Privacy Policy

1. Scope

This Privacy Policy explains how Adrenaline Systems handles personal and business data when gym owners, admins, staff, trainers, members, and prospects interact with GymOS or with public experiences powered by GymOS.

2. Types of Data We Process

We may process:

• Owner, admin, and staff identity and account data
• Gym business details, branch records, plan catalogs, pricing, trainer records, and operational settings
• Member and prospect data entered by you or collected through your public pricing, signup, inquiry, or checkout flows
• Payment, order, invoice, proof, settlement, and billing records
• Connected channel data for integrations such as Telegram, WhatsApp, email, and other operational notifications
• Usage logs, IP addresses, browser details, device identifiers, session data, and security telemetry
• Support requests, audit trails, error reports, and abuse-prevention records

3. Sources of Data

We receive data directly from you, from your staff, from members or prospects using your public or private flows, from connected integrations, from payment providers, and from the devices and browsers used to access the platform.

4. How We Use Data

We may use data to:

• Provide, secure, maintain, and improve GymOS
• Create and manage owner accounts and gym workspaces
• Operate memberships, trainer workflows, commerce, approvals, attendance, and branch management
• Process billing, payment verification, renewals, and reconciliation
• Generate and deliver inquiry, signup, checkout, and lead notifications to your connected operational channels
• Prevent fraud, spam, abuse, charge disputes, and unauthorized access
• Provide support, debugging, auditing, backups, and compliance handling

5. Public Pricing and Lead Activity

If your public pricing or signup journeys collect a prospect’s name, phone number, email address, plan interest, or similar interaction data, GymOS may process that information and route it to your account, dashboards, or connected channels so you can follow up.

This can include inquiry events generated when a prospect requests complete details, begins verification, enters or autofills a phone number, or starts a purchase or signup flow.

6. Sharing

We may share data with:

• Your authorized users and staff
• Hosting, storage, analytics, security, messaging, and payment service providers
• Professional advisers, auditors, acquirers, or authorities where reasonably necessary or legally required

We do not sell personal data.

7. Your Role as Business Controller

If you use GymOS for a gym or fitness business, you are generally the controller of the member, trainer, staff, and prospect data collected through your workspace. You are responsible for your notices, permissions, retention decisions, contact practices, and lawful basis for processing. Adrenaline Systems generally acts as your service provider or processor for that data, while also processing some information for platform security, billing, support, and legitimate business operations.

8. Retention

We retain data for as long as needed to provide the service, maintain account records, perform billing and reconciliation, resolve disputes, investigate abuse, satisfy legal obligations, and restore backups. Retention periods vary by record type.

9. Security

We use reasonable technical and organizational safeguards such as access controls, encrypted transport, logging, monitoring, and infrastructure protections. No platform can guarantee absolute security.

10. Cookies and Similar Technologies

We use cookies and similar storage for authentication, session continuity, preference handling, abuse prevention, and service analytics. Browsers and password managers may also autofill fields based on their own stored data.

11. Rights and Requests

Depending on applicable law, you may have rights to access, correct, delete, export, or restrict certain personal data. Where we process data on behalf of a gym customer, we may direct the request to that customer first.

12. Contact

For privacy questions or requests, use the contact details provided on the platform.