This policy covers the gymcity.com website, the GymCity web dashboard and the GymCity mobile app.
Who is responsible for your data
GymCity is a product of CodersBucket Ltd. ("CBL", "we", "us"). Company details: codersbucket.com. Contact: info@gymcity.com.
Who is responsible depends on the data:
Your GymCity account, the website, gym and trainer listings, and profile claims. We decide how this data is used, so we are responsible for it.
Member records a gym or trainer keeps. This covers a gym's or trainer's members, attendance, payments, health records and plans. The gym or trainer decides what to record and why, and we process it on their behalf. For these records, contact your gym or trainer first. We will help them answer you.
What we collect
Group | What | Where it comes from |
|---|---|---|
Account | Name, phone number, email, password (stored scrambled, never readable), sign-in method | You |
Profile | Photo, date of birth, gender, address, city and area; for members, gyms may also record blood group, religion, marital status, nationality, ID number, occupation and an emergency contact | You or your gym or trainer |
Health and fitness | Health conditions, body measurements, weight, progress photos, goals, workout plans and history, diet plans | You, your gym or your trainer |
Fingerprints | A fingerprint template from the gym's door device (see below) | The gym's device |
Attendance | Check-in and check-out times, by fingerprint or QR code | The gym's device or the app |
Messages | Chats between members, gyms and trainers | You and the people you chat with |
Payments | Invoices, payments, member fees and refunds. Card and mobile wallet details are typed on the payment provider's page; GymCity doesn't receive or store them | You, your gym, payment providers |
Listings and requests | Gym and trainer profiles, and the name, phone, email and message you send from a profile | Businesses, public sources, you |
Profile claims | Documents a business sends to prove it owns a listing | The business |
App and device | Device type, app version, push notification token | Your device |
Website | Your country, so we show local gyms and prices. Pages visited and how the site is used, only if you allow analytics or marketing cookies | Your browser |
We don't collect contacts, microphone recordings or data from Apple Health or Google Fit.
Fingerprints
Some gyms use fingerprint door devices. When a gym links you to one, we receive a fingerprint template, which is a code made from your fingerprint, not a picture of it. We store it encrypted. It is never shown in the app or dashboard and not sent to anyone else, unless the law requires it. It is deleted when the gym removes it, when the gym deletes your member record, or 180 days after it was unlinked from you. If you don't want to use a fingerprint, ask your gym for another way to check in, such as the QR code.
Health data and AI diet plans
Your health and fitness records are visible only to you, to the gym or trainer you are with and, when needed to support you or fix a problem, to our team.
A trainer can ask GymCity to write a first draft of a diet plan with AI. When they do, we send your name, age, gender, blood group, body measurements and health conditions to OpenAI or Google Gemini. The trainer checks and edits the draft before you see it. These providers don't use this data to train their AI models.
If you don't want your details sent to an AI provider, tell your trainer. They can write your plan without AI.
Why we use your data
To provide GymCity: your account, your gym's or trainer's records, payments, check-in, chats, plans and notifications. This includes emails about your GymCity plan: bills, reminders, receipts with the invoice attached, and notices when your plan pauses or changes.
With your consent: WhatsApp messages from your gym, marketing emails, and website analytics and marketing cookies. You can withdraw consent at any time.
For our legitimate interests: keeping GymCity secure, stopping fraud and spam, fixing faults, improving the service, and building the gym and trainer directory.
Because the law requires it: tax and accounting records, and answering lawful requests from authorities.
Who receives your data
We don't sell your personal data. We share it only as follows.
