Privacy Policy

This Privacy Policy explains how KairoFit handles personal data. We keep it plain, because privacy shouldn't need a lawyer to read. It covers two groups: gym owners and staff who use the app, and gym members whose details owners record in it.

1. Data we collect

• From owners & staff: name, mobile number, gym name and address, city, and optional email — used to create and secure your account.
• About members (entered by you): name, phone number, plan, payments, attendance, and any optional details you add such as email, date of birth, photo, or ID proof.
• Usage data: basic technical information needed to run the app reliably (device type, app version, error logs).

2. How we use data

• To provide the Service — tracking members, fees, attendance, expenses, and profit.
• To send OTPs and account messages, and to send invoices/receipts to members on your behalf (via WhatsApp, SMS, or email).
• To keep the Service secure, prevent abuse, and fix problems.

We do not sell your data or your members' data. We don't use member data for advertising.

3. Member consent (DPDP)

When you add a member, KairoFit shows a consent notice you can share with the member and records how and when consent was given. As the gym owner you are the data controller for your members' information; KairoFit processes it on your behalf. You are responsible for collecting valid consent before recording a member's details.

4. WhatsApp, SMS & UPI

Reminders and receipts open in WhatsApp or your SMS app using the member's phone number and a message template. The message is sent from your own device/account. Payments are made directly to you; KairoFit does not process or store payment-card details.

5. How we protect data

• Data is transmitted over encrypted connections.
• Member ID proofs and photos are served through short-lived signed links (they expire within minutes).
• Access is restricted by role — staff see only what their role allows, and lose access immediately when deactivated.

6. Data retention & deletion

We keep your data while your account is active. You can request an export of your data (CSV plus a photo archive), which we provide by email within 48 hours. To delete member or account data, email us and we'll complete verified deletion requests within 7 days, except where we're required to retain records by law.

7. Your rights

Depending on your location and applicable law, you may have rights to access, correct, or delete personal data, and to withdraw consent. Members can exercise these rights through the gym that holds their data, or by contacting us and we'll route the request appropriately.

8. Children

KairoFit is a business tool for gym owners and staff and is not directed at children. Where a member is a minor, the owner is responsible for obtaining consent from a parent or guardian as required by law.

9. Changes to this policy

If we update this policy, we'll change the date above and, for material changes, notify you in the app or by message.

10. Contact

For any privacy question or request, email contact@kairofit.in.