Privacy Policy — Iron Manager

Last updated: August 3, 2026

Iron Manager ("the App") is a gym management application used by gym owners and their staff to manage members, attendance, payments, and related business operations. This policy explains what data the App and its backend services collect, how it is used, and how it is protected.

1. Who this policy applies to

The App is used by gym owners, employees, and trainers ("Staff Users") to manage their gym's members ("Members"). Members themselves generally do not install or log into the App directly — their data is entered and managed by Staff Users on their behalf.

2. Information we collect

• Account information (Staff Users): name, phone number and/or email, role, and login credentials.
• Member records: name, contact number, photo (if uploaded by staff), membership/subscription details, and payment history — entered by Staff Users for gym operations.
• Attendance data: check-in/check-out timestamps. Where a gym uses a biometric attendance device (fingerprint or face recognition hardware) at its premises, the device itself performs the biometric match; only the resulting attendance event (matched member and timestamp) is sent to our servers — raw biometric templates are not transmitted to or stored by the App or backend.
• Photos: the App may request camera/photo library access so staff can upload a profile photo for a member.
• Payment records: amounts, dates, and payment method labels entered by staff for tracking membership fees. The App does not process card payments itself and does not store card or bank credentials.

3. How we use this information

Data is used solely to operate the gym management features of the App: tracking memberships, attendance, payments, reminders, and related reporting. Each gym's data is isolated from other gyms using the platform.

4. WhatsApp / messaging features

The App may let staff send reminders (e.g. payment or renewal reminders) to a member's phone number via WhatsApp. This opens WhatsApp with a pre-filled message; message content is not stored by or transmitted through any third party other than WhatsApp itself.

5. Data sharing

We do not sell member or staff data. Data is not shared with third parties except:

• service providers necessary to operate the App (e.g. hosting/infrastructure providers), bound to protect the data;
• where required by law.

6. Data storage and security

Data is stored on secured servers and is not publicly accessible. Access within the App is restricted based on each Staff User's role and permissions.

7. Data retention

Member and attendance records are retained for as long as the gym's account remains active, to support ongoing business and reporting needs. A gym owner may request deletion of their gym's data by contacting us.

8. Children's data

The App is intended for use by gym staff (adults). Member records may include minors registered as gym members by their gym; this data is managed solely by the gym's staff for legitimate business purposes and is not used for any other purpose.

9. Your rights

Gym owners and staff may request access to, correction of, or deletion of data associated with their account or gym by contacting us using the details below.

10. Contact us

For questions about this policy or your data, contact: malwareclub22@gmail.com