Who | Why |
|---|---|
The gym or trainer you join or contact | To serve you as their member or client |
Our SMS provider | Sending sign-in codes and gym SMS |
Meta (WhatsApp) | Gym messages you agreed to receive |
Google and Apple | Push notifications |
Google, Apple and Facebook | Signing in, if you choose that method |
OpenAI or Google (Gemini) | AI diet plan drafts (see above), and translating plan names |
SSLCommerz, bKash and Stripe | Taking payments for GymCity plans and for gyms and trainers |
Our hosting provider | Running our servers and database |
Our cloud storage provider | Storing photos, documents and backups |
Our email provider | Sending sign-in codes, invoices and notices by email |
OpenStreetMap | Showing maps |
Google Analytics, Google Tag Manager and Microsoft Clarity | Analytics on gymcity.com only, with your consent |
Meta Pixel | Advertising on gymcity.com only, with your consent |
Professional advisers, such as lawyers and accountants | When we need their advice |
A company that takes over GymCity | If GymCity is sold or merged, under this policy |
Authorities and courts | When the law requires it, or to protect our rights, our users or the public |
Our service providers may use your data only to provide their service to us. Sign-in, payment, analytics and advertising services also follow their own privacy policies. To get the names of our hosting, storage, SMS and email providers, email info@gymcity.com.
Where your data is stored
Our servers and some of the services above may store or handle your data outside your country, including in the United States. We use providers that protect data under their own security and privacy terms.
What is public
Gym and trainer profiles on gymcity.com are public. They show photos, prices, services, opening hours, address, map location, trainers, certificates and reviews. GymCity may create a listing from public information. A business can then claim it and edit it, and its email, phone number and website stay hidden until it does. Members are never listed publicly. A review shows your name only as written on the review, and the gym chooses which reviews appear.
App permissions
The app asks for the camera (QR check-in and photos), your photos, your location (only when you tap Near Me; we don't store it) and notifications. Each one is optional, and you can change them in your phone's settings. The app has no advertising and doesn't track you across other apps or websites.
How long we keep data
Data | How long |
|---|---|
Your account | Until you delete it |
Records a gym or trainer keeps | As long as they decide, while they use GymCity |
Fingerprint templates | Until removed, or 180 days after unlinking |
Profile claim documents | 90 days after the claim is decided |
Sign-ups that were never verified | Removed automatically; basic details kept 90 days |
Backups | 90 days |
Invoices and payment records | As long as the account exists, and after that as long as tax law requires |
Records in features your plan no longer includes | Kept, read-only, as long as the account exists. Changing plans never deletes them. |
Your rights
You can:
See the data we hold about you.
Correct it. Most details can be edited in your profile.
Delete your account (see below).
Get a copy of your data. Email info@gymcity.com; there's no download button yet.
Withdraw consent for WhatsApp, marketing emails or cookies.
Object to how we use your data, or complain to us first, then to the authority in your country.
Email info@gymcity.com from the email or phone linked to your account. We reply within 30 days, or tell you if we need longer. We may ask you to prove who you are first, and we may refuse requests that are clearly unfounded or that the law lets us refuse. For records your gym or trainer keeps, we will pass your request to them.
Deleting your account
In the app: More → Account → Delete My Account. Without the app: email info@gymcity.com from your account email or phone, or follow the steps on our Delete Your Account page.
When you delete your account, we remove your name, contact details, photo and sign-in, and sign you out everywhere. Your chats and reviews stay, but show as from a deleted user. Gyms and trainers keep their own member, invoice and payment records, because they need them for their business and tax. Ask them directly if you want those removed.
If you own a gym or have an active Pro plan, end or transfer it first. We can't delete an account that still runs a business on GymCity.
Children
GymCity accounts are for people aged 13 and over. A gym or trainer may add a member aged 13 to 17 only with a parent's or guardian's consent, and the gym is responsible for getting and keeping that consent. We don't knowingly hold data about children under 13. If you think we do, email info@gymcity.com and we will delete it.
How we protect your data
We encrypt data on its way to and from GymCity. Each gym's data is kept separate from every other gym's, and staff see only what their role allows. No system is completely safe, so we can't guarantee that data will never be lost or accessed without permission. You can read more on our Security page. Keep your password and sign-in codes to yourself. If a breach affects your data, we will tell you and the authorities as the law requires.
Marketing messages
We send marketing emails only if you agreed. Every email has an unsubscribe link. Gyms send WhatsApp messages only if you agreed, and you can ask your gym to stop.
Changes to this policy
When we change this policy, we update the date at the top. If a change matters, we will tell you by email or in the app before it applies.
Contact
CodersBucket Ltd. (GymCity) · codersbucket.com · info@gymcity.com
See also: Terms of Service · Refund Policy · Cookie Policy