Privacy Policy
This policy explains how GymOS, a product of AYCAS (AYCAS Investments), handles personal information. GymOS is software a gym, studio or personal trainer uses to run their business. In data-protection terms the gym is the controller of its members’ information and GymOS is the processor acting on the gym’s instructions. This policy covers both the information we hold about our direct customers (gym owners and staff) and the member information we process on their behalf.
What we collect
- Account details — name and email of the gym owner and staff who sign in.
- Member details — name, phone and email a gym records for its members.
- Health & fitness data — measurements, goals, training and nutrition notes a gym or trainer chooses to record. This is sensitive personal data and is only collected with the member’s consent, captured at enrolment.
- Activity — check-ins, class bookings and personal-training sessions.
- Payment records — amounts, methods and references a gym records. GymOS records payments; it does not process card payments and never stores card numbers, PINs or banking credentials.
How we use it
Solely to provide the service: to let a gym manage its members, schedule and payments, and to let members use their own app. We do not sell personal information, and we do not use member data for advertising.
Where it is stored
GymOS runs on Convex (database and server functions) and uses Clerk for sign-in. These providers host data on infrastructure located in the United States, so personal information is transferred and stored outside Zimbabwe. We rely on these providers’ security and contractual protections. Where GymOS sends reminders by email or WhatsApp, it uses third-party delivery providers; those features are off unless a gym enables them and its members opt in.
Your rights
Members may ask their gym to access, correct or delete their information. GymOS supports data export and erasure on request, and gym owners can action these from within the product. To exercise a right, contact your gym, or reach us at support@aycas.app and we will route it to the relevant gym.
Retention & security
We keep information for as long as a gym uses GymOS and as needed for legitimate business and legal purposes, after which it is deleted or anonymised. Access is restricted to the relevant gym; one gym can never see another gym’s data.
Children
A gym may enrol members under 18. Where it does, the gym is responsible for obtaining the consent of a parent or guardian before recording a minor’s information.
Zimbabwe data protection
We aim to handle personal information in line with the Zimbabwe Data Protection Act and the requirements of its regulator (POTRAZ). If you have a concern we have not resolved, you may raise it with the regulator.
Changes & contact
We may update this policy and will revise the date above when we do. Questions about privacy: support@aycas.app.