Privacy Policy

Last updated: 15 October 2026

MyGymFlex (“we”, “us”) provides a gym planning and tracking platform. Members train in the mobile app. Owners and trainers run the gym on the web, and owners can also manage the gym from the phone. This policy explains what we collect, why we collect it, and how you can control it.

1. Who this policy covers

This policy applies to people who create a MyGymFlex account, use the mobile app, join or register a gymnasium, train solo, or sign in on the web. It also covers platform administrators who review gyms, ownership claims, and ads.

2. Information we collect

Depending on how you use MyGymFlex, we may process:

• Account data: full name, email address, phone number, and password (stored as a hash).
• Profile and onboarding: training goal, experience level, preferred training days, and whether you join a gym, register a gym, or train solo.
• Gymnasium data: gym name, address, logo, map details, instruments, exercises, memberships, member IDs, roles (owner, trainer, or member), and invitations.
• Training data: workout plans, assigned days, Gym Day sessions, sets, weight, and rest, skipped or completed workouts, attendance (including check-in and check-out), and progress summaries such as streaks and weekly completion.
• Posts and ads: tips and posts published by an owner or trainer, and ads submitted for admin approval.
• Monthly fees: the gym’s monthly amount, enabled methods (bKash, Rocket, Nagad, Upay, or bank transfer), the method a member chooses, the transaction number, an optional payment screenshot, payment status, and the receipt after the month is marked paid.
• Operator activity: gym approvals, ownership claims, ad review, and related audit logs for platform administrators.
• Technical data: device and app version, authentication tokens, AI usage quotas, and basic server logs needed to keep the service secure and available.

3. How we use information

We use this information to create and secure your account, deliver plans and Gym Day tracking, operate gym memberships, show attendance and progress, and let owners and trainers do the work their role allows. Owners use it to manage people, the floor, attendance, posts, and monthly payments. Trainers use it to build and assign plans, review attendance, and publish posts. Members use it to follow a plan, check in, and pay the monthly fee. Administrators use it to review gyms, claims, and ads. We do not sell your personal information.

MyGymFlex records a monthly fee so the gym can confirm it. We do not collect or transfer the money. The member pays the gym through the method they choose.

4. AI features and data

AI suggests. It does not save by itself. You confirm the result first. Depending on the feature, we may process:

• Instrument photos an owner uploads so we can suggest a name.
• A gym’s instruments and exercises when an owner asks for exercise suggestions or stock images on the web.
• Goals, level, training days, and the relevant exercise catalog when an owner, trainer, or solo member asks for a plan draft.
• A short brief when an owner or trainer asks for a post draft on the web.
• Progress summaries, session history, and the active plan when a member asks for coaching tips in the app.

To produce these suggestions, relevant data is sent to AI providers acting on our instructions (for example Google Gemini or Groq). API keys remain on our servers, not in the mobile app. AI requests are logged for quota and debugging. We do not log raw image bytes in audit records. You can choose not to use AI features. Suggestions are not medical advice.

5. Sharing

People in the same gymnasium may see information required for that gym to operate. An owner may see member names, member IDs, assigned plans, attendance, workout activity, and monthly payment status, including a transaction number and any screenshot the member attached. A trainer may see members, assigned plans, and attendance on the web. A trainer does not manage fees or the member list in the app. Platform administrators may access account and gym records to review approvals, claims, ads, and abuse. We may share data with infrastructure providers who host the app and API, and if the law requires it.

6. Retention

We keep account, training, and payment records while your account or gym membership is active. If you delete your account from the app or request deletion, we remove or anonymize personal data that is no longer needed to operate the service or meet a legal obligation. A gym may need to keep a paid-month record, including the receipt, for its own accounting.

7. Security

Access to the API uses authenticated sessions. Passwords are hashed. You are responsible for keeping your login details private and for the devices you use to open the app or the website.

8. Children

MyGymFlex is intended for adults and for gyms that enroll their own members. Do not create an account for a child where applicable law requires parental consent and that consent has not been obtained.

9. Your choices

You can update profile details in the app, leave a gymnasium according to gym rules, skip an optional payment screenshot, and request account deletion. You can sign out of the website at any time. For a copy of your data or a deletion request, contact us using the address below.

10. Contact

Privacy questions: info@mygymflex.com.