Privacy Policy & Data Protection

01. Information We Collect

To provide gym discovery, pass booking, and partner verification services, Bhamra Fit collects the following categories of information:

• Account Information: Name, email address, phone number, and profile picture created during registration.
• Pass & Transaction Data: Booking history, purchased gym passes, check-in timestamps, payment receipts, and transaction IDs.
• Device & Usage Data: Device model, operating system version, app logs, and IP address for security and diagnostic purposes.

02. How We Use Your Data

We process your personal information strictly to fulfill platform operations and deliver a seamless fitness experience:

• Generating digital QR passes and verifying entry check-ins at Partner Gyms.
• Processing payment transactions and sending digital receipts.
• Sending essential push notifications (e.g. pass activation alerts, gym entry confirmations, expiry reminders).
• Preventing fraudulent pass redemptions, unauthorized account access, and platform misuse.

03. Data Sharing & Third Parties

We value your privacy and do not sell or rent your personal information to third parties. Data is shared only under strict conditions:

• Partner Gyms: When you redeem a pass at a gym, the host facility receives your member name and pass verification code to validate your entry.
• Payment Processors: Payment details are processed directly by certified payment gateways (e.g. Razorpay) adhering to PCI-DSS security standards.
• Legal Compliance: We may disclose information if required by law, subpoena, or to protect the safety of users and partner facilities.

04. Location Services & Device Permissions

With your explicit consent, Bhamra Fit accesses your device geolocation to show nearby gyms, calculate distances, and provide turn-by-turn directions.

Control: You can enable, disable, or adjust location permissions anytime in your device system settings or app preferences.

05. Data Security & Retention

We implement industry-standard administrative, technical, and physical security measures, including HTTPS encryption, tokenized authentication, and secure cloud storage to protect your data against unauthorized access, loss, or disclosure.

06. Your Privacy Rights & Contact

You have full authority over your data. You may request access, correction, or deletion of your personal information at any time.