Mobile App Privacy Policy

GymVista Android App – Complete Privacy & Permission Disclosure

Last Updated: May 31, 2026

This policy applies exclusively to the GymVista mobile app for Android. We list every permission declared in our app manifest, explain why it is required, and how your data is treated.

---

1. Permissions We Use (Full List)

The following table details all Android permissions the app may request. You can revoke any permission at any time from your device settings.

2. Wi‑Fi Beacon Attendance (Card‑Free Check‑in)

GymVista offers an innovative card‑free attendance system using gym‑deployed Wi‑Fi beacons (e.g., NodeMCU devices). When you choose to mark your attendance:

• The app scans for nearby Wi‑Fi networks with a specific naming pattern (starting with a fixed prefix).
• If a valid gym beacon is detected, the app sends a secure attendance request to our servers – confirming you are physically at the gym.
• We never collect your GPS location or track your movements. The location permission is only required by Android to perform Wi‑Fi scanning.
• All scanning happens only when you actively tap the “Mark Attendance” button – no background scanning occurs.

This method eliminates the need for physical RFID cards and provides a seamless, hygienic check‑in experience.

3. How We Use Collected Data

All data collected through these permissions is used strictly for:

• Managing your gym membership (attendance logs, profile, subscription status).
• Displaying your step count and fitness progress.
• Generating and saving invoice PDFs on your device.
• Ensuring a secure environment by detecting rooting or debugging tools.
• Sending you important notifications (with your consent).

4. Payments & Subscription Fees

GymVista allows you to pay for the following services directly through the app:

• Gym membership subscriptions – Monthly or yearly fees for physical access to the gym.
• Personal Training (PT) sessions – One‑time or package purchases for professional training.
• Extra time billing – Charges for additional gym usage beyond your plan limits.

All payments are processed securely by Razorpay (https://razorpay.com), a PCI‑DSS compliant payment gateway. We do not collect, store, or have access to your credit/debit card details or UPI credentials. Razorpay’s privacy policy applies to your payment information and can be found at https://razorpay.com/privacy.

Transaction records (amount, date, service purchased) are stored on our servers for billing and legal compliance, but no sensitive financial data is retained by GymVista.

5. Data Sharing & Storage

We do not sell your personal data. Limited sharing occurs with:

• Cloud hosting – Your attendance logs and profile are stored on secure servers (encrypted).
• Payment gateways – Razorpay, Stripe, or UPI apps to process subscription fees.
• Firebase Cloud Messaging – To deliver push notifications.

Step data never leaves your device unless you explicitly export it. Beacon scan results are not stored – only the attendance confirmation is logged.

6. Data Retention Policy

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Your profile data, attendance logs, and fitness metrics are retained for as long as your account remains active.
• Transaction Data: Invoice and payment records are retained for a minimum of 5 years to comply with legal, tax, and accounting obligations.
• Account Deletion: Upon your request to delete your account (via our Contact and Support page or by emailing contact@saasvista.in), all personally identifiable information, including profile photos and attendance history, will be permanently deleted from our active servers within 30 days.
• Inactive Accounts: Accounts that remain completely inactive and without an active subscription for 24 months will be automatically scheduled for deletion.

7. Your Privacy Controls

• Revoke any permission via Settings > Apps > GymVista > Permissions.
• You can disable step tracking by turning off the “Step Tracker” feature inside the app – this stops the foreground service.
• Request account deletion: To delete your account and associated data, please visit our Contact and Support page, enter your registered email ID, and select the "Account Deletion" option to submit your request. Alternatively, you can email contact@saasvista.in.
• Opt out of push notifications in the app’s settings or system notification settings.

8. Children’s Privacy

GymVista is not intended for children under 13. We do not knowingly collect data from minors. If you are a parent and believe your child has used the app, contact us to remove the data.

9. Policy Updates

We may update this privacy policy occasionally. Changes will be reflected here with an updated “Last Updated” date. Continued use of the app after changes constitutes acceptance.