Privacy policy

01Who decides about your data

If you run a gym on Gymo or work at one, Numo is the controller of your account data (name, email, encrypted password and your role).

Each gym decides about its members' data: the gym is the controller and Numo is the processor, handling it only on the gym's behalf to provide the service. If you are a member and want to see, correct or delete your data, write to your gym or to us and we will sort it out with them.

02What data we process

Gym staff accounts: name, email, password (stored encrypted), role, site and a log of what each person does at the register and at access control.

Members: name, ID type and number, email, phone, date of birth, photo, emergency contact, notes left by the gym, the 4-digit access code, their plans, payments, balances, check-ins and class bookings.

Fingerprint: if the gym uses a fingerprint reader, the fingerprint is sensitive data. It is only enrolled with the member's express consent, nobody has to give it and they can always get in with their code.

Technical usage: IP address, device type and error logs, to keep the service secure and running. The gymo.fit site uses no advertising or tracking cookies.

03What we use it for

To provide the service: sign up members and plans, take payments and run the register, control access, book classes, send in-app notices and sync devices that work offline.

For the gym's account: create access, verify the email, reset the password and announce important service changes.

For security and support: prevent fraud and unauthorized access, and answer your requests.

We do not sell personal data or use it for third-party advertising.

04Who we share it with

With providers that help us operate and only use it for that: Supabase (database and authentication), Render (servers) and Resend (verification and recovery emails). Some of them store data outside Colombia, in the United States, with equivalent safeguards; by using Gymo you authorize that transfer.

With authorities, only when a law or a court order requires it.

05How long we keep it

For as long as the gym's account is active. If the gym cancels, we keep the data for 90 days so it can export it, and then delete it, except what a law requires us to keep, such as accounting records.

06Your rights

You can see, update and correct your data, ask for proof of the consent you gave, learn how it has been used, revoke your consent or ask for deletion when there is no legal duty to keep it, and file complaints with Colombia's Superintendencia de Industria y Comercio.

Write to [email protected]. We answer questions within 10 business days and complaints within 15 business days. To delete your account, do it in the app under Settings → Account → Delete account, or write with the subject “Delete my Gymo account”. When you delete it we immediately erase your workouts, your wellness and your profile details; the member record your gym keeps stays with the gym, and to erase it write to them or to us.

07Minors

Data of underage members is only recorded with the consent of their legal guardian, collected by the gym when signing them up, and handled respecting their rights.

08Security

We use encrypted connections, encrypted password storage, role-based permissions (the front desk does not see what the owner sees) and audit logs. No system is infallible: if an incident affects your data, we will tell you and notify the authority when required.

09Changes and contact

If we change this policy, we will publish the new version here and notify gyms in the app before it takes effect.

Numo LLC · [email protected]