Privacy policy

GymSuite by Craft & Code · Last updated 8 November 2026

Who we are

GymSuite is gym management software made by Craft & Code, India. Gyms use it to run memberships, attendance, billing and training, and their members use the GymSuite app (Android, and the web app at gym.craftncode.in/m). Gym staff use the GymSuite Office app. Your gym decides what is recorded about you; we store and process it for the gym.

What we collect

  • Profile: your name, phone number, email, gender and date of birth, as entered by your gym or by you.
  • Membership and billing: your plan, validity, invoices and payments recorded by the gym. The app does not take card or UPI details.
  • Attendance: the time you check in and out of the gym.
  • Training and body data: workout plans, the sets and weights you log, and body measurements your trainer records (weight, body fat, girths).
  • Sign-in: if you use Google sign-in we receive your Google email address and name, only to match you to your gym membership.
  • Camera: used only to read the gym's check-in QR code. Images are never saved or uploaded.

GymSuite Office (the staff app)

Gym owners, managers, front-desk staff and trainers use the GymSuite Office app to run the gym. It works with the same records described above, on the gym's behalf. For staff themselves we keep their name, phone number, email, role and permissions, shift punch-in times, and the devices they are signed in on, so the owner can see and revoke them. The camera is used only to read member QR codes at check-in; images are never saved or uploaded. Staff accounts are created by the gym owner; to delete a staff account, ask the owner or email us.

How we use it

Only to provide the service: showing your membership, recording check-ins, tracking your workouts and progress, and letting your gym contact you about your membership. We do not show ads, we do not sell or share your data with advertisers, and the app contains no third-party analytics or tracking.

Where it is stored

On servers in India (Mumbai). Data is encrypted in transit (HTTPS). The app keeps only a sign-in token on your phone, in the device's secure storage. Your gym's staff can see your records; other gyms cannot.

How long we keep it

For as long as you are a member of the gym, and after that for as long as the gym needs it for its accounts (for example tax records), unless you ask for it to be deleted.

Delete your account and data

You can ask for your account and data to be deleted at any time:
  • ask your gym's front desk, or
  • email support@craftncode.in from the email or phone number on your membership, naming your gym.

We delete your profile, attendance, workout and body data within 30 days. Invoices the gym must keep by law are kept without your contact details. Signing out of the app removes the sign-in token from your phone.

Children

GymSuite is meant for gym members aged 13 and over. A gym that registers a younger member does so with a parent's consent.

Contact

Questions about this policy: support@craftncode.in. If this policy changes, we will update the date above.