Privacy Policy

This Privacy Policy explains how Oxyye ("Oxyye", "we", "us") collects, uses, shares, and protects information when you use our website and our gym-management platform (the "Service"). We act as a data fiduciary for the account information of the gym owners and staff who sign up with us, and as a data processor for the member data that a gym stores in Oxyye on its own behalf.

1. Information we collect

• Account information — name, email, phone number, and role of gym owners, trainers, and staff who register.
• Gym & member records — information a gym enters about its business and members, such as names, contact details, membership plans, attendance, and fitness details.
• Payment information — billing is processed by our payment partner. We store transaction metadata (amounts, status, timestamps) but do not store full card numbers.
• Usage & device data — log data, IP address, browser type, and basic analytics needed to run and secure the Service.
• Communications — messages you send us via forms, email, or demo requests.

2. How we use information

• To provide, maintain, and improve the Service.
• To authenticate users and keep accounts secure.
• To process payments and send billing and renewal notifications.
• To respond to enquiries and provide customer support.
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with legal obligations.

We do not sell personal data. We do not use member data stored by a gym for any purpose other than providing the Service to that gym.

3. Sub-processors we rely on

We use a small set of trusted infrastructure providers to run Oxyye:

• Supabase — authentication and database hosting.
• Vercel & Railway — application hosting.
• Razorpay — payment processing.
• Resend — transactional email delivery.

Each provider processes data only as needed to deliver its part of the Service.

4. Data retention

We retain account and gym data for as long as your account is active. If you close your account, we delete or anonymise personal data within a reasonable period, except where we must retain it to meet legal, tax, or accounting requirements.

5. Your rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may request to access, correct, or delete your personal data, or withdraw consent. Gym members should contact their gym first, since the gym controls that data; we will assist the gym in fulfilling such requests. To exercise your rights with us directly, email hello@oxyye.com.

6. Security

We use industry-standard safeguards to protect data, described in our Security page. No method of transmission or storage is completely secure, but we work continuously to protect your information.

7. Children

The Service is intended for gym businesses and their adult staff. Where a gym stores data about members who are minors, the gym is responsible for obtaining any consent required by law.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.

Questions about this page? Email us at hello@oxyye.com.