Privacy Policy

Last Updated: July 22, 2026

Zoulfit - Gym Management Software

Zoulfit values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our platform, in compliance with the Google Play Developer Policy and Apple App Store Review Guidelines.

1. Information We Collect

We collect the following categories of information when you use the Zoulfit app or website:

Account & profile data: name, email address, phone number, date of birth, and profile photo.
Business/gym data: gym details, staff records, and member records entered by gym administrators.
Fitness & membership data: workout plans, diet plans, attendance and check-in history, membership and billing details.
Device & usage data: device model, operating system, app version, IP address, and log/crash data.
Location data: only where you have granted permission (see Location Permissions below).

2. How We Use Your Data

To provide, operate, and maintain the Zoulfit app and platform
To process check-ins, attendance, and membership billing
To personalize workout and diet plan recommendations
To send service-related communications and support responses
To send optional push notifications (see below)
To detect, prevent, and investigate fraud, abuse, or security incidents
To comply with applicable legal and tax obligations

3. Location Permissions

The Zoulfit app may request access to your device's location, for example to verify that a gym check-in is being performed at or near a registered gym branch, or to help you find nearby gym branches.

Location access is opt-in — the app will ask for your permission before accessing location, and it will only be requested at the time the feature is used.
Location data is used strictly for the stated check-in/branch-detection purpose and is not used to build an ongoing location history or shared with advertisers.
You can deny or revoke location permission at any time from your device's Settings. Some check-in features may not function without it.

4. Push Notifications

We use push notifications to inform you about check-in reminders, membership renewals, workout/diet plan updates, and important account or billing alerts.

You can opt out of push notifications at any time from your device's system settings (Settings → Notifications → Zoulfit) or from within the app's notification preferences. Opting out will not affect your ability to use core app features.

5. Data Security

Data is encrypted in transit using TLS/HTTPS.
Sensitive data is encrypted at rest within our database and storage infrastructure.
Access to personal data is restricted to authorized personnel through role-based access controls.
We conduct regular reviews of our security practices, although no method of transmission or storage is ever 100% secure.

6. Cookies & Tracking Technologies

On our website, we use cookies and similar tracking technologies to enhance user experience and analyze site performance. See our Cookie Policy for full details.

7. Third-Party Services

Firebase (Google): used for push notifications, crash reporting, and app analytics. See the Firebase Privacy Policy.
Google Play Services: used for app distribution, licensing, and Android platform integrations on the Play Store. See the Google Privacy Policy.
Apple Services / App Store: used for app distribution, in-app purchases, and sign-in on iOS. See the Apple Privacy Policy.
Payment processors: used to securely process membership and subscription payments. We do not store your full card details.
Analytics & marketing platforms: such as Google Analytics and Meta, used on our website to understand traffic and campaign performance.

8. Data Retention

We retain personal data only as long as necessary to provide our services. Billing/invoice records, transaction history, and related financial records may be retained for longer periods as required by applicable tax and accounting laws — typically up to 7 years — and anti-fraud or security logs may be retained for a reasonable period to protect the integrity of our platform. All other data is deleted or anonymized once it is no longer needed for the purpose it was collected.

9. Your Rights

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of your account and associated data — see our Delete Account page for step-by-step instructions
Request a copy of your data in a portable, machine-readable format
Opt out of marketing communications at any time by using the unsubscribe link or contacting us
Withdraw previously given consent, where applicable

10. Children's Privacy

Our services are not directed to, and are not intended for use by, individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

11. International Data Transfers

Your information may be stored and processed in countries other than your own, subject to appropriate safeguards and applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated policy on this page with a revised "Last Updated" date, and material changes will be communicated in-app or by email.