Gym Ops Privacy Policy

1. Who is responsible

Alimenta App, LLC ("we") operates Gym Ops at https://gym.alimenta.app. Address: 1111B S Governors Ave # 34591, Dover, DE 19904, USA. Privacy and support email: diegotorresdurante@gmail.com. Phone: +1 360 590 9318.

Each gym that uses Gym Ops decides which member records it keeps and why. For those records the gym is the controller, and we process them on the gym’s behalf and under its instructions. The gym may have its own privacy notice.

2. Data we process

• Account: name, email address, profile picture, account identifier, roles and permissions.
• Member record, entered by gym staff: name, email, phone, emergency contact, paper waiver status, memberships, schedules, classes and, if the gym takes one, a photo used to identify you at the front desk.
• Payments: amounts, dates, methods and references of payments the gym records. Gym Ops does not process cards or receive money from members.
• Check-ins: your QR code and the dates and results of each check-in and class attendance.
• Technical data: session cookies, language and theme preferences in your browser, and technical logs needed to run the service.

We do not ask for sensitive data such as health information. Please do not enter it in free-text fields.

3. Data from your Google account

If you choose “Continue with Google”, Google shares with us, through our authentication provider Clerk, only: your name, your email address, your profile picture and your Google account identifier (openid, email and profile scopes).

We do not request access to Gmail, Contacts, Drive, Calendar or any other Google data or service.

• Use: only to create your account, sign you in, link it to your record at your gym using your verified email, and show your name and picture inside Gym Ops.
• Storage: kept in Clerk (authentication) and in our Convex database, on servers in the United States, for as long as your account exists. When your account is deleted, it is erased within 30 days.
• We do not sell, rent or share your Google data with third parties for advertising or marketing, and we do not use it for advertising, commercial profiling or training artificial-intelligence models.

Gym Ops’ use of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

You can remove Gym Ops’ access at any time at https://myaccount.google.com/permissions. This stops future Google sign-ins but does not delete your account; to do that, see section 7.

4. Why we use data

We use data to authenticate you, manage permissions, link your account to your gym, manage memberships, schedules and classes, record payments and check-ins, show you your information, provide support and protect the service. The emergency contact lets the gym reach someone in an emergency.

We do not use your data for advertising or sell lists. If we want to use it for another purpose, we will tell you first and, where the law requires it, ask for your consent.

5. Who we share data with

• Authorized staff at your gym, according to the permissions the gym gives them.
• Providers that run the service on our behalf: Clerk (accounts and authentication), Convex (database and functions) and Vercel (web hosting). They are in the United States and only use data to provide their service to us.
• Google, if you use Google sign-in. Some gyms’ public pages show a Google Maps map, which shares your IP address with Google when it loads.
• Authorities, when a valid law or order requires it.

We do not sell or rent personal data.

6. Where and how long we keep data

Data is stored on our providers’ servers in the United States. We keep your account data while your account is active. Member records, payments and check-ins entered by a gym are kept while the gym uses Gym Ops or needs them for its legal obligations, and are then deleted or anonymized.

An expired membership does not automatically erase the gym’s payment or check-in history. Our providers’ backups are deleted on their regular cycles.

7. Your rights and deleting your account

You can access, correct or delete your data, object to its use, or withdraw your consent. To do so, or to ask us to delete your account, email diegotorresdurante@gmail.com from your account’s email address with the subject “Privacy”, saying what you are requesting.

We reply within 20 business days. If you ask us to delete your account, we delete it and your sign-in data, including data received from Google, within 30 days of your request. Records your gym needs to keep, such as recorded payments, are unlinked from your account and remain the gym’s responsibility; you can also ask your gym to delete them.

Never send passwords, QR codes or ID documents by email. If you are not satisfied with our reply, you may contact the Mexican personal-data protection authority or the authority where you live.

8. Security

We use encrypted connections (HTTPS), authentication, role-based permissions and restricted access to member photos and data. No system is completely secure; if we detect an incident that significantly affects your data, we will inform you or your gym.

9. Cookies and browser storage

We use cookies and local storage needed to keep you signed in and remember your language and theme. We do not use advertising cookies. If you block them, you may not be able to sign in. Clearing your browser data does not delete your account.

The camera is only used, with your permission, to read QR codes at the front desk; there is no facial recognition.

10. Children

Gym Ops accounts are not intended for people under 18. If a gym registers a minor, the gym is responsible for having the authorization of their parent or guardian.

11. Changes to this policy

We will post any change on this page with its update date. If the change is significant, we will announce it inside Gym Ops or by email before it applies.