Data Privacy Policy
Last Updated: August 01, 2025
1. Introduction
Welcome to Unimanage Gym Management Software ("Unimanage", "we", "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our website, software, and related services (collectively, the "Services"). By using the Services, you agree to the practices described in this policy.
2. Scope & Definitions
Personal Data means any information that identifies or relates to an identifiable individual. Customer refers to the gym/business that subscribes to our Services. End Users are staff or members who access the application under a Customer account.
3. Information We Collect
- Account & Contact: name, email, phone, business details.
- Operational: membership plans, attendance, billing, transactions.
- Authentication: usernames, role/permissions; passwords stored as hashed values.
- Technical: device, browser type, IP address, logs for security and diagnostics.
- Support: tickets, emails, attachments you submit to us.
4. How We Use Data
- Provide, maintain, and improve the Services.
- Authenticate users and enforce access controls.
- Process payments and generate invoices/reports.
- Communicate about updates, security alerts, and support.
- Comply with legal obligations and prevent misuse.
5. Legal Bases
Where applicable, we rely on: (a) contract necessity, (b) legitimate interests (e.g., securing and improving Services), (c) consent (where required), and (d) legal obligations.
7. Security
- Encryption in transit (HTTPS/TLS) and at rest for sensitive fields.
- Role-based access control and least-privilege principles.
- Network firewalls, periodic updates, and security monitoring.
- Audit logs for critical actions and sign-ins.
8. Data Retention
We retain data for as long as a Customer account remains active or as needed to provide the Services. Upon termination or valid request, data is deleted or anonymized per internal policy, subject to legal retention requirements.
9. Your Rights
Subject to local laws, you may request access, correction, export, or deletion of your personal data. Customers can also self-export selected data from within the product. For requests, see Contact below.
11. Children’s Data
Our Services are not intended for children under the age of 16. We do not knowingly collect personal data from children.
12. International Transfers
Where data is transferred across borders, we use appropriate safeguards such as contractual clauses to protect your information.
13. Changes to This Policy
We may update this policy from time to time. Material changes will be notified via the product or email.