Legal
Privacy Policy
We take your data seriously. This policy explains what we collect, why we collect it, and how we protect it — in plain language.
Last updated: May 2026
Information We Collect
Account information: name, email address, and password when you register.
Gym data: member profiles, QR card assignments, subscription tiers, and entry logs entered by gym owners and staff.
Payment information: transaction records and revenue data processed through the platform. We do not store raw card details.
Usage data: pages visited, features used, and session duration to improve the platform.
Device information: browser type, operating system, and IP address for security and analytics.
How We Use Your Information
To operate and maintain the GymTairo platform and deliver the services you signed up for.
To process transactions and generate revenue reports within your gym account.
To send important service updates, security notices, and support responses.
To analyze usage patterns and improve platform performance and features.
To comply with legal obligations under Philippine law, including the Data Privacy Act of 2012 (Republic Act 10173).
Data Sharing
We do not sell, rent, or trade your personal data to third parties. We may share data with trusted service providers (cloud hosting, analytics) under strict confidentiality agreements. We will disclose data if required by Philippine law or a valid court order.
Data Storage and Security
Your data is stored on secure servers. We use industry-standard encryption in transit (TLS) and at rest. Access is restricted to authorized personnel only. Multi-tenant data isolation ensures no gym can access another gym's data.
Your Rights Under RA 10173
Right to be informed about how your data is collected and used.
Right to access the personal data we hold about you.
Right to correct inaccurate or incomplete data.
Right to erasure or blocking of data when no longer necessary.
Right to data portability — you can request an export of your data.
Right to lodge a complaint with the National Privacy Commission (NPC).
Data Retention
We retain account and gym data for as long as your subscription is active. Upon account deletion, we remove personal data within 30 days unless retention is required by law. Anonymized aggregate data may be retained indefinitely for analytics.
Cookies
We use essential cookies to keep you logged in and maintain session security. Analytics cookies help us understand how the platform is used. You can manage cookie preferences through your browser settings or our Cookie Policy page.
Contact
For privacy concerns, data access requests, or complaints, contact our Data Protection Officer at privacy@gymtairo.com. We will respond within 15 business days as required by the NPC.