Privacy Policy

Who We Are

IronZone is a gym management platform built for Indian gym owners. The platform is owned and operated by Nouman and Yousuf, doing business as IronZone.

For any privacy-related questions or requests, contact us at admin@ironzone.co.in or via WhatsApp at +91 74110 21815.

What Data We Collect

We collect only the data necessary to operate the IronZone platform. This includes:

Gym Owner Account Data:

• Phone number (used for login and communication)
• Gym name, city, and address
• WhatsApp number for automated notifications
• Profile photo (optional)

Member Data (entered by gym owners):

• Full name and phone number
• Date of birth (for birthday wishes)
• Father's name, weight (optional profile fields)
• Profile photo (optional, uploaded via Cloudinary)
• Membership plan and payment history
• Attendance records

Usage Data:

• App usage patterns for error monitoring (via Sentry)
• No advertising or behavioral tracking

How We Use Your Data

We use the data we collect exclusively to:

• Provide and operate the IronZone platform
• Send automated WhatsApp payment reminders and birthday wishes to gym members (on behalf of gym owners)
• Send OTP verification messages for login and PIN reset
• Display attendance, earnings, and member analytics to gym owners
• Monitor and fix app errors to improve reliability

Data Storage and Security

Your data is stored on Supabase — enterprise-grade infrastructure with the following security properties:

• All data encrypted in transit (TLS/HTTPS) and at rest (AES-256)
• Data hosted on servers in Singapore
• Row-level security (RLS) ensures each gym can only access its own data
• No gym can view another gym's members, payments, or attendance

Member profile photos are stored on Cloudinary (secure cloud media storage) with access-controlled URLs.

WhatsApp and OTP messages are sent via MSG91, an enterprise communication platform compliant with Indian telecom regulations (TRAI).

Data Sharing

We share data only with the following service providers, strictly to operate the platform:

• Supabase — database and authentication infrastructure
• Cloudinary — photo storage and delivery
• MSG91 — WhatsApp and OTP message delivery
• Sentry — error monitoring (no personal data included in error reports)
• Vercel — website and app hosting

None of these providers are permitted to use your data for their own purposes beyond providing the service to us.

Gym Member Data

IronZone gym owners enter their members' personal information into the platform. In this relationship:

• The gym owner is the data controller for their members' information
• IronZone acts as a data processor, storing and processing this data on behalf of the gym owner
• Gym owners are responsible for obtaining appropriate consent from their members to store and use their personal information
• Gym members who wish to have their data removed should contact their gym owner directly

Data Retention

We retain your data for as long as your IronZone account is active. If you close your account:

• Your gym and member data will be deleted within 30 days of account closure
• You may request an export of your data before deletion
• Payment and transaction records may be retained for up to 7 years as required by Indian financial regulations

Your Rights

As a gym owner using IronZone, you have the right to:

• Access all data we hold about you and your gym
• Export your member list and payment history at any time (via the app)
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Withdraw consent for WhatsApp communications at any time

To exercise any of these rights, contact us at admin@ironzone.co.in.

Cookies and Tracking

IronZone uses minimal browser storage:

• Authentication tokens stored in browser local storage (required for login to work)
• Branch and session preferences stored locally on your device
• No advertising cookies, no third-party tracking cookies, no analytics cookies

We do not use Google Analytics, Facebook Pixel, or any other advertising or behavioral tracking tools.

WhatsApp Communications

IronZone sends WhatsApp messages to gym members on behalf of gym owners. These messages include:

• Payment due reminders (sent when membership is expiring)
• Birthday greetings
• Member registration links (when a gym owner adds a new member)

All WhatsApp messages are sent through MSG91 using pre-approved Meta Business templates. Recipients can opt out by contacting their gym owner or replying STOP to any message.

Children's Privacy

IronZone is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at admin@ironzone.co.in.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify gym owners via WhatsApp or email. Continued use of IronZone after changes are posted constitutes acceptance of the updated policy.