notification and message delivery
- Google Play — Android app distribution
- Vercel — application hosting
These processors handle data only as needed to provide their services and are bound by their own privacy policies.
5. Data Ownership
Gym owners retain full ownership of all member data entered into GymSetu. AIS Securetech acts as a data processor, not a data owner, for member records. We do not sell, rent, or use member data for advertising or unrelated purposes.
6. Data Retention
- Active accounts: data retained while subscription is active
- Cancelled accounts: data retained for 90 days, then permanently deleted
- Backups: retained for up to 30 days after deletion
7. Data Deletion
Gym owners may request complete data deletion by emailing support@gymsetu.in. Deletion is completed within 30 days of verified request.
8. Your Rights (DPDP Act 2023)
Under India's Digital Personal Data Protection Act 2023, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure of your data
- Grievance redressal through our Grievance Officer
9. Cookies
We use essential cookies for authentication and session management only. We do not use tracking or advertising cookies.
10. Children's Privacy
GymSetu is not intended for children under 13. We do not knowingly collect data from children.
11. Changes to Policy
We will notify users of material changes to this policy via email or in-app notification.
12. Grievance Officer (DPDP Act)
Name: Aftab Ahmed
Designation: Grievance Officer
Email: grievance@gymsetu.in
Address: AIS Securetech, 6/17 First Floor, Dakshin Gangotri, Supela, Bhilai, CG 490023
Response time: Within 30 days
WhatsApp: +917898609641