Privacy policy

Who we are

Gymbo is a product of Material Lab. You can reach us about privacy at damini@materiallab.io. This policy covers the Gymbo iOS app and the getgymbo.com website.

What we collect

• Your account. When you sign up as a trainer, the name and the phone number and/or email you use to sign in.
• Data you enter about your clients. Client names, contact details, the classes you log, and the payments and balances you record. You enter this information, and you decide what to add.
• Waitlist. If you join the waitlist on getgymbo.com, the name and email you submit.
• Website analytics. Privacy-friendly, cookieless analytics (Umami) on getgymbo.com — aggregate page views and events, with no personal profiles and no cross-site tracking.
• Product analytics in the app. We record how the app is used — screens opened, features used, and errors — with PostHog. So we can tell one trainer's sessions apart, this includes your own name and phone number as your account identifier, plus, when an action is about a client, the class or payment amount involved — never anything that identifies that client. Your clients' names, phone numbers, contact details, notes, and internal IDs are never sent. You control this under Settings → Privacy; when it is off, we send no usage events and none of your name, phone number, or activity — the app does still briefly contact PostHog's servers at launch to fetch configuration, which shares your device's IP address but no personal or usage data.
• Technical data. Standard logs (such as IP address and device or browser type) used to keep the service secure and working.

How we use it

To provide and operate Gymbo, maintain your account, respond to support requests, improve the product, keep it secure, and tell you about the service. If you joined the waitlist, we use your email to let you know when it's your turn and share launch updates.

Payments

Gymbo helps you record the payments your clients make to you (cash or UPI) and keeps the running balance for your bookkeeping. Gymbo does not process payments, move money, or store card or bank details — the payment happens directly between you and your client.

How we share it

We do not sell your data. We share it only with service providers who help us run Gymbo — our cloud database and hosting (Supabase), sign-in (Google), analytics (Umami on the website, PostHog in the app), and the AI providers described below — under appropriate confidentiality terms, and where required by law. We never contact your clients.

AI features and the providers behind them

Some Gymbo features are powered by specialist AI providers. When you use these features, a limited amount of your data is sent to the provider so they can return a result. We only send what the feature needs — not your whole client list. Here is exactly who we use, for what, and what we send them.

AI assistant (chat) — Anthropic (Claude)

• What it does: answers your questions about your business inside the app.
• What we send: your typed question, plus a fixed context snippet attached to every question you ask the assistant — a short summary of your top few clients (their name and class counts, ordered by outstanding balance) and today's session client names — everyone on today's schedule, however many that is — so the assistant can answer usefully. This snippet is the same on every question; it isn't tailored to what you actually asked. We do not send your full roster.
• Per-client control: any client you mark as opted out of AI is never included in what we send.
• Where it's processed: on Anthropic's infrastructure, located outside India, in the United States.
• Retention: your data is processed to answer your question and is handled under Anthropic's commercial terms. We are putting a formal data-processing agreement in place with Anthropic; once it is finalised we will update this notice with the specific retention terms.

Voice input — Groq

• What it does: turns what you speak into text (speech-to-text) so you can add notes and fill fields by voice instead of typing.
• What we send: the microphone audio you record for that action, which is converted to text.
• A note on sensitive data: voice notes can sometimes include health-related details about a client. Please avoid dictating information you would not want processed by a third-party provider.
• Where it's processed: on Groq's infrastructure, located outside India, in the United States.
• Retention: Groq has signed a zero-data-retention agreement with us — your audio is processed to produce the transcription and is not retained or used to train models.

The rest of our infrastructure

• Supabase — hosts our database, sign-in, and backend services. Your clients, schedule, payments, and attendance records are stored here, on infrastructure located outside India, in Singapore.
• Google — used only for Google Sign-In, if you choose it, to authenticate your account.
• PostHog — product analytics. The iOS app sends this to PostHog's European Union region, so that data is processed in the EU. A data-processing agreement with PostHog is in place.

You can ask us at any time what data we hold and request its deletion — see "Your choices" below.

Your clients' information

The client records you enter are yours. We process them on your behalf so the app can work. You are responsible for having a lawful basis and any consent needed to store and use your clients' information in Gymbo.

Storage and security

Your data is stored on reputable cloud infrastructure, and we use reasonable technical and organisational measures to protect it. No method of storage or transmission is ever 100% secure, but we work to keep your data safe.

Keeping and deleting your data

We keep your data while your account is active. You can export your data from the app at any time, and you can ask us to delete your account. After deletion we remove or anonymise your data within a reasonable period, except where we must keep some records to meet legal obligations.

Your choices

You can access, correct, export, or delete your data — in the app or by emailing us. If you're on the waitlist and don't want our emails, you can unsubscribe at any time.

Children

Gymbo is for professional trainers and is not directed to children. Please don't use Gymbo if you are under 18.

Where we operate

Gymbo is operated from India, and your data may be processed there and by our service providers outside India. Specifically: your account and app data are stored in Singapore (Supabase); the AI features described above are processed in the United States (Anthropic, Groq); app usage analytics are processed in the European Union from the iOS app (PostHog); and login SMS is sent from India (MSG91).

Changes to this policy

If we make material changes, we'll update this page and the date above. Please check back from time to time.

Contact

Questions about your privacy? Email damini@materiallab.io.

To raise a privacy question or grievance, contact Kaushik at grievance@getgymbo.com. We aim to respond within 30 days.